Find a TenderAwarded

Published 14 Jan 2025, 15:53 GMT

Official UK procurement notice

Cyber Security: Testing for Application Software Security and Thames IT infrastructure Security

Official notice

Authority: THAMES WATER UTILITIES LIMITED

Framework agreementServicesNegotiated procedure with prior call for competition

Sectors: IT Services & Software (72) Delivery: London (UKI)South East (UKJ)

Framework ceiling (notional)£8,000,000framework ceiling, not attributable revenue

Submissions closed 30 Jan 2025awarded 6 Jan 2026

What is being bought

Published requirement description

Thames Water Utilities Ltd (TWUL) is intending to award a framework agreement for the supply of security services for its IT and OT environments on a planned and project basis.

CPV: Computer audit and testing services · IT services: consulting, software development, Internet and support

How this framework works

From the published notice

Electronic auction: yes

The lotProcurement structure

single lot · value published

Lot #1Application software security including but not limited to; Code Reviews, Static and…AwardedRenewalPublished value£8,000,000

Application software security including but not limited to; Code Reviews, Static and Dynamic Code Scanning and Code Reviews, Code De-Buggers, Compilers, Configuration Validation.

Delivery: London, South East · Whole of the Thames Water Region

Extensions: Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 years · Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend up to a maximum duration of 8 yearsSecond stage: up to 15 candidates invited to tenderVariant bids: allowed

72800000 Computer audit and testing services

What it takes to win
i
How this buyer will score bids.
The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).

Evaluation split and conditions of participation as published; the tender pack may add more

Legal form for consortia: Consortia may be required to form a legal entity prior to award
Shortlisting: As detailed in section VI.3 & PQQ.

What this means for your bid

“Cyber Security: Testing for Application Software Security and Thames…” is a framework: the contest is a place on its panel, not a single contract.

Procedure terms & legal framework

From the official record · publisher note attached

Procedure method: Negotiated procedure with prior call for competition
Legal basis: CELEX · 32014L0025 Utilities Contracts Regulations 2016 (Directive 2014/25/EU)
Procurement category: Services
Notice status: Awarded
Procurement threshold: Unspecified in notice
Regulatory regime: Standard
Commercial structure: Framework agreement
Who may use this agreement: Not stated in the notice; call-off rights may be limited to the establishing authority
Competition type: Competitive procedure
GPA / WTO covered: Unspecified in notice
Recurring procurement: Yes
First published: 14 Jan 2025, 15:53 GMT
Last source update: 6 Jul 2026, 13:15 BST
Authority reference: FA2220
FTS notice number: 2026/S 000-063191
Classification (CPV): Computer audit and testing servicesIT services: consulting, software development, Internet and support
Delivery area: London (UKI)South East (UKJ)
Official registry OCID: ocds-h6vhtk-04cffc Find a Tender
Contract terms summary: Specified in Invitation to Negotiate Document

Contract terms

Electronic trading: e-invoicing allowed · electronic ordering · electronic payment

Review and risk notes

Review procedure: Thames Water Utilities Limited will incorporate a standstill period at the point information on the award of the contract is communicated to tenderers. That notification will provide full information on the award decision. The standstill period, which will be for a minimum of 10 calendar days, provides time for unsuccessful tenderers to challenge the award decision before the contract is entered into.
The Utilities Contracts Regulations 2016 (SI 2016 No 274) provide for aggrieved parties who have been harmed or are at risk of harm by a breach of the rules to take action in the High Court (England, Wales and Northern Ireland).

Publisher note: All suppliers who wish to respond to this contract notice must request a pre-qualification questionnaire (PQQ) by using the web link in Section I.3 (www.thameswater.co.uk/procurement). From your response to the link in Section I.3 or above, Thames Water's Procurement Support Centre will send you an email providing login details for our eSourcing system. To complete the PQQ you will need to login to the project SharePoint site. If the project requires it, you will receive an additional and separate survey to complete for Data Protection. Note - The client may be Thames Water Utilities Limited or another company within the Kemble Water group structure

How it was run

Official notice

Run through: portal not identified

Language: EN

Appointment period ends: 30 Jan 2025, 10:00 GMT
Submission channel: {"electronicSubmission"}
Accepted languages: en
Supplier levy on call-offs (max %): document
Deposits and guarantees: Bonds and/or parent company guarantees of performance and financial standing may be required

Detailed submission instructions & authority contactsFrom official release

thameswater.sharepoint.com/sites/ProcurementSup… ↗

Timeline

30 Jan 2025 → 6 Jul 2026 · 2 dates

Admission / appointment period endsperiod end, not a bid countdown
30 Jan 2025, 10:00 GMT
Notice published111 days ago
6 Jul 2026, 13:15 BST

Notice history

1 event · 2 releases on Find a Tender

Status changed to complete
6 Jul 2026, 13:15 BST

Commercial outcome & contract awards

Published awards, contracts and bid statistics, not a forecast

Suppliers appointed 11admitted to the panel · see the list ↓

Contracts signed 11latest 6 Jan 2026

11 suppliers are admitted to this framework without individual award values or dates, see the supplier list below.

Contracts

2-sec Limited
Signed
6 Jan 2026
Value
—
Status
active
Red Team Partners Limited
Signed
6 Jan 2026
Value
—
Status
active
Pen Test Partners LLP
Signed
6 Jan 2026
Value
—
Status
active
3B Data Security Ltd
Signed
6 Jan 2026
Value
—
Status
active
AMR CyberSecurity LTD
Signed
6 Jan 2026
Value
—
Status
active
Avella Security Ltd
Signed
6 Jan 2026
Value
—
Status
active
Bridewell Consulting Limited
Signed
6 Jan 2026
Value
—
Status
active
Dionach Limited
Signed
6 Jan 2026
Value
—
Status
active
Expleo UK Limited
Signed
6 Jan 2026
Value
—
Status
active
Halo I.S Ltd
Signed
6 Jan 2026
Value
—
Status
active
MTI Technology Ltd
Signed
6 Jan 2026
Value
—
Status
active

Contracting authority & participating public bodies

THAMES WATER UTILITIES LIMITED

Contracting authorityWater GB-COH: 02366661 Clearwater Court, Reading, South East, RG18DBContact name, email Published organisation website ↗

Dispute resolution & review bodies

Thames WaterReview body Reading
Thames Water Utilities LtdReview body Reading

Framework contractors & participating bidders

11 commercial parties on the notice

2-sec LimitedFramework contractorGB-COH: 07800173 London, London
3B Data Security LtdFramework contractorGB-COH: 10353328 Tunbridge Wells, South East
AMR CyberSecurity LTDFramework contractorGB-COH: 11551941 Fareham, South East
Avella Security LtdFramework contractorGB-COH: 09393211 Birmingham, West Midlands
Bridewell Consulting LimitedFramework contractorGB-COH: 11101195 Reading, South East
Dionach LimitedFramework contractorGB-COH: 03908168 Oxfordshire, South East
Expleo UK LimitedFramework contractorGB-COH: 01147167 Lancashire, North West
Halo I.S LtdFramework contractorGB-COH: 11806111 Leeds, Yorkshire & Humber
MTI Technology LtdFramework contractorGB-COH: SC112019 Edinburgh, Scotland
Pen Test Partners LLPFramework contractorGB-COH: OC353362 Buckingham, South East
Red Team Partners LimitedFramework contractorGB-COH: 09923929 London, London

Official documents & specifications

Official links; attachments are not copied

No document links were published on the notice.