Documents for this notice are only available to suppliers who have noted interest.

To access the documents, please click the "Note Interest" button above to add this notice to your Current Notices.

Summary

OCID:: ocds-kuma6s-170603
Published by:: Social Care Wales
Authority ID:: AA0289
Publication date:: 16 September 2026
Deadline date:: 05 October 2026
Notice type:: Contract Notice
Has documents:: Yes
Has SPD:: No
Has Carbon Reduction Plan:: No

Abstract

Social Care Wales requires the provision of an automated penetration testing and vulnerability assessment platform to enable the continuous assessment and monitoring of its internet-facing systems and services. The solution shall provide automated security testing, vulnerability identification, risk reporting and continuous monitoring of authorised assets, enabling Social Care Wales to proactively identify, assess and manage cyber security risks. The service shall provide both scheduled and on-demand security testing capabilities through a secure web-based platform and support the ongoing management of vulnerabilities through reporting, tracking and remediation oversight.

Full notice text

CONTRACT NOTICE – NATIONAL

Notice Type: SERVICES

1 Authority Details

1.1 Authority Name and Address

Official Name: Social Care Wales
Postal Address: South Gate House, Wood Street,
Town: Cardiff	Postal Code: CF10 1EW	Country: UK
For the attention of: Procurement Team	Telephone: +44 3003033444
E-Mail:	Fax:
Internet Address (URL): http://www.socialcare.wales Electronic access to information: https://www.sell2wales.gov.wales Electronic submission of tenders and requests to participate: https://www.sell2wales.gov.wales

1.2 Address from which documentation may be obtained

Official Name: Social Care Wales
Postal Address: South Gate House, Wood Street,
Town: Cardiff	Postal Code: CF10 1EW	Country: UK
For the attention of:	Telephone: +44 3003033444
E-Mail:	Fax:
Internet Address (URL): http://www.socialcare.wales

1.3 Completed documents must be returned to:

Official Name: Social Care Wales
Postal Address: South Gate House, Wood Street,
Town: Cardiff	Postal Code: CF10 1EW	Country: UK
For the attention of:	Telephone: +44 3003033444
E-Mail:	Fax:
Internet Address (URL): http://www.socialcare.wales

2 Contract Details

2.1 Title

Provision of an Automated Penetration Testing and Vulnerability Assessment Solution

2.2 Description of the goods or services required

The solution shall provide automated security testing, vulnerability identification, risk reporting and continuous monitoring of authorised assets, enabling Social Care Wales to proactively identify, assess and manage cyber security risks.

The service shall provide both scheduled and on-demand security testing capabilities through a secure web-based platform and support the ongoing management of vulnerabilities through reporting, tracking and remediation oversight.

NOTE: To register your interest in this notice and obtain any additional information please visit the Sell2Wales Web Site at https://www.sell2wales.gov.wales/Search/Search_Switch.aspx?ID=170603.

The buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.sell2wales.gov.wales/sitehelp/help_guides.aspx.

Suppliers are advised to allow adequate time for uploading documents and to dispatch the electronic response well in advance of the closing time to avoid any last minute problems.

2.3 Notice Coding and Classification

a) Commodity Codes

	Code		Description
	48730000		Security software package
	72212730		Security software development services
	72222300		Information technology services
	72800000		Computer audit and testing services
	72810000		Computer audit services
	72820000		Computer testing services

b) Delivery Location/Area

	Code		Location
	1000		WALES
	1010		West Wales and The Valleys
	1011		Isle of Anglesey
	1012		Gwynedd
	1013		Conwy and Denbighshire
	1014		South West Wales (Carmarthenshire, Pembrokeshire, Ceredigion)
	1015		Central Valleys (Merthyr Tydfil, Rhondda Cynon Taf)
	1016		Gwent Valleys (Torfaen, Blaenau Gwent, Caerphilly)
	1017		Bridgend and Neath Port Talbot
	1018		Swansea
	1020		East Wales
	1021		Monmouthshire and Newport
	1022		Cardiff and Vale of Glamorgan
	1023		Flintshire and Wrexham
	1024		Powys

2.4 Total quantity or scope of tender

There is a budget of £9,000-£12,000 (inclusive of any applicable VAT) agreed for this quote across the full contract term (£3,000-£4,000 (inclusive of any applicable VAT, per annum).

The contract will run from 25 October 2026 to 24 October 2029, for a total of 3 years.

3 Conditions for Participation

3.1 Minimum standards and qualification required

Please see RFQ attached.

4 Administrative Information

4.1 Type of Procedure

Single stage

4.2 Reference number attributed to the notice by the contracting authority

N/a

4.3 Time Limits

Time-limit for receipt of completed tenders
05-10-2026 Time 12:00

Estimated award date
23-10-2026

4.5 Language or languages in which tenders or requests to participate can be drawn up

EN CY

4.6 Tender Submission Postbox

The buyer has indicated that it will accept electronic responses to this notice via the Postbox facility. A user guide is available at https://www.sell2wales.gov.wales/sitehelp/help_guides.aspx

5 Other Information

5.1 Additional Information

(WA Ref:170603)

5.2 Additional Documentation

The following additional documents relating to this notice are available from the site:

Request for Quote - Automated Penetration Testing and Vulnerability Assessment Solution

cy-Request for Quote - Automated Penetration Testing and Vulnerability Assessment Solution

Appendix 1 - Tender Cover Sheet

Atodiad 1 -Taflen Glawr Tendr

Appendix 2 – Technical Quality Response Document

Atodiad 2 - Dogfen Ymateb Ansawdd

Appendix 3 – Financial and Pricing Response Document

Atodiad 3 - Dogfen Ymateb Ariannol

5.3 Publication date of this notice

16-09-2026

SF 51a

Coding

Commodity categories

ID	Title	Parent category
72800000	Computer audit and testing services	IT services: consulting, software development, Internet and support
72810000	Computer audit services	Computer audit and testing services
72820000	Computer testing services	Computer audit and testing services
72222300	Information technology services	Information systems or technology strategic review and planning services
72212730	Security software development services	Programming services of application software
48730000	Security software package	Software package utilities

Delivery locations

ID	Description
1017	Bridgend and Neath Port Talbot
1022	Cardiff and Vale of Glamorgan
1015	Central Valleys (Merthyr Tydfil, Rhondda Cynon Taf)
1013	Conwy and Denbighshire
1020	East Wales
1023	Flintshire and Wrexham
1016	Gwent Valleys (Torfaen, Blaenau Gwent, Caerphilly)
1012	Gwynedd
1011	Isle of Anglesey
1021	Monmouthshire and Newport
1024	Powys
1014	South West Wales (Carmarthenshire, Pembrokeshire, Ceredigion)
1018	Swansea
1000	WALES
1010	West Wales and The Valleys

Alert region restrictions

The buyer has restricted the alert for this notice to suppliers based in the following regions.

ID	Description
There are no alert restrictions for this notice.

About the buyer

Main contact:: N/a
Admin contact:: N/a
Technical contact:: N/a
Other contact:: N/a

Further information

Date	Details
No further information has been uploaded.

Postbox

The awarding buyer has indicated that it will accept electronic responses to this notice via the Tender Submission Postbox facility.

Submit your tender response electronically in a secure environment.

To create an electronic response please click the "Add to my interest list" button at the top of the page.

For more information on the Postbox Facility please refer to the user guide:

Postbox – for Buyers and Suppliers

Q&A

Ask the buyer any questions you may have relating to this notice. To ask the buyer a question or questions please click the "View Questions and Answers" button.

Additional documents

The following additional documents have been attached to this notice. To obtain these documents please select the individual file names below.

Current documents

Documents are restricted until you note interest in this notice. The documents will become publicly available after the response deadline has passed.

There are no documents attached to this document

Replaced documents

There are no previous versions of these documents.

Provision of an Automated Penetration Testing and Vulnerability Assessment Solution

Contents

Summary

Abstract

Full notice text

CONTRACT NOTICE – NATIONAL

1 Authority Details

1.1

Authority Name and Address

1.2

Address from which documentation may be obtained

1.3

Completed documents must be returned to:

2 Contract Details

2.1

Title

2.2

Description of the goods or services required

2.3

Notice Coding and Classification

2.4

Total quantity or scope of tender

3 Conditions for Participation

3.1

Minimum standards and qualification required

4 Administrative Information

4.1

Type of Procedure

4.2

Reference number attributed to the notice by the contracting authority

4.3

Time Limits

4.5

Language or languages in which tenders or requests to participate can be drawn up

4.6

Tender Submission Postbox