Skip to content
Tenderpatch

Continuous Testing (PTaaS) Service Agreement

THAMES WATER UTILITIES LIMITED

Open Interest closes in 17 days

Key facts

Deadline to express interest or request to participate
Tuesday 3 November 2026, 12:00 (UK time) Interest closes in 17 days
Buyer's estimated value
£2,000,000 (excl. VAT) The buyer's own estimate, not income to you.
Clarification questions deadline
20 October 2026, 17:00
Contract period
31 Mar 2027 to 31 Mar 2030
Procedure
Competitive flexible procedure
Notice type
Tender notice (UK4)
Suitable for SMEs (per buyer)
Yes

Decision brief

Taken from the buyer's published notice (shown as written, shortened where long). Tenderpatch has not added to or interpreted it. Always read the official documents before bidding.

How bids will be scored
  • Technical 70%
  • Commercial 30%
Conditions of participation (what you must show)

other There are a combination of Pass/Fail evaluated questions and technical questions which will be evaluated. A detailed explanation of what is expected from bidders for each evaluated question is available in the procurement documentation through our sourcing platform Ariba.

Contract length and extensions
31 Mar 2027 to 31 Mar 2030. Extensions: Thames Water envisages that the contract will be awarded for an initial term of 3 years with options to extend by 1 year or longer, up to a maximum overall term of 8 years.
How to submit
If you are interested in participating, please complete this form: https://forms.cloud.microsoft/e/xBDaHtLPD7 Open forms.cloud.microsoft ↗ Electronic submission: allowed.
Tender documents
No document links in the notice. Use the official notice link.
New to public tenders? Plain-English guide to this page
Framework
An agreement that sets terms for work the buyer may order later, often from several suppliers. The value shown usually covers the whole agreement, not one job.
Open for bids / closing date
You must submit by the closing date and time, normally through the buyer's own online portal. Late bids are normally refused.
Clarification questions
A deadline for asking the buyer questions about the tender. It is earlier than the closing date.
Conditions of participation
What the buyer asks suppliers to show before they can be considered, such as experience, insurance or accreditations.
Bids are scored on
How the buyer will compare bids, usually a split between price and quality. A 60/40 split in favour of quality means the cheapest bid will not necessarily win.
Lots
A tender can be split into parts. You can often bid for only the lots that suit you.
Area (ITL)
The buyer names an official statistical area for where the work is, not a street address. Check the tender documents for the actual sites.
UK4 and other notice codes
Official codes for the type of notice. A "tender notice" means bids are being invited.

General explanations written by Tenderpatch, not part of this notice.

Description

IMPORTANT: Please read this section before deciding whether you wish to register for this event. This section provides you with information regarding the scope of this procurement and details some of the key requirements that a successful applicant MUST be able to deliver. This tender is for a new direct contract for a Continuous Testing supplier to implement and provide a fully governed continuous testing framework for IT covering penetration testing, red/purple team exercises, cyber stress testing, vulnerability discovery and remediation re-testing. The preferred supplier must support red and purple team testing that will include a multi phase continuous testing model (e.g. tag and release), where red team activity transitions into purple teaming upon detection, and findings are shared in cycle while testing continues across subsequent phases. The service must include active collaboration with Thames Water teams during purple team activities, including validation of controls, detection capability, and response processes. The solution must demonstrate clear human oversight across testing, validation, and remediation activities, with automation used to support workflows (e.g. tracking, reporting, prioritisation) but not to replace core testing, validation, or assurance activities. The supplier must support collaborative remediation and retesting, ensuring findings are handed over, validated, and retested with Thames Water teams, with end to end traceability through to closure. The following conditions would be considered as some of key requirements for a supplier to meet to be considered for this opportunity: • Availability of a yearly penetration test as a minimum • A fully functional PTaaS service that can deliver service in line with applicable cadences • A qualified, accredited and suitably vetted PTaaS support team Thames Water reserves the right to refine the award criteria. Please note that that deadline for asking for access to the PSQ & submitting of the PSQ is Tuesday, 3 November 2026, at 12 p.m.