Open tender · Notice 099362-2026
Penetration Testing
- Value
- £80k
- Closes
- 24 Nov 2026 (16 days)
- Where
- Wales
- Lots
- 1
- Suitable for SMEs
- Yes, says the buyer
- Contract
- 11 Dec 2026 – 10 Dec 2030
In plain English
The Senedd Commission (Welsh Parliament) wants an independent penetration testing service to plan, carry out and report on security tests of its IT systems, including external and internal networks, web applications, remote access, wireless and physical locations. The contract is estimated at £80,000 and runs from 11 December 2026 to 10 December 2030; bids are due by 24 November 2026 at 10:00.
Good fit for: Cyber security firms offering penetration testing and security assurance services.
Written with AI from the official notice. Check the notice before relying on it.
What the buyer says
The Senedd is looking to procure a penetration testing service to provide independent assurance over the security of its technology estate and to identify vulnerabilities that may expose the organisation to cyber security risk. The contract will include the planning, execution and reporting of penetration testing activities against Commission systems and services. Testing may include external infrastructure, internal infrastructure, web applications, remote access services, wireless technologies and physical locations as required. These tests may be performed in white, grey, or black box scenarios. The Senedd Commission is seeking to procure an independent penetration testing service capable of identifying vulnerabilities, validating the effectiveness of security controls and providing assurance over the resilience of the Commission's technology estate. The service should provide realistic security assessments that reflect the techniques and methodologies employed by malicious actors, whilst ensuring testing is undertaken in a controlled manner that minimises risk to operational services. The service should support the Commission's cyber security strategy by identifying weaknesses before they can be exploited, providing prioritised remediation recommendations and supporting continuous improvement of the organisation's overall security posture.
Getting the documents
etenderwales.ukp.app.jaggaer.com/web/login.shtml (the buyer's own site, usually free to register).
Procedure: Below threshold - open competition (Open: anyone can bid (a lower-value contract with lighter rules)). Published 21 Oct 2026.
What similar contracts went for
Similar contracts went for £32k to £120k (3 since 2026; 2 won by small firms).
| Contract | Won by | Value | Awarded |
|---|---|---|---|
| Penetration Testing Services Money and Pensions Service | Prism Infosec Ltd | £120k | 19 Oct |
| Penetration Testing London Borough of Camden | Secon Cyber Security Limited SME | £89k | 6 Aug |
| Penetration Testing Service South Tyneside Borough Council | Sapphire Technologies Limited SME | £32k | 4 Aug |
From the award notices on Find a Tender and Public Contracts Scotland. Values are as each notice states them and cover the contract's whole term: most notices give the value before VAT, but about one in seven gives only a figure including VAT. AI picked these as the same kind of work and can be wrong, so check what each one included before you price.
Similar open tenders
- Network Operating System (Cisco) · East Riding of Yorkshire Council · closes 11 Nov
- Company Information Database Subscription · Competition and Markets Authority · closes 11 Nov
- Theatre Event Management Software · Surrey Heath Borough Council · closes 11 Nov
- ICT Data Platform Consultancy Services · Ayrshire College · closes 11 Nov
- "Your Education Technology" An Open Framework (PA 2023) for the provision of ICT products, services, and solutions. · Nexus Multi Academy Trust · closes 11 Nov
Want tenders like this, matched to your firm?
Winnable emails the few new tenders that fit you each weekday, with the catch spelled out. £29/month after a 14-day free trial (no card needed).