Source: https://tendernation.io/opportunities/01a13bde-a8e8-73ae-8e6a-ed7382ab06ab/ssro-security-assessment-and-penetration-test closed GB open procedure Suitable for SMEs # SSRO Security Assessment and Penetration Test [Single Source Regulations Office](https://tendernation.io/buyers/single-source-regulations-office) Estimated value £41,667 Published 1 Jun 2026 Deadline Closed 8 Jun 2026 ## Who can bid - Open to suppliers based in the UK The buyer has limited bidding to suppliers with substantive operations in this area. [PPN 005: reserving by supplier location](https://www.gov.uk/government/publications/ppn-005-reserving-below-threshold-procurements/ppn-005-guide-to-reserving-below-threshold-html) - Buyer says suitable for SMEs The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid. - Below-threshold contract Buyers cannot shortlist bidders on suitability before tenders are in, so everyone gets to submit a bid (except some larger works contracts). [Procurement Act 2023, section 85](https://www.legislation.gov.uk/ukpga/2023/54/section/85) - Open procedure Anyone can submit a full tender; there is no shortlisting stage. [More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses) ## About this tender The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services. The Supplier is required to carry out in each year of the contract the core programme of work as detailed below. Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification. Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment. Phase 3: Retesting on all "critical" vulnerabilities, and the additional vulnerabilities per assessment (external, MS cloud, web application) following completion of remedial work implemented by the SSRO's IT Managed Service partner. The Phase dates for the first year of the contract will be: Phase 1 to be carried out between 6th July - 17 July, with final report(s) received by the SSRO no later than 17 July 2026; Phase 2 is expected to be completed by 25 September 2026; and Phase 3 is expected to be completed by 16 October 2026. ## CPV classification IT services: consulting, software development, Internet and support Source Find a Tender (UK) · Notice ocds-h6vhtk-069c47-2026-06-01T17:25:58+01:00 [View official notice](https://www.find-tender.service.gov.uk/Notice/ocds-h6vhtk-069c47-2026-06-01T17:25:58+01:00) Never miss a tender like this again Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start. [Track tenders free](https://tendernation.io/register) [Buyer profile Single Source Regulations Office: past awards and live tenders](https://tendernation.io/buyers/single-source-regulations-office) [Sector More IT services tenders](https://tendernation.io/sectors/it-services) ## More tenders like this [Computer facilities management services – IT-tjänster · Kalmar Läns Museum · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-8774-723e-83a8-af2cae60c2ed/sweden-computer-facilities-management-services-it-tjanster) [Software implementation services – DNS - Metada Platform - licence a související implementační, konzultační, analytické a školicí služby · DIAMO, státní podnik · 36 days left · 23 Nov 2026](https://tendernation.io/opportunities/01a15183-8989-719a-85fd-f036dc09b9df/czechia-software-implementation-services-dns-metada-platform-licence-a-s) [IT services: consulting, software development, Internet and support – Integrale ICT-dienstverlening · Stichting TWijs · 42 days left · 30 Nov 2026](https://tendernation.io/opportunities/01a15183-8078-70d7-8df3-40f25f4d83c5/netherlands-it-services-consulting-software-development-internet-and-suppor) [Software supply services – CRE\_2026\_092 Renouvellement des licences Varonis · CREOS Luxembourg S.A. · 27 days left · 15 Nov 2026](https://tendernation.io/opportunities/01a15183-411c-7086-9da9-540c2fa32c64/luxembourg-software-supply-services-cre-2026-092-renouvellement-des-licences) [Software supply services – Vergabe zur Ablösung der bestehenden SAP-Lösung im Bereich Personal · Westfälische Verkehrsgesellschaft mbH · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-0636-71ff-ab09-9dda4a94f77c/germany-software-supply-services-vergabe-zur-ablosung-der-bestehenden-sap-lo) [IT services: consulting, software development, Internet and support – L-Bank - Europaweite Vergabe einer KI-gestützten Lösung zur Verarbeitung von Elterngeldanträgen und Nachweisen im Verhandlungsverfahren mit Teilnahmewettbewerb nach VgV · Landeskreditbank Baden-Württemberg - Förderbank - (L-Bank) · 29 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-95b1-7144-aa3a-6e4de7a75864/germany-it-services-consulting-software-development-internet-and-support)