Cyber Security Tenders and Contracts

See open cyber security tenders and awarded contracts for the UK public sector.

Cyber security procurement spans managed security operations centre and SIEM services, penetration testing and PSN IT health checks, red teaming, vulnerability management and cloud security subscriptions. Cyber Essentials and information security management certification, awareness training and cyber consultancy sit alongside them.

Cyber security buying is mostly a call-off from the CCS cyber security framework, G-Cloud or a dynamic purchasing system rather than an open tender. Councils, NHS trusts, central government agencies, universities, housing associations and rail operators are the main buyers of cyber security services.

6,901 results

  • Expired contractPublished 29 May 2015

    Penetration testing & PCI scans

    The Coal AuthoritySupplier(s) Portcullis Computer Security LtdComputer support servicesAwarded 13 March 2015

    £12,750

  • Expired contractPublished 28 May 2015

    RM4620 L0688 Cyber Resilience Review

    Crown Commercial ServiceSupplier(s) Deloitte LLPResearch consultancy servicesAwarded 27 March 2015

    £118,648

  • Expired contractPublished 21 May 2015

    Cyber Security Services

    Driver and Vehicle Licensing AgencySupplier(s) Silcox Information Security LimitedIT services: consulting, software development, Internet and supportAwarded 5 May 2015

    £396,000

  • Expired contractPublished 13 May 2015

    Cyber Streetwise Website

    Crown Commercial ServiceSupplier(s) Nudge Digital LtdComputer support and consultancy servicesAwarded 30 April 2015

    £12,080

  • Expired contractPublished 7 May 2015

    Digital Service Penetration testing

    Ministry of JusticeSupplier(s) Pentura LtdIT services: consulting, software development, Internet and supportAwarded 25 October 2014

    £30,000

  • Expired contractPublished 9 April 2015

    RM5293 SO-8791 Provision of Penetration Testing

    Crown Commercial ServiceSupplier(s) Centreprise InternationalSoftware package and information systemsAwarded 18 March 2015

    £12,500

  • Stale Pre-tenderPublished 25 February 2015

    Forensic Script Examination Service for the Standards and Testing Agency (STA) 2015.

    Department for EducationEducation and training services

    £1

  • Expired contractPublished 1 February 2015

    Penetration Testing

    £80,000

  • Awarded contractPublished 19 December 2014

    Security and penetration testing of external facing online services

    Road Safety Authority (RSA)Supplier(s) Encription Ireland LimitedData security software package

    Value not stated

  • Awarded contractPublished 5 November 2014

    Information Security and Compliance Audit: Luas Infrastructure System

    Railway Procurement Agency ( RPA )Supplier(s) Ansec IA LimitedComputer audit and testing servicesAwarded 5 November 2014

    Value not stated

  • Never miss a tender

    Get new Cyber Security notices delivered to your inbox.

  • Awarded contractPublished 3 November 2014

    Anti Virus Software

    Legal Aid BoardSupplier(s) ThreatscapeSoftware package and information systems

    Value not stated

  • Awarded contractPublished 1 June 2014

    IT Tallaght Security Tender

    Institute of Technology TallaghtSecurity software package

    Value not stated

  • Expired contractPublished 7 May 2014

    Mcafee MFE Endpoint Protection

    £6,000

  • Expired contractPublished 1 November 2013

    Information Security Consultancy Support

    West Yorkshire PoliceSupplier(s) Carbon60 LimitedAwarded 1 November 2013

    £120,000

  • Awarded contractPublished 31 October 2013

    Provision of Services of ICT Security Vulnerability Assessment and Penetration Testing

    National Transport AuthorityComputer network services

    Value not stated

  • Awarded contractPublished 18 September 2013

    Provision of Information Security Services for the Local Authority Sector

    Dublin City CouncilComputer-related professional services

    Value not stated

  • Awarded contractPublished 2 August 2013

    Provision of accreditation support services

    ForfasTechnical analysis or consultancy services

    Value not stated

  • Awarded contractPublished 1 February 2013

    N8-N25 Dunkettle Interchange Preliminary Ground Investigation Contract

    Value not stated

  • Awarded contractPublished 4 September 2011

    RFT for the Provision of an ICT Security Vulnerability Assessment & Penetration Testing

    Department of Justice and EqualityInformation technology services

    Value not stated

  • Expired contractPublished 1 July 2008

    Security Services

    £2,000,000

Showing 6,881–6,900 of 6,901 results

Frequently asked questions

Frequently asked questions about cyber security, information security, cyber security services, cyber security consultancy, cyber security training, cyber assessment framework, cyber security assurance, cyber security assessment, cyber security audit, cyber maturity, cyber security certification, cyber essentials assessment, penetration testing, vulnerability management, security operations centre, managed detection and response, govassure, endpoint protection, security awareness training, ethical hacking, SIEM, ransomware, cloud security, identity and access management, red teaming, phishing simulation, cyber security strategy, darktrace, crowdstrike, cyber security operations, cyber attack, fortinet, sophos in the UK public sector.

  • What kind of work do cyber security tenders in the UK cover?

    Cyber security tenders cover security operations centre monitoring, penetration testing and ethical hacking, vulnerability management and endpoint protection, managed detection and response, Cyber Essentials and Cyber Assessment Framework audits, and staff security awareness training. Buyers range from central government departments and the NHS to police forces, universities and local councils.

  • What CPV codes cover cyber security procurement?

    The two that turn up most often are 72800000 (Computer audit and testing services) and 72222300 (Information technology services), covering the audit and testing and broad IT-services routes buyers use for cyber security work. 72000000 (IT services: consulting, software development, Internet and support) is broader still, and covers the wider IT-procurement route many cyber security engagements are bought through.

  • Do cyber security contracts in the UK usually run through frameworks?

    Often, yes. Notices repeatedly reference cyber security frameworks and DPS arrangements running call-offs for SOC monitoring, penetration testing, and Cyber Essentials assessment work, alongside open tenders procured directly by the buyer. Both routes appear, so a search built only around open tenders misses a real slice of the market.

  • Which frameworks are used to buy cyber security services in the UK public sector?

    G-Cloud, the Crown Commercial Service's cloud services framework, is a common route for cyber security work such as penetration testing, vulnerability management software and security assurance. Councils, the National Audit Office, UK Health Security Agency and the Department of Health and Social Care have called off from it.

    The Government Commercial Agency's cyber security services dynamic purchasing system covers penetration testing, security operations centre monitoring and security operations service management. Buyers such as Defra, the UK Hydrographic Office and UK Research and Innovation have bought through it by mini-competition.

  • How do I find cyber security contracts before they are formally tendered?

    Read digital and technology strategies, licence and contract renewal dates, architecture reviews and early market engagement notices, which show cyber security work coming due ahead of a notice. On Stotles you can track those signals and the buyers behind them, then follow a notice from pre-tender through to award.

Win more Cyber Security Tenders and Contracts contracts with Stotles

Get Cyber Security Tenders and Contracts alerts, buyer intelligence and bid tools, all in one place.