Open11 days left · closes 10am, Tuesday 24 November 2026

Penetration Testing

Senedd Cymru / Welsh Parliament · Central government

In brief

Senedd Cymru / Welsh Parliament is looking for suppliers for IT and software work (Wales).

The estimated value is £80,000 excluding VAT.

The contract runs for 4 years, starting 11 December 2026.

The buyer says it is suitable for small and medium-sized businesses.

Bids close at 10am, Tuesday 24 November 2026.

Built from the notice's own fields. Always check the official notice before you bid.

Can I win this?

Key dates

Questions by
10am, Tuesday 17 November 2026
Bids by
10am, Tuesday 24 November 2026

How bids are scored

Contract Cost 40% · Quality 60%

Quality matters most. You can win without being the cheapest.

Competition

Usually high: a median of 9 bids per contract for this buyer (from 11 awards in the last 12 months).

What the notice says

The Senedd is looking to procure a penetration testing service to provide independent assurance over the security of its technology estate and to identify vulnerabilities that may expose the organisation to cyber security risk. The contract will include the planning, execution and reporting of penetration testing activities against Commission systems and services. Testing may include external infrastructure, internal infrastructure, web applications, remote access services, wireless technologies and physical locations as required. These tests may be performed in white, grey, or black box scenarios. The Senedd Commission is seeking to procure an independent penetration testing service capable of identifying vulnerabilities, validating the effectiveness of security controls and providing assurance over the resilience of the Commission's technology estate. The service should provide realistic security assessments that reflect the techniques and methodologies employed by malicious actors, whilst ensuring testing is undertaken in a controlled manner that minimises risk to operational services. The service should support the Commission's cyber security strategy by identifying weaknesses before they can be exploited, providing prioritised remediation recommendations and supporting continuous improvement of the organisation's overall security posture.

Should I bid?

Tick what applies to you. Nothing is saved.

How to bid

  1. Read the full notice on Find a Tender, including any tender documents it links to.
  2. Register your organisation on the Central Digital Platform (through Find a Tender) if you have not already. Suppliers need to be registered to take part in procurements under the Procurement Act 2023.
  3. Follow the submission instructions in the notice; it does not name an e-tendering portal.
  4. Send clarification questions before 10am, Tuesday 17 November 2026.
  5. Make sure your bid arrives before 10am, Tuesday 24 November 2026. Late bids are usually rejected.

Timeline

  1. Tender notice · UK4, notice 099362-2026

About the buyer

  1. Climate Vulnerability Intelligence Dashboard Feasibility Project

    South East Wales Corporate Joint CommitteeWalesResearch and development, IT services and software

    Closing soon12 hours leftSuitable for SMEsSmall contract

    £120kestimated
  2. World Model for SCAT

    NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust)WalesIT services and software, Management consultancy

    Closing soon6 days leftSuitable for SMEsSmall contract

    £50kestimated
  3. BU452026- Digital Reconstruction of Former Hospital in North Wales

    Prifysgol Bangor / Bangor UniversityWalesArchitecture and engineering, IT services and software

    Open7 days leftSuitable for SMEs

    £305kestimated
  4. Provision of Digital Customer Engagement Platform

    Pobl Group LtdWalesIT services and software

    Open12 days leftSuitable for SMEsSmall contract

    £200kestimated
  5. System Adnoddau Dynol Chwaraeon Cymru / Sport Wales Human Resources System

    Sport WalesWalesIT services and software

    Open21 days left2 lots

    £225kestimated

From notice 099362-2026 on Find a Tender, first published 21 October 2026. We last checked for changes on 21 October 2026.