UKSAC25_0071 - Threat Led Penetration Testing - Black Team

**The deadline date and time for the EoI Selection Questionnaire submission is Wednesday 1st October 2025 @14:00**

UKSA is seeking a supplier to provide physical penetration testing for a number of companies working in the space industry, in order to; • Support companies with understanding their existing security and resilience to physical attack. • Inform corrections and upgrades to physical security by identifying vulnerabilities and providing recommendations for improvement. • There is a likely to be the requirement to work with multiple (up to 4) companies at the same time in order to complete the work packages below within the timescale of the contract.

Scope of the Opportunity: UKSA is seeking a supplier to provide physical penetration testing for companies working in the space industry. The full specification will be disclosed to shortlisted suppliers upon signature of a Non-Disclosure Agreement. Given the nature of the requirement and the national security considerations, no information will be disclosed to shortlisted bidders without a fully executed Non-Disclosure Agreement in place. Any shortlisted bidder who does not submit a Non-Disclosure Agreement will not be eligible to receive further documentation or participate in subsequent stages following shortlisting. This requirement seeks suppliers who can: •Support companies with understanding their existing security and resilience to physical attack. •Inform corrections and upgrades to physical security by identifying vulnerabilities and providing recommendations for improvement. •There is a likely to be the requirement to work with multiple (up to 4) companies at the same time in order to complete work packages within the timescale of the contract.

Funding & Duration: •The maximum contract value is up to £240,000 (including VAT). 5 months + 1-year optional extension to be granted at the Contracting Authority's discretion, subject to budget availability.

•Duration: contract will end 31st March 2026, with option to extend to 31st March 2027.

Eligibility: Responses are invited from UK-registered companies with proven capabilities in physical penetration testing (also known as "black teaming" or "red teaming") who meet the following requirements: •Public sector experience of delivering sensitive projects. •The ability to field personnel with Security Check (SC) clearance by the time of contract award. •Cyber Essentials accredited, with robust processes for handling and storing classified or sensitive information (noting there is no requirement to handle information above OFFICIAL-SENSITIVE within this contract) •CREST accreditation for physical penetration or QNUK Level 4 award in Physical Penetration Testing Operations (RQF)

The provision Threat Led Penetration Testing. This is an open procurement and the Tender Notice can be found on Find a Tender here: https://www.findtender.service.gov.uk/dashboard/notices/form/preview?fid=31&nid=282087&gid=11

Additional information: The deadline date and time for the EoI Selection Questionnaire submission is Wednesday 1st October 2025 @14:00

In order to participate in the Procurement and be considered for the opportunity to submit an initial Tender, Bidders must submit this Selection Questionnaire a signed copy of annex 1 - Non Disclosure Agreement and any other information as required.

The objective of this Selection questionnaire is to identify a-list of capable potential Bidders (on the basis of the evaluation criteria set out herein) who will participate in a subsequent Tender exercise for the award of a Contract for "Thread Led Penetration Testing - Black Team".

Prospective bidders should note that no material changes to the Non Disclosure agreement will be considered.

All communication with the Authority must be conducted via the Procurement Portal: Jaggaer.

Where a supplier is unsure or requires any clarification, they should check with the contracting authority by the date set out in the notice. The Contracting Authority confirms that it will keep confidential and will not disclose to any third parties any information obtained from a named Potential Supplier's, other than to the other collaborating parts of the Crown that are supporting the UK Space agency with the competition and/or Contracting Authorities obligations herby advised herein and defined by the regulations, or pursuant to an order of the court or demand made by any competent authority or body where the authority is under a legal or regulatory obligation to make such a disclosure e.g. a Freedom of Information Request.

Please note that the Contracting Authority does not have any involvement in regard to the running and or maintenance control over the CDP, therefore any queries in regard to using this system will need to be via the Cabinet Office CDP Technical help options.

How to Apply:

To register on the Jaggaer eSourcing portal please use the link https://beisgroup.ukp.app.jaggaer.com/ and follow the instructions to register as a supplier.

Once you are logged into the system you will be able to locate the Procurement you wish to leave a bid on by clicking the ITTs Open to All Suppliers and searching for the reference number (UKSAC25_0071 and itt_2314)

All enquiries with respect to access to the eSourcing portal and problems with functionality within the portal must be submitted to the eSourcing Helpdesk

Phone: 08000 698 632 Email: [email protected]