Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services

{
  "id": "078110-2026",
  "tag": [
    "tender"
  ],
  "date": "2026-08-17T13:01:55+01:00",
  "ocid": "ocds-h6vhtk-06e59c",
  "buyer": {
    "id": "GB-PPON-PBWW-4714-TBHN",
    "name": "City of Bradford Metropolitan District Council"
  },
  "tender": {
    "id": "CBMDC 770",
    "lots": [
      {
        "id": "LOT-0000",
        "value": {
          "amount": 250273,
          "currency": "GBP",
          "amountGross": 300327
        },
        "status": "active",
        "options": {
          "description": "Open Framework - possible change of suppliers"
        },
        "hasOptions": true,
        "description": null,
        "suitability": {
          "sme": true,
          "vcse": true
        },
        "awardCriteria": {
          "criteria": [
            {
              "name": "Quality",
              "type": "quality",
              "numbers": [
                {
                  "number": 40,
                  "weight": "percentageExact"
                }
              ],
              "description": "Quality will be evaluated and scored based on the response to the requirements detailed within Specification of Requirements"
            },
            {
              "name": "Social Value",
              "type": "quality",
              "numbers": [
                {
                  "number": 10,
                  "weight": "percentageExact"
                }
              ],
              "description": "Social Value will be evaluated and scored based on the response to the requirements detailed within Specification of Requirements"
            },
            {
              "name": "Price",
              "type": "cost",
              "numbers": [
                {
                  "number": 50,
                  "weight": "percentageExact"
                }
              ],
              "description": "Price will be evaluated and scored based on the completed Pricing Matrix"
            }
          ]
        },
        "contractPeriod": {
          "endDate": "2034-11-15T23:59:59Z",
          "startDate": "2026-11-16T00:00:00Z"
        },
        "selectionCriteria": {
          "criteria": [
            {
              "type": "economic",
              "description": "See tender documentation"
            },
            {
              "type": "technical",
              "description": "See tender documentation"
            }
          ]
        }
      }
    ],
    "items": [
      {
        "id": "LOT-0000",
        "relatedLot": "LOT-0000",
        "deliveryAddresses": [
          {
            "region": "UKE",
            "country": "GB",
            "countryName": "United Kingdom"
          },
          {
            "region": "UKE41",
            "country": "GB",
            "countryName": "United Kingdom"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72000000",
            "scheme": "CPV",
            "description": "IT services: consulting, software development, Internet and support"
          },
          {
            "id": "72600000",
            "scheme": "CPV",
            "description": "Computer support and consultancy services"
          },
          {
            "id": "72800000",
            "scheme": "CPV",
            "description": "Computer audit and testing services"
          }
        ]
      }
    ],
    "title": "Ad-Hoc Application Penetration Testing and IT Health Checks (PSN) and Other Security Services",
    "value": {
      "amount": 250273,
      "currency": "GBP",
      "amountGross": 300327
    },
    "status": "active",
    "documents": [
      {
        "id": "conflictOfInterest",
        "description": "Not published",
        "documentType": "conflictOfInterest"
      },
      {
        "id": "078110-2026",
        "url": "https://www.find-tender.service.gov.uk/Notice/078110-2026",
        "format": "text/html",
        "noticeType": "UK4",
        "description": "Tender notice on Find a Tender",
        "documentType": "tenderNotice",
        "datePublished": "2026-08-17T13:01:55+01:00"
      }
    ],
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "techniques": {
      "frameworkAgreement": {
        "type": "closed",
        "method": "withAndWithoutReopeningCompetition",
        "description": "The Framework will be established as an Open Framework under the Procurement Act 2023. The initial framework term will be three (3) years, with the Authority intending to re-open the framework and award a successor framework before the expiry of the initial term. The timing of any re-opening may be adjusted in accordance with the Procurement Act 2023 and the Authority's requirements. The successor framework is intended to have a term of twelve (12) months",
        "maximumParticipants": 3,
        "isOpenFrameworkScheme": true,
        "openFrameworkSchemeEndDate": "2034-11-15T23:59:59Z"
      },
      "hasFrameworkAgreement": true
    },
    "awardPeriod": {
      "endDate": "2026-11-16T23:59:59Z"
    },
    "description": "The Council is seeking to appoint a suitably experienced and qualified Provider (the Provider) to deliver These vulnerability tests must make use of both automated and manual testing and using best practice strategies from NCSC (National Cyber Security Centre), Open Web Application Security Project (OWASP) etc, to undertake our PEN testing. This tender is for the multiple block purchases of 10 consultancy days which can be used for a variety of security related testing and consultancy intended to identify weaknesses utilising publicly known vulnerabilities, common configuration faults or poor cyber awareness. Including our IT Health Check for PSN compliance (both Internally and Externally). The Council anticipates (but does not guarantee) that it will enter into a Framework Contract with the top 3 successful Providers. The Framework will be established as an Open Framework under the Procurement Act 2023. The initial framework term will be three (3) years, with the Authority intending to re-open the framework and award a successor framework before the expiry of the initial term. The timing of any re-opening may be adjusted in accordance with the Procurement Act 2023 and the Authority's requirements. The successor framework is intended to have a term of twelve (12) months The Council reserves the right to amend the scope of the support requirement and procure additional requirements as and when required throughout the term of the contract.",
    "tenderPeriod": {
      "endDate": "2026-09-14T16:00:00+00:00"
    },
    "enquiryPeriod": {
      "endDate": "2026-09-04T16:00:00+00:00"
    },
    "aboveThreshold": true,
    "submissionTerms": {
      "languages": [
        "en"
      ],
      "electronicSubmissionPolicy": "allowed"
    },
    "procurementMethod": "open",
    "mainProcurementCategory": "services",
    "submissionMethodDetails": "https://uk.eu-supply.com/app/rfq/rwlentrance_s.asp?PID=108256&TID100113322&B=",
    "procurementMethodDetails": "Open procedure"
  },
  "parties": [
    {
      "id": "GB-PPON-PBWW-4714-TBHN",
      "name": "City of Bradford Metropolitan District Council",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKE41",
        "country": "GB",
        "locality": "Bradford",
        "postalCode": "BD1 1HX",
        "countryName": "United Kingdom",
        "streetAddress": "Britannia House, Hall Ings"
      },
      "details": {
        "url": "https://www.bradford.gov.uk/",
        "classifications": [
          {
            "id": "publicAuthoritySubCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - sub-central government"
          }
        ]
      },
      "identifier": {
        "id": "PBWW-4714-TBHN",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "name": "Nita Patel",
        "email": "nita.patel@bradford.gov.uk"
      }
    }
  ],
  "language": "en",
  "planning": {
    "noEngagementNoticeRationale": "Market is understood."
  },
  "initiationType": "tender"
}