Single Source Regulations Office
SSRO Security Assessment and Penetration Test
Please only return Tenders by email to the SSRO at: tenders@ssro.gov.uk. The title of the email should be "SSRO-C-159: Security Assessment and Penetration Test - Quote Submission." Tenders must be returned by the date and time specified in the timetable in paragraph 4.4 of the RFQ. Any Quote received after this date and time will not be considered. It is the bidders' responsibility to ensure that their Quote is received no later than the stated date and time.
The submission route named on the official notice.
This sits below the typical range for IT Services contracts — a smaller, more accessible award. Based on 36,449 valued IT Services tenders in our corpus.
The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services.
The Supplier is required to carry out in each year of the contract the core programme of work as detailed below.
Phase 1: Security Assessment and Penetration Testing and reporting the results (one combined report or separate documents at Supplier discretion) as set out in the Service Specification.
Phase 2: Liaising with the SSRO and the SSRO's IT Managed Service partner whilst they are resolving all critical vulnerabilities, and up to five additional non-critical vulnerabilities, per assessment.
Phase 3: Retesting on all "critical" vulnerabilities, and the additional vulnerabilities per assessment (external, MS cloud, web application) following completion of remedial work implemented by the SSRO's IT Managed Service partner.
The Phase dates for the first year of the contract will be: Phase 1 to be carried out between 6th July - 17 July, with final report(s) received by the SSRO no later than 17 July 2026; Phase 2 is expected to be completed by 25 September 2026; and Phase 3 is expected to be completed by 16 October 2026.
What the supplier must deliver
The SSRO is seeking to appoint
The SSRO is seeking to appoint a supplier to provide a core programme of work surrounding Security Assessment and Penetration Test services.
The Supplier is required to carry out
The Supplier is required to carry out in each year of the contract the core programme of work as detailed below.
Phase 2 is expected to be completed
Phase 2 is expected to be completed by 25 September 2026; and.
Phase 3 is expected to be completed
Phase 3 is expected to be completed by 16 October 2026.
Derived from the notice text — always confirm against the original documents.
Make the case to bid
Reveal who to approach at Single Source Regulations Office, and generate a go-to-market strategy from their news, accounts and people.
The full intelligence dossier
Our agent reads Single Source Regulations Office’s accounts, hunts live signals, finds the people who decide — and hands you a bid strategy plus a go-to-market influence plan, including what your team should post this week. You approve every paid step.
Ask me about this tender, the buyer, who wins their work, or whether you should bid.
- OCID
- ocds-h6vhtk-069c47
- Stage
- tender · Open
- Source
- Find a Tender
- Buyer ref
- 051600-2026
Contains public sector information licensed under the Open Government Licence v3.0. Source data © Crown copyright.
Who wins this kind of work
The suppliers and buyers around this opportunity — drawn from official award data. Drag to orbit; click a node to explore.
Top suppliers & buyers in IT Services
Single Source Regulations Office’s tender network
Assembling the network…