Contracts

Small-firm friendly

Continuous Testing (PTaaS) Service Agreement

Thames Water needs a continuous testing service provider to run ongoing penetration testing, red team and purple team exercises, and vulnerability discovery across their IT infrastructure. The supplier must work collaboratively with Thames Water teams to validate controls, detect issues, and support remediation with full traceability.

  • Must support red and purple team testing with multi-phase continuous model
  • Must provide active collaboration during purple team activities
  • Must demonstrate human oversight for testing, validation and remediation
  • Must support collaborative remediation and retesting with end-to-end traceability

Framework established in July 2026 including Dionach Limited, Expleo UK Limited, Halo I.S Ltd, Pen Test Partners LLP and others for cyber security testing. Inferred from prior awards to this buyer, not confirmed.