Cyber Security Tenders and Contracts

See open cyber security tenders and awarded contracts for the UK public sector.

Cyber security procurement spans managed security operations centre and SIEM services, penetration testing and PSN IT health checks, red teaming, vulnerability management and cloud security subscriptions. Cyber Essentials and information security management certification, awareness training and cyber consultancy sit alongside them.

Cyber security buying is mostly a call-off from the CCS cyber security framework, G-Cloud or a dynamic purchasing system rather than an open tender. Councils, NHS trusts, central government agencies, universities, housing associations and rail operators are the main buyers of cyber security services.

6,902 results

  • Expired contractPublished 26 January 2016

    Former St George’s Hospital Site Ground Investigation

    Homes and Communities AgencySupplier(s) Dunelm Drilling and Geotechnical LtdTest drilling and boring workAwarded 7 March 2016

    £155,000

  • Closed tenderPublished 26 January 2016

    GB-Trent: ICT Health Check Service & Vulnerability Scanning Services

    Stoke-on-Trent City CouncilSoftware package and information systems

    £75,000

  • Expired contractPublished 26 January 2016

    SO16162 Jive Software License Renewal

    Crown Commercial ServiceSupplier(s) Jive Software Inc.Software package and information systemsAwarded 29 January 2015

    £165,000

  • Awarded contractPublished 25 January 2016

    Health services

    £1,954,303

  • Expired contractPublished 22 January 2016

    GW5769 | Care System Cyber Security Awareness E-Learning | HSCIC

    Ministry of DefenceSupplier(s) CM GroupStaff training servicesAwarded 11 January 2016

    £69,512

  • Expired contractPublished 22 January 2016

    Penetration Testing Services at Lancaster University - AWARD

    Lancaster UniversitySupplier(s) NCC Group Security Services LimitedIT services: consulting, software development, Internet and supportAwarded 22 January 2016

    £26,250

  • Expired contractPublished 21 January 2016

    Provision of Securing the Human Engineers Security Awareness Training

    Department of Energy and Climate ChangeSupplier(s) SansEducation and training servicesAwarded 9 December 2015

    £65,000

  • Awarded contractPublished 19 January 2016

    Provision of a Security Information and Event Management (SIEM) Solution

    National Transport AuthoritySupplier(s) ZinopyData services

    Value not stated

  • Awarded contractPublished 19 January 2016

    Data services

    National Transport AuthoritySupplier(s) ZinopyData conversion services

    Value not stated

  • Expired contractPublished 16 January 2016

    Security Penetration and IT Health Check

    Water Services Regulation Authority (Ofwat)Supplier(s) Sapphire Technologies LimitedComputer support and consultancy servicesAwarded 10 December 2015

    £19,944

  • Never miss a tender

    Get new Cyber Security notices delivered to your inbox.

  • Awarded contractPublished 15 January 2016

    Health and social work services

    £1,043,396

  • Expired contractPublished 13 January 2016

    FTS/DE/FsAST/51 - Security Accreditation

    Ministry of DefenceSupplier(s) Carbon60 LimitedAdministration, defence and social security servicesAwarded 5 February 2016

    £10,000

  • Awarded contractPublished 5 January 2016

    The Arts Council requires support to improve information security within the organisation.

    Arts CouncilSupplier(s) BH ConsultingIT services: consulting, software development, Internet and support

    Value not stated

  • Expired contractPublished 30 December 2015

    Security Operations Centre (C-SOC) Gap Analysis.Published for completeness, see description for details

    Home OfficeSupplier(s) KPMG LLPIT services: consulting, software development, Internet and supportAwarded 9 January 2016

    £20,000

  • Expired contractPublished 22 December 2015

    Provision of Support & Maintenance for McAfee Endpoint Protection

    Crown Commercial ServiceSupplier(s) COMPUTACENTER (UK) LIMITEDTechnical servicesAwarded 10 December 2015

    £57,968

  • Closed tenderPublished 21 December 2015

    RSSB_2022 Support for the development of a cross-industry cyber security strategy (T1103)

    Rail Safety and Standards Board LtdResearch and development services and related consultancy services

    £60,000

  • Closed tenderPublished 16 December 2015

    Cyber Security - Internal and External PEN testing

    NPL Management LtdSoftware package and information systems

    £55,000

  • Closed tenderPublished 11 December 2015

    Penetration Testing Services at Lancaster University

    Lancaster UniversityIT services: consulting, software development, Internet and support

    £27,500

  • Expired contractPublished 11 December 2015

    Security Testing

    Transport for LondonSupplier(s) NCC Group Security Services LimitedBusiness analysis consultancy servicesAwarded 20 November 2015

    £887,000

  • Expired contractPublished 9 December 2015

    McAfee Endpoint Protection

    Health and Safety ExecutiveSupplier(s) Herjavec GroupSoftware package and information systemsAwarded 17 November 2015

    £22,342

Showing 6,821–6,840 of 6,902 results

Frequently asked questions

Frequently asked questions about cyber security, information security, cyber security services, cyber security consultancy, cyber security training, cyber assessment framework, cyber security assurance, cyber security assessment, cyber security audit, cyber maturity, cyber security certification, cyber essentials assessment, penetration testing, vulnerability management, security operations centre, managed detection and response, govassure, endpoint protection, security awareness training, ethical hacking, SIEM, ransomware, cloud security, identity and access management, red teaming, phishing simulation, cyber security strategy, darktrace, crowdstrike, cyber security operations, cyber attack, fortinet, sophos in the UK public sector.

  • What kind of work do cyber security tenders in the UK cover?

    Cyber security tenders cover security operations centre monitoring, penetration testing and ethical hacking, vulnerability management and endpoint protection, managed detection and response, Cyber Essentials and Cyber Assessment Framework audits, and staff security awareness training. Buyers range from central government departments and the NHS to police forces, universities and local councils.

  • What CPV codes cover cyber security procurement?

    The two that turn up most often are 72800000 (Computer audit and testing services) and 72222300 (Information technology services), covering the audit and testing and broad IT-services routes buyers use for cyber security work. 72000000 (IT services: consulting, software development, Internet and support) is broader still, and covers the wider IT-procurement route many cyber security engagements are bought through.

  • Do cyber security contracts in the UK usually run through frameworks?

    Often, yes. Notices repeatedly reference cyber security frameworks and DPS arrangements running call-offs for SOC monitoring, penetration testing, and Cyber Essentials assessment work, alongside open tenders procured directly by the buyer. Both routes appear, so a search built only around open tenders misses a real slice of the market.

  • Which frameworks are used to buy cyber security services in the UK public sector?

    G-Cloud, the Crown Commercial Service's cloud services framework, is a common route for cyber security work such as penetration testing, vulnerability management software and security assurance. Councils, the National Audit Office, UK Health Security Agency and the Department of Health and Social Care have called off from it.

    The Government Commercial Agency's cyber security services dynamic purchasing system covers penetration testing, security operations centre monitoring and security operations service management. Buyers such as Defra, the UK Hydrographic Office and UK Research and Innovation have bought through it by mini-competition.

  • How do I find cyber security contracts before they are formally tendered?

    Read digital and technology strategies, licence and contract renewal dates, architecture reviews and early market engagement notices, which show cyber security work coming due ahead of a notice. On Stotles you can track those signals and the buyers behind them, then follow a notice from pre-tender through to award.

Win more Cyber Security Tenders and Contracts contracts with Stotles

Get Cyber Security Tenders and Contracts alerts, buyer intelligence and bid tools, all in one place.