Find a TenderPast planning noticePlanned procurement notice
Published 22 Aug 2025, 11:30 BST

Official UK procurement notice

Web Application Firewall Partners framework agreement

Official notice

Authority: Jisc (Public body)

Framework agreementServicesOpen procedureAbove thresholdSME suitable
Sectors: IT Services & Software (72) Delivery: UK
Planned pipeline value£800,000pipeline notice, not a live tender
Tender notice expected 29 Aug 2025from the planned procurement notice
Framework period 3 yrsends 20 Oct 2028 · up to 20 Oct 2029 with extensions · starts 20 Oct 2025

What is being bought

Published requirement description

Jisc Cloud Security team are looking to offer a Web Application Firewall (WAF) managed service for its members and customers. The managed service will consist of a third party WAF solution, with a Jisc managed service wrapped around it. The solution must host customer data in the UK and offer comprehensive security features including protection against DDoS attacks, OWASP Top 10 threats, credential stuffing, zero-day attacks, and bot activity. It should also include advanced threat detection using machine learning and behavior analysis, configurable mitigation controls, API protection, antivirus scanning for uploaded files, and real-time analytics for traffic and bot insights. A complete set of requirements will be available in the Invitation to tender.

CPV: Security software development services

How this framework works

From the published notice
Type
Closed framework
Call-offs
call-offs may be awarded directly or by further competition
Places
up to 2 suppliers
Framework period
3 yrs · up to 4 yrs from 20 Oct 2025
Published description of the framework

Rates to be provided by suppliers. Direct award and further competition depending on our customer demands.

The lotProcurement structure

single lot · value published
Lot #1PlannedRenewal 3 yrsSMEPublished value£800,000
Contract period: 20 Oct 2025 – 20 Oct 2028 (3 yrs) · up to 20 Oct 2029 with extensionsValue: £800,000 exc. VAT · £1,000,000 inc. VAT
Delivery: UKEligibility: SME eligible
Extensions: Initial period is 3 years, with further 12 month extension period permitted. (3+1)

What it takes to win
i

How this buyer will score bids.

The evaluation criteria and weights exactly as published on the notice, grouped by family (price, quality, social value and so on).

Evaluation split and conditions of participation as published; the tender pack may add more
How bids were scored
Quality: 80%Price: 20%
Published sub-criteria (2)
  • Technical: 80%
  • Pricing: 20%
Published award criteria (2)
  • Technical: See ITT - subject to change at publication
  • Pricing: See ITT - subject to change at publication
What this means for your bid
  • Price carries 20 of 100 points: a 10% discount moves about 2 points. The method statement decides this lot, not the discount.
  • “Web Application Firewall Partners framework agreement” is a framework: the contest is a place on its panel, up to 2 suppliers, not a single contract: call-offs may be direct or by further competition.

Price arithmetic assumes straight proportional scoring; the tender pack may use another formula.

Procedure terms & legal framework

From the official record
Procedure method
Open procedure
Legal basis
UKPGA · 2023/54 Procurement Act 2023
Procurement category
Services
Notice status
Past planning notice
Procurement threshold
Above threshold (FTS publication)
Regulatory regime
Standard
Commercial structure
Framework agreement
Who may use this agreement
Not stated in the notice; call-off rights may be limited to the establishing authority
Competition type
Competitive procedure
GPA / WTO covered
Yes (GPA)
Recurring procurement
Unspecified in notice
First published
22 Aug 2025, 11:30 BST
Last source update
22 Aug 2025, 11:30 BST
Award evaluation window
Submission end – 4 Oct 2025
Authority reference
Proc2893
FTS notice number
2025/S 000-050817
Latest notice
Planned procurement notice (UK3)
Classification (CPV)
Security software development services
Delivery area
UK
Official registry OCID
ocds-h6vhtk-058cbd Find a Tender

How it was run

Official notice
Run through: EU-Supply (CTM) · Who buys & how to bid on EU-Supply
Public notice page · account needed to bidElectronic submission allowedLanguage: EN
Access & registration note: Free · 5–10 minutes
Appointment period ends
22 Sept 2025, 16:00 BST
Clarification deadline
10 Sept 2025, 12:00 BST
Submission channel
Official e-sourcing portal
Electronic submission
Allowed
Accepted languages
en
Detailed submission instructions & authority contactsFrom official release

Timeline

22 Aug 2025 → 20 Oct 2025 · 6 dates
  1. Planning notice published
    22 Aug 2025, 11:30 BST
  2. Tender notice expected
    29 Aug 2025, 00:59 BST
  3. Clarification questions by
    10 Sept 2025, 12:00 BST
  4. Admission / appointment period endsperiod end, not a bid countdown
    22 Sept 2025, 16:00 BST
  5. Award decision expected by392 days ago
    4 Oct 2025, 00:59 BST
  6. Contract starts376 days ago
    20 Oct 2025

Notice history

1 event · 1 release on Find a Tender
  1. Planned procurement notice published
    22 Aug 2025, 11:30 BST
    UK3

Commercial outcome & contract awards

Pipeline notice
Awards (0)
No award published
Contracts (0)
No contract published
Bid statistics
No aggregate bid statistics published

Contracting authority & participating public bodies

Jisc

Contracting authorityPublic authority - sub-central government GB-PPON: PGYD-1575-ZHXX 4 Portwall Lane, Bristol, South West, BS1 6NBContact name, email, phone

Official documents & specifications (1)

Official links; attachments are not copied

Notices published for this procedure