Cyber Security Tenders and Contracts
See open cyber security tenders and awarded contracts for the UK public sector.
Cyber security procurement spans managed security operations centre and SIEM services, penetration testing and PSN IT health checks, red teaming, vulnerability management and cloud security subscriptions. Cyber Essentials and information security management certification, awareness training and cyber consultancy sit alongside them.
Cyber security buying is mostly a call-off from the CCS cyber security framework, G-Cloud or a dynamic purchasing system rather than an open tender. Councils, NHS trusts, central government agencies, universities, housing associations and rail operators are the main buyers of cyber security services.
6,906 results
- Stale Pre-tenderPublished 3 February 2026
Preliminary Market Engagement - Community Nursing Beds for Provision of Assessment and/or Rehabilitation within the Antrim Locality
Value not stated
- Awarded contractPublished 3 February 2026
EX0075-25 Cyber & Data Protection Training Modules
Value not stated
- Expired contractPublished 2 February 2026
Penetration Testing
Value not stated
- Closed tenderPublished 2 February 2026
Skills Bootcamps for Oxfordshire 2026/7
£1,093,000
- Closed tenderPublished 2 February 2026
Request for Tenders for the establishment of a Single Member Framework Agreement for the Provision of ICT Managed Services 2026-30 [609]
Value not stated
- Awarded contractPublished 2 February 2026
THE PROVISION OF THE SERVICING AND MAINTENANCE FOR FIRE FIGHTING EQUIPMENT
Value not stated
- Awarded contractPublished 2 February 2026
Provision of Cyber Security Hardware, Software and Support
£297,730.65
- Awarded contractPublished 31 January 2026
Data Analytics and Automation for Security Event Management
£369,258
- Closed tenderPublished 30 January 2026
WBS-FTS-59249-Provision of a Scanning and Archiving Service for Welsh Blood Service
£121,488
- Awarded contractPublished 30 January 2026
Enhanced Cyber Security Operations Centre
£2,500,000
- Stale Pre-tenderPublished 29 January 2026
TfGM SOC 2026
Value not stated
- Stale Pre-tenderPublished 29 January 2026
Medical Simulations Devices and Technologies
£210,000,000
- Awarded contractPublished 29 January 2026
The Provision of Technical Consultancy Support to Support Operations of the Petroleum Safety Framework (PSF) [620]
Value not stated
- Closed tenderPublished 29 January 2026
The Provision of Technical Consultancy Support to Support Operations of the Petroleum Safety Framework (PSF) [620]
Value not stated
- Awarded contractPublished 29 January 2026
Cyber Security Subscription Renewal
Value not stated
- Stale Pre-tenderPublished 29 January 2026
Dental Equipment, Consumables & Solutions
£338,378,045
- Stale Pre-tenderPublished 29 January 2026
External Defibrillation Equipment, Consumables and Support Services
£160,000,000
- Awarded contractPublished 28 January 2026
PROVISION OF CADAVERIC FACILITIES AND RESOURCES IN SUPPORT OF THE DEFENCE MEDICAL ACADEMY
£1,339,150
- Awarded contractPublished 28 January 2026
45,000,000
45,000,000
- Awarded contractPublished 28 January 2026
External Security Incident and Event Management (SIEM) & Security Operations Centre (SOC) Support Monitoring Service
£95,390.95
Frequently asked questions
Frequently asked questions about cyber security, information security, cyber security services, cyber security consultancy, cyber security training, cyber assessment framework, cyber security assurance, cyber security assessment, cyber security audit, cyber maturity, cyber security certification, cyber essentials assessment, penetration testing, vulnerability management, security operations centre, managed detection and response, govassure, endpoint protection, security awareness training, ethical hacking, SIEM, ransomware, cloud security, identity and access management, red teaming, phishing simulation, cyber security strategy, darktrace, crowdstrike, cyber security operations, cyber attack, fortinet, sophos in the UK public sector.
What kind of work do cyber security tenders in the UK cover?
Cyber security tenders cover security operations centre monitoring, penetration testing and ethical hacking, vulnerability management and endpoint protection, managed detection and response, Cyber Essentials and Cyber Assessment Framework audits, and staff security awareness training. Buyers range from central government departments and the NHS to police forces, universities and local councils.
What CPV codes cover cyber security procurement?
The two that turn up most often are 72800000 (Computer audit and testing services) and 72222300 (Information technology services), covering the audit and testing and broad IT-services routes buyers use for cyber security work. 72000000 (IT services: consulting, software development, Internet and support) is broader still, and covers the wider IT-procurement route many cyber security engagements are bought through.
Do cyber security contracts in the UK usually run through frameworks?
Often, yes. Notices repeatedly reference cyber security frameworks and DPS arrangements running call-offs for SOC monitoring, penetration testing, and Cyber Essentials assessment work, alongside open tenders procured directly by the buyer. Both routes appear, so a search built only around open tenders misses a real slice of the market.
Which frameworks are used to buy cyber security services in the UK public sector?
G-Cloud, the Crown Commercial Service's cloud services framework, is a common route for cyber security work such as penetration testing, vulnerability management software and security assurance. Councils, the National Audit Office, UK Health Security Agency and the Department of Health and Social Care have called off from it.
The Government Commercial Agency's cyber security services dynamic purchasing system covers penetration testing, security operations centre monitoring and security operations service management. Buyers such as Defra, the UK Hydrographic Office and UK Research and Innovation have bought through it by mini-competition.
How do I find cyber security contracts before they are formally tendered?
Read digital and technology strategies, licence and contract renewal dates, architecture reviews and early market engagement notices, which show cyber security work coming due ahead of a notice. On Stotles you can track those signals and the buyers behind them, then follow a notice from pre-tender through to award.
Win more Cyber Security Tenders and Contracts contracts with Stotles
Get Cyber Security Tenders and Contracts alerts, buyer intelligence and bid tools, all in one place.