Zero Trust Tenders and Contracts

Zero trust tenders cover security service edge and secure access service edge platforms, zero trust network access licences, network access control and micro-segmentation. Many appear as one requirement inside a firewall replacement, VPN retirement or wider network refresh.

Stotles brings together zero trust tenders and contracts from 100+ portals into one search, so you do not have to check each portal separately, and you can set alerts for new opportunities across the UK and Ireland.

If you want to search the government portals directly, Find a Tender carries higher-value contracts across the UK and Contracts Finder carries lower-value contracts in England. Public Contracts Scotland, Sell2Wales and eTendersNI cover Scotland, Wales and Northern Ireland, Ireland's eTenders covers Irish public bodies, and many councils, NHS bodies and housing associations publish on their own e-tendering portals such as ProContract. Zero trust tooling is often bought as security service edge or network access control inside a wider network refresh, through reseller frameworks or direct awards.

Zero trust suppliers are usually expected to hold Cyber Essentials Plus and ISO 27001, and solutions should align with NCSC zero trust architecture principles. Tenders usually set minimum insurance cover, check financial standing and ask for evidence of similar contracts at selection stage. Under the Procurement Act 2023, suppliers can be excluded for certain criminal convictions, insolvency or failure to pay tax.

Zero trust buying mostly runs as call-offs from technology frameworks, and secure access service edge is often bundled with SD-WAN or managed network services. Councils, universities, NHS trusts and police forces buy zero trust tooling, and central government bodies also tender.

Watch for preliminary market engagement notices and market consultations, which several buyers in this category have used to test the supplier landscape before running a formal competition, and for cyber or digital strategy documents that name a zero trust or SASE roadmap ahead of a tender. Stotles lets you track those signals against a buyer and follow the notice through from early engagement to award.

There is no zero trust-specific CPV code, which is part of why these notices are awkward to find by category alone. The two that recur most are 72000000 (IT services: consulting, software development, Internet and support) and 48000000 (Software package and information systems), covering the licensing and integration work; a computer support and consultancy code often sits alongside them on the same notice.