Penetration Testing

Buyer

Senedd Cymru / Welsh Parliament

Estimated value

£80k

Location

Wales

Deadline

24 November 2026

Published

21 October 2026

Category

IT services: consulting, software development, Internet and support

Trade

IT, software and digital

Suitable for SMEs

Not flagged

View the official notice on Find a Tender

In plain English

The Senedd Cymru requires an independent penetration testing service to assess the security of its technology estate, covering infrastructure, web applications, and physical locations. No special requirements are stated.

Description from the notice

The Senedd is looking to procure a penetration testing service to provide independent assurance over the security of its technology estate and to identify vulnerabilities that may expose the organisation to cyber security risk. The contract will include the planning, execution and reporting of penetration testing activities against Commission systems and services. Testing may include external infrastructure, internal infrastructure, web applications, remote access services, wireless technologies and physical locations as required. These tests may be performed in white, grey, or black box scenarios. The Senedd Commission is seeking to procure an independent penetration testing service capable of identifying vulnerabilities, validating the effectiveness of security controls and providing assurance over the resilience of the Commission's technology estate. The service should provide realistic security assessments that reflect the techniques and methodologies employed by malicious actors, whilst ensuring testing is undertaken in a controlled manner that minimises risk to operational services. The service should support the Commission's cyber security strategy by identifying weaknesses before they can be exploited, providing prioritised remediation recommendations and supporting continuous improvement of the organisation's overall security posture.