Continuous Testing (PTaaS) Service Agreement[E18]

From the notice

IMPORTANT: Please read this section before deciding whether you wish to register for this event. This section provides you with information regarding the scope of this procurement and details some of the key requirements that a successful applicant MUST be able to deliver. This tender is for a new direct contract for a Continuous Testing supplier to implement and provide a fully governed continuous testing framework for IT covering penetration testing, red/purple team exercises, cyber stress testing, vulnerability discovery and remediation re-testing. The preferred supplier must support red and purple team testing that will include a multi phase continuous testing model (e.g. tag and release), where red team activity transitions into purple teaming upon detection, and findings are shared in cycle while testing continues across subsequent phases. The service must include active collaboration with Thames Water teams during purple team activities, including validation of controls, detection capability, and response processes. The solution must demonstrate clear human oversight across testing, validation, and remediation activities, with automation used to support workflows (e.g. tracking, reporting, prioritisation) but not to replace core testing, validation, or assurance activities. The supplier must support collaborative remediation and retesting, ensuring findings are handed over, validated, and retested with Thames Water teams, with end to end traceability through to closure. The following conditions would be considered as some of key requirements for a supplier to meet to…[E6]

• ConditionDelivery location: UKI, United Kingdom.[E7]
• ConditionDelivery location: UKJ, United Kingdom.[E8]
• ConditionThe legal basis is UKPGA 2023/54 (Procurement Act 2023).[E9]
• ConditionLot 1 selection criterion: There are a combination of Pass/Fail evaluated questions and technical questions which will be evaluated. A detailed explanation of what is expected from bidders for each evaluated question is available in the procurement documentation thr…[E10]
• ConditionThe buyer marks lot 1 as suitable for small and medium-sized businesses.[E11]
• DetailLot 1 runs from 1 Apr 2027 to 31 Mar 2030, extendable to 31 Mar 2035.[E3]
• DetailClarification questions close at 20 Oct 2026, 17:00 UTC+01:00.[E12]
• DetailThe notice explains how to submit a tender.[E17]
• The notice data states no restriction on who may bid. Exclusion grounds and selection criteria in the tender documents still apply.

• UnknownWe read the published notice, not the full tender documents.

1. First seen · 28 Oct 2026, 14:16 UTC

   The source published a call for competition with a future deadline.

   Source document 102135-2026

Every fact on this page comes from the published notice. Each entry shows the document and the field it was read from.

1. E1

   The buyer is THAMES WATER UTILITIES LIMITED.

   Document 102135-2026, field /buyer/name, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

2. E2

   The notice is classified under CPV 72000000 (IT services: consulting, software development, Internet and support).

   Document 102135-2026, field /tender/items/0/additionalClassifications/0/id, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

3. E3

   Lot 1 runs from 1 Apr 2027 to 31 Mar 2030, extendable to 31 Mar 2035.

   “2027-04-01T00:00:00+01:00 to 2030-03-31T23:59:59+01:00”

   Document 102135-2026, field /tender/lots/0/contractPeriod, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

4. E4

   The buyer's address is in United Kingdom.

   Document 102135-2026, field /parties/0/address/country, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

5. E5

   Requests to participate must be submitted by 10 Nov 2026, 12:00 UTC. Invited suppliers bid later.

   “2026-11-10T12:00:00Z”

   Document 102135-2026, field /tender/expressionOfInterestDeadline, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

6. E6

   The buyer describes the requirement in the notice.

   “IMPORTANT: Please read this section before deciding whether you wish to register for this event. This section provides you with information regarding the scope of this procurement and details some of the key requirements that a successful applicant MUST be able to deliver. This…”

   Document 102135-2026, field /tender/description, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

7. E7

   Delivery location: UKI, United Kingdom.

   Document 102135-2026, field /tender/items/0/deliveryAddresses/0, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

8. E8

   Delivery location: UKJ, United Kingdom.

   Document 102135-2026, field /tender/items/0/deliveryAddresses/1, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

9. E9

   The legal basis is UKPGA 2023/54 (Procurement Act 2023).

   Document 102135-2026, field /tender/legalBasis/id, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

10. E10

    Lot 1 selection criterion: There are a combination of Pass/Fail evaluated questions and technical questions which will be evaluated. A detailed explanation of what is expected from bidders for each evaluated question is available in the procurement documentation thr…

    “There are a combination of Pass/Fail evaluated questions and technical questions which will be evaluated. A detailed explanation of what is expected from bidders for each evaluated question is available in the procurement documentation through our sourcing platform Ariba.”

    Document 102135-2026, field /tender/lots/0/selectionCriteria/criteria/0/description, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

11. E11

    The buyer marks lot 1 as suitable for small and medium-sized businesses.

    “sme: true”

    Document 102135-2026, field /tender/lots/0/suitability/sme, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

12. E12

    Clarification questions close at 20 Oct 2026, 17:00 UTC+01:00.

    “2026-10-20T17:00:00+01:00”

    Document 102135-2026, field /tender/enquiryPeriod/endDate, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

13. E13

    This notice changes or updates a call for competition.

    “tenderUpdate”

    Document 102135-2026, field /tag, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

14. E14

    The procedure is: Competitive flexible procedure.

    Document 102135-2026, field /tender/procurementMethodDetails, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

15. E15

    The notice was published on 28 Oct 2026.

    “2026-10-28T14:12:39Z”

    Document 102135-2026, field /tender/documents/1/datePublished, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

16. E16

    Find a Tender gives the tender status as active.

    Document 102135-2026, field /tender/status, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

17. E17

    The notice explains how to submit a tender.

    “If you are interested in participating, please complete this form: https://forms.cloud.microsoft/e/xBDaHtLPD7”

    Document 102135-2026, field /tender/submissionMethodDetails, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

18. E18

    The notice is titled "Continuous Testing (PTaaS) Service Agreement".

    Document 102135-2026, field /tender/title, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

19. E19

    The stated value is GBP 2,000,000 excluding VAT.

    “2000000 GBP”

    Document 102135-2026, field /tender/value/amount, read 28 Oct 2026, 14:16 UTC · source ↗ (opens in a new tab)

Contains public sector information from Find a Tender, licensed under the Open Government Licence v3.0. Data licence: Open Government Licence v3.0 ↗ (opens in a new tab). Personal contact details in notices are not stored or shown.