Continuous Testing (PTaaS) Service Agreement
- Buyer
- THAMES WATER UTILITIES LIMITED
- Value
- £2,000,000
- Closes
- 3 November 2026
- Where
- Reading, London
- Type
- Open tender
In plain English
Thames Water is looking for a cybersecurity company to provide continuous penetration testing and red/purple team exercises to find and help fix IT security vulnerabilities. This is a managed security testing service (PTaaS) worth approximately £2 million per year.
What the buyer wants
• Deliver yearly penetration tests as a minimum, with a fully functional continuous testing service that runs on set schedules • Run red team (simulated attackers) and purple team (red team plus internal collaboration) exercises where findings are shared and validated during testing • Work directly with Thames Water staff to test security controls, detection systems, and incident response processes, then help them retest and close out each vulnerability found • Ensure real people (not just automated tools) oversee all testing and validation work, with automation only handling tracking, reporting and prioritisation • Provide a qualified, accredited and vetted cybersecurity testing team
Likely requirements
Our reading of the notice. Always check the tender documents.
This contract is almost certainly disqualified for small businesses: it requires a £2 million annual budget, a fully staffed penetration testing team with multiple certifications, security clearance capability, and the ability to work continuously on-site with a major utility. This is a contract for established cybersecurity firms only.
How to bid
This is an open tender: any eligible business can respond directly to the buyer by the deadline, with no framework membership needed.
How to write a tender response
More open tenders from THAMES WATER UTILITIES LIMITED
- Pump Optimisation and Aeration Efficiency Analysis, THAMES WATER UTILITIES LIMITED, closes 2 November 2026
- Low Code No Code Platform, THAMES WATER UTILITIES LIMITED, £1,000,000, closes 3 November 2026
Similar open IT and digital contracts
- QNAP NAS Device (New), British Film Institute, £80,000, closes 27 October 2026
- Website redesign and redevelopment, Capital City College, £250,000, closes 27 October 2026
- Support for CEC Digital Products, The Careers and Enterprise Company, £15,600,000, closes 27 October 2026
- Hybrid Security Operations Centre (SOC), British Film Institute, £150,000, closes 2 November 2026
- Video Management System Migration: Genetec, Victoria and Albert Museum, £443,000, closes 2 November 2026
- Archive Activity Management System, British Film Institute, £170,000, closes 9 November 2026
Check whether your business could win this, free
Get a plain-English bid plan for this tender with the bid coach