Penetration Testing

Buyer
Senedd Cymru / Welsh Parliament
Value
£80,000
Closes
24 November 2026
Where
Cardiff, Wales
Type
Open tender

In plain English

The Welsh Parliament (Senedd) wants to hire an outside security firm to attack its own computer systems in a controlled way, finding weaknesses before criminals can exploit them. The firm would plan and run these tests and then report what they found and how to fix it. The estimated value is £80,000.

What the buyer wants

• Plan, carry out and report penetration tests (authorised simulated attacks) on external and internal networks, web applications, remote access, wireless networks and, where needed, physical sites, using white, grey or black box methods (testers with full, partial or no prior knowledge of the systems). • Validate whether existing security controls actually work, and provide prioritised recommendations for fixing the weaknesses found. • Run all testing in a controlled way that minimises the risk of disrupting live Parliamentary services, and support ongoing improvement of the organisation's security.

Likely requirements

Our reading of the notice. Always check the tender documents.

A firm without recognised penetration testing accreditation such as CREST or CHECK, or without the insurance and security vetting needed for internal and physical testing of a national parliament's systems, would most likely be excluded.

How to bid

This is an open tender: any eligible business can respond directly to the buyer by the deadline, with no framework membership needed.

How to write a tender response

More open tenders from Senedd Cymru / Welsh Parliament

Similar open IT and digital contracts

Check whether your business could win this, free

Get a plain-English bid plan for this tender with the bid coach

More IT and digital contracts in Wales