Cyber Security: Testing for Application Software Security and Thames IT infrastructure Security

{
  "id": "063191-2026",
  "tag": [
    "award",
    "contract"
  ],
  "date": "2026-07-06T13:15:30+01:00",
  "ocid": "ocds-h6vhtk-04cffc",
  "buyer": {
    "id": "GB-COH-02366661",
    "name": "THAMES WATER UTILITIES LIMITED"
  },
  "awards": [
    {
      "id": "063191-2026-1",
      "title": "2-sec Limited",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-07800173",
          "name": "2-sec Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-2",
      "title": "3B Data Security Ltd",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-10353328",
          "name": "3B Data Security Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-3",
      "title": "AMR CyberSecurity LTD",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-11551941",
          "name": "AMR CyberSecurity LTD"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-4",
      "title": "Avella Security Ltd",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-09393211",
          "name": "Avella Security Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-5",
      "title": "Bridewell Consulting Limited",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-11101195",
          "name": "Bridewell Consulting Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-6",
      "title": "Dionach Limited",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-03908168",
          "name": "Dionach Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-7",
      "title": "Expleo UK Limited",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-01147167",
          "name": "Expleo UK Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-8",
      "title": "Halo I.S Ltd",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-11806111",
          "name": "Halo I.S Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-9",
      "title": "MTI Technology Ltd",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-SC112019",
          "name": "MTI Technology Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-10",
      "title": "Red Team Partners Limited",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-09923929",
          "name": "Red Team Partners Limited"
        }
      ],
      "relatedLots": [
        "1"
      ]
    },
    {
      "id": "063191-2026-11",
      "title": "Pen Test Partners LLP",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-OC353362",
          "name": "Pen Test Partners LLP"
        }
      ],
      "relatedLots": [
        "1"
      ]
    }
  ],
  "tender": {
    "id": "FA2220",
    "lots": [
      {
        "id": "1",
        "status": "cancelled",
        "options": {
          "description": "Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years"
        },
        "hasOptions": true,
        "description": "Application software security including but not limited to; Code Reviews, Static and Dynamic Code Scanning and Code Reviews, Code De-Buggers, Compilers, Configuration Validation."
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryLocation": {
          "description": "Whole of the Thames Water Region"
        },
        "deliveryAddresses": [
          {
            "region": "UKI"
          },
          {
            "region": "UKJ"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72800000",
            "scheme": "CPV",
            "description": "Computer audit and testing services"
          }
        ]
      }
    ],
    "title": "Cyber Security: Testing for Application Software Security and Thames IT infrastructure Security",
    "status": "complete",
    "legalBasis": {
      "id": "32014L0025",
      "scheme": "CELEX"
    },
    "techniques": {
      "hasElectronicAuction": true,
      "hasFrameworkAgreement": true
    },
    "description": "Thames Water Utilities Ltd (TWUL) is intending to award a framework agreement for the supply of security services for its IT and OT environments on a planned and project basis.",
    "reviewDetails": "Thames Water Utilities Limited will incorporate a standstill period at the point information on the award of the contract is communicated to tenderers. That notification will provide full information on the award decision. The standstill period, which will be for a minimum of 10 calendar days, provides time for unsuccessful tenderers to challenge the award decision before the contract is entered into.\nThe Utilities Contracts Regulations 2016 (SI 2016 No 274) provide for aggrieved parties who have been harmed or are at risk of harm by a breach of the rules to take action in the High Court (England, Wales and Northern Ireland).",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Negotiated procedure with prior call for competition"
  },
  "parties": [
    {
      "id": "GB-COH-02366661",
      "name": "THAMES WATER UTILITIES LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKJ11",
        "locality": "Reading",
        "postalCode": "RG18DB",
        "countryName": "United Kingdom",
        "streetAddress": "Clearwater Court"
      },
      "details": {
        "url": "https://www.thameswater.co.uk/",
        "classifications": [
          {
            "id": "WATER",
            "scheme": "TED_CE_ACTIVITY",
            "description": "Water"
          }
        ]
      },
      "identifier": {
        "id": "02366661",
        "scheme": "GB-COH",
        "legalName": "THAMES WATER UTILITIES LIMITED"
      },
      "contactPoint": {
        "email": "procurement.support.centre@thameswater.co.uk"
      }
    },
    {
      "id": "GB-COH-07800173",
      "name": "2-sec Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI",
        "locality": "London",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "07800173",
        "scheme": "GB-COH",
        "legalName": "2-sec Limited"
      }
    },
    {
      "id": "GB-COH-10353328",
      "name": "3B Data Security Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKJ4",
        "locality": "Tunbridge Wells",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "10353328",
        "scheme": "GB-COH",
        "legalName": "3B Data Security Ltd"
      }
    },
    {
      "id": "GB-COH-11551941",
      "name": "AMR CyberSecurity LTD",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKJ3",
        "locality": "Fareham",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "11551941",
        "scheme": "GB-COH",
        "legalName": "AMR CyberSecurity LTD"
      }
    },
    {
      "id": "GB-COH-09393211",
      "name": "Avella Security Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKG3",
        "locality": "Birmingham",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "09393211",
        "scheme": "GB-COH",
        "legalName": "Avella Security Ltd"
      }
    },
    {
      "id": "GB-COH-11101195",
      "name": "Bridewell Consulting Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKJ1",
        "locality": "Reading",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "11101195",
        "scheme": "GB-COH",
        "legalName": "Bridewell Consulting Limited"
      }
    },
    {
      "id": "GB-COH-03908168",
      "name": "Dionach Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKJ1",
        "locality": "Oxfordshire",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "03908168",
        "scheme": "GB-COH",
        "legalName": "Dionach Limited"
      }
    },
    {
      "id": "GB-COH-01147167",
      "name": "Expleo UK Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKD4",
        "locality": "Lancashire",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "01147167",
        "scheme": "GB-COH",
        "legalName": "Expleo UK Limited"
      }
    },
    {
      "id": "GB-COH-11806111",
      "name": "Halo I.S Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKE2",
        "locality": "Leeds",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "id": "11806111",
        "scheme": "GB-COH",
        "legalName": "Halo I.S Ltd"
      }
    },
    {
      "id": "GB-COH-SC112019",
      "name": "MTI Technology Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKM75",
        "locality": "Edinburgh",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "SC112019",
        "scheme": "GB-COH",
        "legalName": "MTI Technology Ltd"
      }
    },
    {
      "id": "GB-COH-09923929",
      "name": "Red Team Partners Limited",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI",
        "locality": "London",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "09923929",
        "scheme": "GB-COH",
        "legalName": "Red Team Partners Limited"
      }
    },
    {
      "id": "GB-COH-OC353362",
      "name": "Pen Test Partners LLP",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKJ1",
        "locality": "Buckingham",
        "countryName": "United Kingdom"
      },
      "details": {
        "scale": "large"
      },
      "identifier": {
        "id": "OC353362",
        "scheme": "GB-COH",
        "legalName": "Pen Test Partners LLP"
      }
    },
    {
      "id": "GB-FTS-33107",
      "name": "Thames Water",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Reading",
        "countryName": "United Kingdom"
      },
      "identifier": {
        "legalName": "Thames Water"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "063191-2026-1",
      "title": "2-sec Limited",
      "status": "active",
      "awardID": "063191-2026-1",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-2",
      "title": "3B Data Security Ltd",
      "status": "active",
      "awardID": "063191-2026-2",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-3",
      "title": "AMR CyberSecurity LTD",
      "status": "active",
      "awardID": "063191-2026-3",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-4",
      "title": "Avella Security Ltd",
      "status": "active",
      "awardID": "063191-2026-4",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-5",
      "title": "Bridewell Consulting Limited",
      "status": "active",
      "awardID": "063191-2026-5",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-6",
      "title": "Dionach Limited",
      "status": "active",
      "awardID": "063191-2026-6",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-7",
      "title": "Expleo UK Limited",
      "status": "active",
      "awardID": "063191-2026-7",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-8",
      "title": "Halo I.S Ltd",
      "status": "active",
      "awardID": "063191-2026-8",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-9",
      "title": "MTI Technology Ltd",
      "status": "active",
      "awardID": "063191-2026-9",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-10",
      "title": "Red Team Partners Limited",
      "status": "active",
      "awardID": "063191-2026-10",
      "dateSigned": "2026-01-06T00:00:00Z"
    },
    {
      "id": "063191-2026-11",
      "title": "Pen Test Partners LLP",
      "status": "active",
      "awardID": "063191-2026-11",
      "dateSigned": "2026-01-06T00:00:00Z"
    }
  ],
  "description": "All suppliers who wish to respond to this contract notice must request a pre-qualification questionnaire (PQQ) by using the web link in Section I.3 (www.thameswater.co.uk/procurement).\nFrom your response to the link in Section I.3 or above, Thames Water's Procurement Support Centre will send you an email providing login details for our eSourcing system. To complete the PQQ you will need to login to the project SharePoint site.\nIf the project requires it, you will receive an additional and separate survey to complete for Data Protection.\nNote - The client may be Thames Water Utilities Limited or another company within the Kemble Water group structure",
  "initiationType": "tender"
}

{
  "id": "001233-2025",
  "tag": [
    "tender"
  ],
  "date": "2025-01-14T15:53:03Z",
  "ocid": "ocds-h6vhtk-04cffc",
  "buyer": {
    "id": "GB-COH-02366661",
    "name": "THAMES WATER UTILITIES LIMITED"
  },
  "tender": {
    "id": "FA2220",
    "lots": [
      {
        "id": "1",
        "value": {
          "amount": 8000000,
          "currency": "GBP"
        },
        "status": "active",
        "options": {
          "description": "Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years"
        },
        "renewal": {
          "description": "Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years"
        },
        "hasOptions": true,
        "hasRenewal": true,
        "description": "Application software security including but not limited to; Code Reviews, Static and Dynamic Code Scanning and Code Reviews, Code De-Buggers, Compilers, Configuration Validation.",
        "secondStage": {
          "maximumCandidates": 15,
          "minimumCandidates": 15
        },
        "contractPeriod": {
          "durationInDays": 2880
        },
        "submissionTerms": {
          "variantPolicy": "allowed"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryLocation": {
          "description": "Whole of the Thames Water Region"
        },
        "deliveryAddresses": [
          {
            "region": "UKI"
          },
          {
            "region": "UKJ"
          }
        ],
        "additionalClassifications": [
          {
            "id": "72800000",
            "scheme": "CPV",
            "description": "Computer audit and testing services"
          }
        ]
      }
    ],
    "title": "Cyber Security: Testing for Application Software Security and Thames IT infrastructure Security",
    "value": {
      "amount": 8000000,
      "currency": "GBP"
    },
    "status": "active",
    "legalBasis": {
      "id": "32014L0025",
      "scheme": "CELEX"
    },
    "description": "Thames Water Utilities Ltd (TWUL) is intending to award a framework agreement for  the supply of security services for its IT and OT environments on a planned and project basis.",
    "tenderPeriod": {
      "endDate": "2025-01-30T10:00:00Z"
    },
    "contractTerms": {
      "financialTerms": "Specified in Invitation to Negotiate Document",
      "tendererLegalForm": "Consortia may be required to form a legal entity prior to award",
      "hasElectronicPayment": true,
      "hasElectronicOrdering": true,
      "electronicInvoicingPolicy": "allowed"
    },
    "hasRecurrence": true,
    "reviewDetails": "Thames Water Utilities Limited will incorporate a standstill period at the point information on the award of the contract is communicated to tenderers. That notification will provide full information on the award decision. The standstill period, which will be for a minimum of 10 calendar days, provides time for unsuccessful tenderers to challenge the award decision before the contract is entered into.\nThe Utilities Contracts Regulations 2016 (SI 2016 No 274) provide for aggrieved parties who have been harmed or are at risk of harm by a breach of the rules to take action in the High Court (England, Wales and Northern Ireland).",
    "classification": {
      "id": "72000000",
      "scheme": "CPV",
      "description": "IT services: consulting, software development, Internet and support"
    },
    "submissionTerms": {
      "languages": [
        "en"
      ],
      "depositsGuarantees": "Bonds and/or parent company guarantees of performance and financial standing may be required"
    },
    "submissionMethod": [
      "electronicSubmission"
    ],
    "otherRequirements": {
      "reductionCriteria": "As detailed in section VI.3 & PQQ."
    },
    "participationFees": [
      {
        "id": "1",
        "type": [
          "document"
        ]
      }
    ],
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "submissionMethodDetails": "https://thameswater.sharepoint.com/sites/ProcurementSupportCentreBidProcessRepository/FA2220CyberSecurity",
    "procurementMethodDetails": "Negotiated procedure with prior call for competition"
  },
  "parties": [
    {
      "id": "GB-COH-02366661",
      "name": "THAMES WATER UTILITIES LIMITED",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKJ11",
        "locality": "Reading",
        "postalCode": "RG18DB",
        "countryName": "United Kingdom"
      },
      "details": {
        "url": "https://www.thameswater.co.uk",
        "classifications": [
          {
            "id": "WATER",
            "scheme": "TED_CE_ACTIVITY",
            "description": "Water"
          }
        ]
      },
      "identifier": {
        "id": "02366661",
        "scheme": "GB-COH",
        "legalName": "THAMES WATER UTILITIES LIMITED"
      },
      "contactPoint": {
        "url": "https://forms.office.com/e/MAibfske6p",
        "name": "Thames Water",
        "email": "procurement.support.centre@thameswater.co.uk"
      }
    },
    {
      "id": "GB-FTS-4846",
      "name": "Thames Water Utilities Ltd",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Reading",
        "countryName": "United Kingdom"
      },
      "identifier": {
        "legalName": "Thames Water Utilities Ltd"
      }
    }
  ],
  "language": "en",
  "description": "All suppliers who wish to respond to this contract notice must request a pre-qualification questionnaire (PQQ) by using the web link in Section I.3 (www.thameswater.co.uk/procurement).\nFrom your response to the link in Section I.3 or above, Thames Water's Procurement Support Centre will send you an email providing login details for our eSourcing system. To complete the PQQ you will need to login to the project SharePoint site.\nIf the project requires it, you will receive an additional and separate survey to complete for Data Protection.\nNote - The client may be Thames Water Utilities Limited or another company within the Kemble Water group structure.",
  "initiationType": "tender"
}