This is pretty normal for government procurement, though. and in fact, most large organisation procurement. There's a whole wall of standards that the supplier must meet, e.g. ISO9000 that your little web-dev shop almost certainly doesn't. They won't buy from a supplier that is likely to go out of business. There's a ton of other criteria that you've got to meet to get the business. If there's
any, even the slightest, chance that buying from a business might one day reflect badly on the civil servant in the procurement office, then they won't buy from that business. The civil servant has nothing to lose from saying "no" and runs a risk if they say "yes".
Businesses that do meet these criteria charge like wounded bulls. In part because they know that all the other businesses that the govt could turn to will also charge like wounded bulls.