Planning

Threat Led Penetration Testing - Black Team

  • UK Space Agency

UK3: Planned procurement notice - Procurement Act 2023 - view information about notice types

Notice identifier: 2025/S 000-059443

Procurement identifier (OCID): ocds-h6vhtk-05a180

Published 24 September 2025, 5:10pm

Last edited 26 September 2025, 9:57am

Show all versions Hide all versions


This is an old version of this notice. View the latest version.

Scope

Reference

UKSAC25_0071

Description

This notice relates to the following notice for Threat Led Penetration Testing - Black Team upcoming requirements, which was published on Contracts Finder: https://www.contractsfinder.service.gov.uk/Notice/Manage/ReviewStart/18c0f747-b060-4dbd-bb26-47a4ff66c2a6

UKSA is seeking a supplier to provide physical penetration testing for a number of companies working in the space industry, in order to;

• Support companies with understanding their existing security and resilience to physical attack.

• Inform corrections and upgrades to physical security by identifying vulnerabilities and providing recommendations for improvement.

• There is a likely to be the requirement to work with multiple (up to 4) companies at the same time in order to complete the work packages below within the timescale of the contract.

Full details will be available in the forthcoming specification.

How To Apply

***In order to participate in the Procurement and be considered for the opportunity to submit an initial Tender, Bidders must submit this Selection Questionnaire a signed copy of annex 1 - Non Disclosure Agreement and any other information as required***

Please read instructions in the submission section.

Total value (estimated)

  • £200,000 excluding VAT
  • £240,000 including VAT

Above the relevant threshold

Contract dates (estimated)

  • 17 November 2025 to 31 March 2026
  • Possible extension to 31 March 2027
  • 1 year, 4 months, 14 days

Description of possible extension:

Up to £240,000 (including VAT)

5 months + 1-year optional extension to be granted at the Contracting Authority's discretion, subject to budget availability.

Up to £120,000 (including VAT) for initial 5 months and £120,000 (including VAT) for subsequent extension period. This is a call off value and not necessarily the full value of the contract as payment will only be made on completion of deliverables.

Main procurement category

Services

CPV classifications

  • 79700000 - Investigation and security services

Contract locations

  • UK - United Kingdom

Participation

Particular suitability

Small and medium-sized enterprises (SME)


Submission

Publication date of tender notice (estimated)

8 October 2025

Enquiry deadline

15 October 2025, 2:00pm

Tender submission deadline

3 November 2025, 2:00pm

Submission address and any special instructions

***The deadline date and time for the EoI Selection Questionnaire submission is Wednesday 1st October 2025 @14:00***

In order to participate in the Procurement and be considered for the opportunity to submit an initial Tender, Bidders must submit this Selection Questionnaire a signed copy of annex 1 - Non Disclosure Agreement and any other information as required.

The objective of this Selection questionnaire is to identify a-list of capable potential Bidders (on the basis of the evaluation criteria set out herein) who will participate in a subsequent Tender exercise for the award of a Contract for "Thread Led Penetration Testing - Black Team".

Prospective bidders should note that no material changes to the Non Disclosure agreement will be considered.

All communication with the Authority must be conducted via the Procurement Portal: Jaggaer.

Where a supplier is unsure or requires any clarification, they should check with the contracting authority by the date set out in the notice.

The Contracting Authority confirms that it will keep confidential and will not disclose to any third parties any information obtained from a named Potential Supplier's, other than to the other collaborating parts of the Crown that are supporting the UK Space agency with the competition and/or Contracting Authorities obligations herby advised herein and defined by the regulations, or pursuant to an order of the court or demand made by any competent authority or body where the authority is under a legal or regulatory obligation to make such a disclosure e.g. a Freedom of Information Request.

Please note that the Contracting Authority does not have any involvement in regard to the running and or maintenance control over the CDP, therefore any queries in regard to using this system will need to be via the Cabinet Office CDP Technical help options.

How to Apply

To register on the Jaggaer eSourcing portal please use the link https://beisgroup.ukp.app.jaggaer.com/ and follow the instructions to register as a supplier.

Once you are logged into the system you will be able to locate the Procurement you wish to leave a bid on by clicking the ITTs Open to All Suppliers and searching for the reference number (UKSAC25_0071 and itt_2314)

All enquiries with respect to access to the eSourcing portal and problems with functionality within the portal must be submitted to the eSourcing Helpdesk

Phone 08000 698 632

Email customersupport@jaggaer.com

Tenders may be submitted electronically

Yes

Languages that may be used for submission

English

Award decision date (estimated)

17 November 2025


Award criteria

This table contains award criteria for this lot
Name Type Weighting
Approach and Methodology Quality 30%
Staff to Deliver Quality 30%
Price Price 20%
Timescales and Risk Management Quality 10%
Social Value Quality 10%

Other information

Payment terms

A milestone payment plan may be proposed and/or agreed upon post contract award. This plan should reflect key delivery stages and associated payment triggers. Payment upon successful delivery of work packages/deliverables.

Description of risks to contract performance

Security and confidentiality requirements:

• This opportunity will be restricted to companies based in the United Kingdom on grounds of national security - suppliers will be asked to complete an initial expression of interest and meet the Conditions of Participation included within this to be granted access to tender documentation

• There are security implications as in effect the delivery org is 'undertaking unauthorised access' (except at the knowledge and agreement with the industry SPOC) to secure buildings. The contract org will be aware of the requirements to notify the emergency services and take appropriate steps to avoid any active emergency response.

• End of assessment reports on vulnerabilities and recommendations for rectification will be owned by the company assessed and discussions, transfer of information between the deliver party and receiving org need to be confidential. The delivery org should not retain any intelligence material or assessments after the end of the contract. UKSA will hold executive summary reports on each assessment securely for use in future discussions.

• UKSA will not be publishing details of the awarded supplier as this information is considered exempt on national security grounds, in order to protect the sensitive information this supplier will have access to (Section 94)


Procedure

Procedure type

Open procedure


Contracting authority

UK Space Agency

  • Public Procurement Organisation Number: PRTY-4245-MTJY

Quad Two Building 1st Floor, Rutherford Avenue, Harwell Science and Innovation Campus

Didcot

OX11 0DF

United Kingdom

Region: UKJ14 - Oxfordshire

Organisation type: Public authority - central government


Other organisation

These organisations are carrying out the procurement, or part of it, on behalf of the contracting authorities.

UK Shared Business Services Ltd

Summary of their role in this procurement: Managing bid submissions

  • Public Procurement Organisation Number: PMPN-7535-GNTG

Polaris House, North Star Avenue

Swindon

SN2 1FF

United Kingdom

Region: UKK14 - Swindon


Contact organisation

Contact UK Shared Business Services Ltd for any enquiries.