Retender radar: UK public contracts ending soon
Public contracts ending ahead, with the buyer, the incumbent and the value. Where a notice gives only a duration, the end is estimated and labelled. An end date can signal a new tender; it does not promise one.
Contracts matching “cyber security”
Showing 16–30
- Ends · in 105 days
Cyber Response Service
Police and Crime Commissioner for West Midlands · Police & fire · Nationwide (UK)
Incumbent: Nettitude Limited
provide the Authority with Managed Security Services and/or additional cyber security services for Security Monitoring and Response to their Operating Environment…
- Published value
- £34k
- Annual run-rate
- £34kpublished value ÷ term, exc. VAT
- Term
- 10 Feb 2026 → 9 Feb 2027 · 1 yr
- Reference
ocds-h6vhtk-060490
- Estimated end · in 107 days
Security Information and Event Management (SIEM)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 107 days
Extended Detection and Response (XDR)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 107 days
Endpoint Detection and Response (EDR)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 107 days
Managed Detection and Response (MDR)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 122 days
Managed Cyber Security Service for the Office for Students
Office for Students · Central government · South West England
Incumbent: ITHQ Ltd · Last contest: 4 bids · awarded 11% over the estimate
Office for Students requires a managed cyber security service (known as a Managed SOC) that uses Rapid7 InsightOne toolset as its base (SIEM…
- Published value
- £355k
- Annual run-rate
- —start date not published
- Term
- Estimated end 26 Feb 2027 · start not published
- Reference
ocds-h6vhtk-030324
- Ends · in 124 days
Security Export Statistics 2025
Department for Business & Trade · Central government · Nationwide (UK)
Incumbent: Westlands Advisory Ltd
Supply of security export statistics for 2025 to Department for Business and Trade (Security and Cyber Exports…
- Published value
- £51k
- Annual run-rate
- £96kpublished value ÷ term, exc. VAT
- Term
- 20 Aug 2026 → 28 Feb 2027 · 6 months
- Reference
ocds-h6vhtk-06e98a
- Ends · in 125 daysExtension option · up to 1 Mar 2028
Cyber Security Assessment and Cyber Enhancement Services
THE FINANCIAL REPORTING COUNCIL LIMITED · Central government · Nationwide (UK)
Incumbent: Pen Test Partners LLP
THIS IS A CONTRACT AWARD NOTICE The Financial Reporting Council (FRC) requirement for Cyber Security Assessment and Cyber Enhancement services is being fulfilled by Pen Test Partners LLP. Cyber Security Assessment and Enhancement services are crucial…
- Published value
- £156k
- Annual run-rate
- £156kpublished value ÷ term, exc. VAT
- Term
- 2 Mar 2026 → 1 Mar 2027 · 1 yr · up to 1 Mar 2028 with extensions
- Reference
ocds-h6vhtk-0682f8
- Ends · in 150 days
Cyber Security Training Platform licences (con_30912)
Department for Education · Central government
Incumbent: TryHackMe Ltd
Cyber Security training platform licences for product TryHackMe…
- Published value
- £13k
- Annual run-rate
- £13kpublished value ÷ term, exc. VAT
- Term
- 26 Mar 2026 → 26 Mar 2027 · 1 yr
- Reference
ocds-h6vhtk-066613
- Ends · in 154 days
Cyber Security Subscription Renewal
Corporation of Trinity House · Central government
Incumbent: Network Surety Ltd T/A Camwey
Renewal of our Sophos Managed Device Response. To view this notice, please click here: https://trinityhouse.delta-esourcing.com/delta/viewNotice.html?noticeId=1010583757…
- Published value
- £49k
- Annual run-rate
- £49kpublished value ÷ term, exc. VAT
- Term
- 31 Mar 2026 → 30 Mar 2027 · 1 yr
- Reference
ocds-h6vhtk-06127d
- Ends · in 155 days
ITEP0691 Cyber Security & Information Rights Extension
National Highways Limited · Central government · Nationwide (UK)
Incumbent: LA International Computer Consultants Ltd
- Published value
- £20m
- Annual run-rate
- —start date not published
- Term
- Ends 31 Mar 2027 · start not published
- Reference
ocds-h6vhtk-06540b
- Ends · in 155 daysExtension option · up to 31 Mar 2028
ITEP1168 - Cyber R&D Project
National Highways Limited · Central government
Incumbent: CARDIFF UNIVERSITY
National Highways intends to directly award a contract for the delivery of independent cyber security research and development. The requirement is for academic-led, evidence-based analysis to identify and assess emerging cyber risks across Strategic…
- Published value
- £240k
- Annual run-rate
- £432kpublished value ÷ term, exc. VAT
- Term
- 10 Sept 2026 → 31 Mar 2027 · 7 months · up to 31 Mar 2028 with extensions
- Reference
ocds-h6vhtk-06b4d1
- Ends · in 155 daysExtension option · up to 31 Mar 2029Buyer plans to re-tender 15 Jan 2029
DFE - CITB NI – Provision of Insurance Services
Construction Industry Training Board Northern Ireland (CITB NI) · Central government · Northern Ireland
Incumbent: Marsh Ltd
second year by 1 April 2027: - Property and contents Damage (including business interruption); - Cyber Security - Public and Products Liability including excess public liability; - Professional Indemnity - Management Liability - Business Travel and Personal Accident. - Engineering - Engineering Plant - Motor…
- Published value
- £180k
- Annual run-rate
- £180kpublished value ÷ term, exc. VAT
- Term
- 1 Apr 2026 → 31 Mar 2027 · 1 yr · up to 31 Mar 2029 with extensions
- Reference
ocds-h6vhtk-0607dd
- Ends · in 155 daysLinked to a framework or DPS
Continuation of Support for cyber assessment framework in Welsh Local Government
WLGA · Other public body · Wales (Cymru)
Incumbent: Bridewell Consulting Limited
Consulting Ltd on the basis that changing supplier at this stage would create significant technical, operational and cyber security risks that outweigh any potential benefits of a competitive procurement exercise.The supplier has developed substantial programme-specific…
- Published value
- £107kvalue of a framework or DPS agreement; may be a ceiling
- Annual run-rate
- —framework or DPS value, not a run-rate
- Term
- 1 Oct 2026 → 31 Mar 2027 · 6 months
- Reference
ocds-h6vhtk-06f933
- Ends · in 155 days
Cyber Security Gateway Services (Web & Email Protection)
West Suffolk NHS Foundation Trust · Central government
Incumbent: Trustmarque Solutions Limited
Provision of managed security services and licensing for gateway-level protection against web-borne and email-borne threats…
- Published value
- £53k
- Annual run-rate
- £53kpublished value ÷ term, exc. VAT
- Term
- 1 Apr 2026 → 31 Mar 2027 · 1 yr
- Reference
ocds-h6vhtk-0695a3
How to read the radar
- End date is the contract period end the buyer published on the notice (or on the lot). Where the notice gives only a duration, the end is estimated as the signature date (or, without one, the publication date) plus that duration, and the row says so. Contracts with neither are not on the radar; neither are contracts the buyer cancelled or terminated early.
- List or panel totals. When one total is repeated on every provider of an approved list or panel, it is shown on the row but never added to the GBP totals or used for a run-rate.
- Extension option means the notice publishes a renewal or option clause; the buyer may extend. Hiding these rows shows contracts without a published option, but does not establish that the buyer will procure them again.
- Incumbent is the supplier named on the award behind the contract. A panel (several suppliers on one award) is shown as a panel; no single incumbent is invented.
- Annual run-rate = published GBP value ÷ published term for a single supplier and a term of six months or more. Values linked to a framework or DPS have no run-rate until we can tell whether they are a ceiling or a contract. The annual sort ranks comparable values excluding VAT first; gross-only values remain visible on their rows. This is not actual annual spend.
- Counts are exact for the time-horizon and sector filters. A parent framework or DPS counts once; call-offs published by other buyers count separately. Where the parent cannot be identified, agreements stay separate and are marked as linked to a framework or DPS; check the source notice before treating their date or value as a single contract fact. With other filters, a result above 1,000 rows shows as “1,000+”.
- Source. Official UK procurement notices, reused under the Open Government Licence v3.0; the radar is rebuilt nightly. How we count: methodology.