Scope
Reference
Proc2893
Description
Jisc Cloud Security team are looking to offer a Web Application Firewall (WAF) managed service for its members and customers. The managed service will consist of a third party WAF solution, with a Jisc managed service wrapped around it. The solution must host customer data in the UK and offer comprehensive security features including protection against DDoS attacks, OWASP Top 10 threats, credential stuffing, zero-day attacks, and bot activity. It should also include advanced threat detection using machine learning and behavior analysis, configurable mitigation controls, API protection, antivirus scanning for uploaded files, and real-time analytics for traffic and bot insights. A complete set of requirements will be available in the Invitation to tender.
Commercial tool
Establishes a framework
Total value (estimated)
- £800,000 excluding VAT
- £1,000,000 including VAT
Above the relevant threshold
Contract dates (estimated)
- 20 October 2025 to 20 October 2028
- Possible extension to 20 October 2029
- 4 years, 1 day
Description of possible extension:
Initial period is 3 years, with further 12 month extension period permitted. (3+1)
Main procurement category
Services
CPV classifications
- 72212730 - Security software development services
Contract locations
- UK - United Kingdom
Framework
Maximum number of suppliers
2
Maximum percentage fee charged to suppliers
0%
Framework operation description
Rates to be provided by suppliers. Direct award and further competition depending on our customer demands.
Award method when using the framework
Either with or without competition
Contracting authorities that may use the framework
Establishing party only
Participation
Particular suitability
Small and medium-sized enterprises (SME)
Submission
Publication date of tender notice (estimated)
29 August 2025
Enquiry deadline
10 September 2025, 12:00pm
Tender submission deadline
22 September 2025, 4:00pm
Submission address and any special instructions
Tenders may be submitted electronically
Yes
Languages that may be used for submission
English
Award decision date (estimated)
4 October 2025
Award criteria
| Name | Description | Type | Weighting |
|---|---|---|---|
| Technical | See ITT - subject to change at publication |
Quality | 80% |
| Pricing | See ITT - subject to change at publication |
Price | 20% |
Other information
Applicable trade agreements
- Government Procurement Agreement (GPA)
Procedure
Procedure type
Open procedure
Contracting authority
Jisc
- Public Procurement Organisation Number: PGYD-1575-ZHXX
4 Portwall Lane
Bristol
BS1 6NB
United Kingdom
Contact name: Chris Hallahan
Telephone: +44 2081482444
Email: Chris.Hallahan@jisc.ac.uk
Website: https://www.jisc.ac.uk
Region: UKK11 - Bristol, City of
Organisation type: Public authority - sub-central government