Penetration Testing

What the buyer is asking for

The Senedd is looking to procure a penetration testing service to provide independent assurance over the security of its technology estate and to identify vulnerabilities that may expose the organisation to cyber security risk. The contract will include the planning, execution and reporting of penetration testing activities against Commission systems and services. Testing may include external infrastructure, internal infrastructure, web applications, remote access services, wireless technologies and physical locations as required. These tests may be performed in white, grey, or black box scenarios. The Senedd Commission is seeking to procure an independent penetration testing service capable of identifying vulnerabilities, validating the effectiveness of security controls and providing assurance over the resilience of the Commission's technology estate. The service should provide realistic security assessments that reflect the techniques and methodologies employed by malicious actors, whilst ensuring testing is undertaken in a controlled manner that minimises risk to operational services. The service should support the Commission's cyber security strategy by identifying weaknesses before they can be exploited, providing prioritised remediation recommendations and supporting continuous improvement of the organisation's overall security posture.

How this is scored

Published by the buyer. A winning response is written to these weightings, not to the question.

• 40%costContract CostAs outlined in the Procurement documents
• 60%qualityQualityAs outlined in the Procurement documents

How contested is this?

Buyers publish how many bids they received. Across 35 comparable procurements we can tell you the typical field size, how often one of these goes uncontested, and whether the buyer awards on price or on quality.

Timeline

3 published dates · Europe/London

1. Tender notice published16 days ago

   21 Oct 2026, 11:21 BST
2. Clarification questions byin 11 days

   17 Nov 2026, 10:00 GMT
3. Submission deadlinein 18 days

   24 Nov 2026, 10:00 GMT

Commercial outcome and contract awards

Nothing awarded yet

Notice history

1 event · 1 release on Find a Tender

1. Tender notice21 Oct 2026, 11:21 BST099362-2026

Documents

• The Procurement documents will be available to access and view on the Bravo Solutions portal. Those suppliers who are not already registered on the portal will need to register. Registration is free and you can do this by going to the following link: https://etenderwales.ukp.app.jaggaer.com/web/login.shtml. The Procurement documents can be found by searching for reference itt_127977 - Penetration Testing.
• Tender notice on Find a Tender