Source: https://tendernation.io/opportunities/01a13c96-fa08-72e7-ad66-1b80003f3ffc/provision-of-army-digital-services-security-vulnerability-assessments-speciali

awarded GB restricted procedure Suitable for SMEs

# Provision of Army Digital Services Security & Vulnerability Assessments Specialist & Technical Capability (DInfoCom/0212)

[Ministry of Defence](https://tendernation.io/buyers/ministry-of-defence)

Estimated value

£459,000

Published

21 Sept 2022

Deadline

Closed

22 Jul 2022

## Who can bid

- Buyer says suitable for SMEs

    The buyer ticked “suitable for SMEs” on the notice. Anyone can still bid.

[More contracts for small businesses and VCSEs](https://tendernation.io/opportunities/for-small-businesses)

## About this tender

There is a requirement for specialist technical assistance to provide code assisted Vulnerability Assessments (VA) and Penetration Testing (PT) security assessments on both new and in-service applications/infrastructure. Security assessments, PT's and VA's are used to identify vulnerabilities in code and infrastructure (networks, servers, operating systems and applications) that could potentially be exploited. Attackers can be hackers trying to gain access into our network or systems, state sponsored activists or an insider threat. They will aim to either extract information that is held on applications and hosting environments or cause extensive disruption to services.

ADS has 2 hosting environments, the Army Hosting Environment (AHE) and Joint Server Farm (JSF). The JSF is accessible from the internet via the Defence Gateway and holds information classified at Official. The AHE holds Official, Secret and Sensitive Personal Information which if extracted would not only be damaging to the Army's reputation, it could jeopardise potential operations. It could also incur fines from the Information Commissioner if there were a breach of personal information. An attack to disrupt any of the services ADS provides would significantly erode the Army's ability to operate, as many of the systems support day to day activities and processes. It is therefore imperative that vulnerabilities are identified and remedied/mitigated to reduce the risk of these occurrences.

All new applications expecting to be hosted on the AHE or the JSF must have a vulnerability assessment before being allowed onto the environment to ensure there are no weaknesses which could potentially allow an attacker access to the wider infrastructure and applications. Existing applications, hosting environments and platforms must be VA'd on a rolling programme to ensure any changes do not increase vulnerability and potential for being attacked.

Read full description

## CPV classification

Computer testing services

Source

Contracts Finder (UK)

[View official notice](https://www.contractsfinder.service.gov.uk/notice/78275948-9210-49c0-92c9-c610861b6a45)

Never miss a tender like this again

Get AI summaries, deadline alerts and a bid pipeline for tenders matched to your business. Free to start.

[Track tenders free](https://tendernation.io/register)

[Buyer profile Ministry of Defence: past awards and live tenders](https://tendernation.io/buyers/ministry-of-defence) [Sector More IT services tenders](https://tendernation.io/sectors/it-services)

## More tenders like this

[SONI090 – Client-Side Advisor · SONI Ltd · 32 days left · 20 Nov 2026](https://tendernation.io/opportunities/01a154e4-4736-72ba-9b73-0e325c4a96e5/soni090-client-side-advisor) [Computer facilities management services – IT-tjänster · Kalmar Läns Museum · 28 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-8774-723e-83a8-af2cae60c2ed/sweden-computer-facilities-management-services-it-tjanster) [Software supply services – CRE\_2026\_092 Renouvellement des licences Varonis · CREOS Luxembourg S.A. · 27 days left · 15 Nov 2026](https://tendernation.io/opportunities/01a15183-411c-7086-9da9-540c2fa32c64/luxembourg-software-supply-services-cre-2026-092-renouvellement-des-licences) [IT services: consulting, software development, Internet and support – Integrale ICT-dienstverlening · Stichting TWijs · 42 days left · 30 Nov 2026](https://tendernation.io/opportunities/01a15183-8078-70d7-8df3-40f25f4d83c5/netherlands-it-services-consulting-software-development-internet-and-suppor) [Software supply services – Vergabe zur Ablösung der bestehenden SAP-Lösung im Bereich Personal · Westfälische Verkehrsgesellschaft mbH · 28 days left · 16 Nov 2026](https://tendernation.io/opportunities/01a15183-0636-71ff-ab09-9dda4a94f77c/germany-software-supply-services-vergabe-zur-ablosung-der-bestehenden-sap-lo) [Software implementation services – DNS - Metada Platform - licence a související implementační, konzultační, analytické a školicí služby · DIAMO, státní podnik · 35 days left · 23 Nov 2026](https://tendernation.io/opportunities/01a15183-8989-719a-85fd-f036dc09b9df/czechia-software-implementation-services-dns-metada-platform-licence-a-s)
