Retender radar: UK public contracts ending soon
Public contracts ending ahead, with the buyer, the incumbent and the value. Where a notice gives only a duration, the end is estimated and labelled. An end date can signal a new tender; it does not promise one.
Contracts matching “cyber security”
Showing 1–25
- Ends · in 2 days
Red Team Exercise
GENOMICS ENGLAND LIMITED · Central government · Nationwide (UK)
Incumbent: Cyber Security Associates Ltd
Provision of a Red Team exercise - a simulated cyberattack conducted by ethical hackers (the "Red Team") who mimic…
- Published value
- £35k
- Annual run-rate
- £35kpublished value ÷ term, exc. VAT
- Term
- 30 Oct 2025 → 29 Oct 2026 · 1 yr
- Reference
ocds-h6vhtk-05fa50
- Estimated end · in 8 days
Provision of Services Relating to Security Education Awareness Training
Office for National Statistics · Central government · Nationwide (UK)
Incumbent: MetaCompliance Ltd · Last contest: 5 bids
Provision of Services Relating to Security Education Awareness Training including off the shelf and bespoke training.
- Published value
- £270k
- Annual run-rate
- —start date not published
- Term
- Estimated end 4 Nov 2026 · start not published
- Reference
ocds-h6vhtk-048901
- Estimated end · in 15 days
MANAGED SOC- AS- A- SERVICE SERVICES
Pool Re Services Limited · Greater London
Incumbent: MONDAS CONSULTING LTD · Last contest: 5 bids
Pool Re is awarding two suppliers for the provision of IT & Cyber Security Support Services specified into Lot 1, Lot 3 and Lot 4 • Lot 1 – Managed Support Services Provider (MSP) • Lot 3 – Managed Security Operations…
- Published value
- £119k
- Annual run-rate
- —start date not published
- Term
- Estimated end 11 Nov 2026 · start not published
- Reference
ocds-h6vhtk-03cd89
- Ends · in 17 days
BCH Joint DFU Pen Test 2026
The Police and Crime Commissioner for Bedfordshire · Police & fire
Incumbent: Chess CyberSecurity
a Pen test conducted by CyberLab comprising of 4 pen tests of the ERSOU, BEDS and CAMBS DFU…
- Published value
- £16kinc. VAT as published
- Annual run-rate
- —term under 6 months
- Term
- 9 Nov 2026 → 13 Nov 2026 · 5 days
- Reference
ocds-h6vhtk-077a52
- Ends · in 22 days
Cyber Incident Response
OPEN UNIVERSITY(THE) · Charity
Incumbent: Quorum Cyber Security Limited
Data Security Consultancy s -Pre-paid Quorum Cyber Professional Services Retainer - Data Security Consultancy (30 Days) November Only Pricing…
- Published value
- £45k
- Annual run-rate
- £45kpublished value ÷ term, exc. VAT
- Term
- 19 Nov 2025 → 18 Nov 2026 · 1 yr
- Reference
ocds-h6vhtk-0672cb
- Ends · in 23 days
Core Continuous Testing & SLT Awareness Workshop
West Suffolk NHS Foundation Trust · Central government
Incumbent: Rootshell Security Ltd
Provision of continuous cyber security testing services and senior leadership awareness training for the Trust. The service includes ongoing security assessment and validation activities designed to identify, assess and prioritise cyber security vulnerabilities and exposures across…
- Published value
- £24k
- Annual run-rate
- £48kpublished value ÷ term, exc. VAT
- Term
- 20 May 2026 → 19 Nov 2026 · 6 months
- Reference
ocds-h6vhtk-06dd9e
- Ends · in 31 days
Provision of Virtual CISO Review
Kent County Council · Local authority · Nationwide (UK)
Incumbent: Evolve North Ltd
Service to provide strategic cyber security leadership tailored to our organisation. Expert support for our internal team, providing services to help strengthen our security posture and align with our business objectives…
- Published value
- £30kinc. VAT as published
- Annual run-rate
- £60kpublished value ÷ term, inc. VAT
- Term
- 28 May 2026 → 27 Nov 2026 · 6 months
- Reference
ocds-h6vhtk-06a618
- Ends · in 34 days
Financial administration and management of Scottish Government heat and energy efficiency grant and loan schemes
Scottish Government · Scotland
Incumbent: Energy Saving Trust · Last contest: 2 bids (0 SME) · awarded at the estimate
The Scottish Government is seeking a service provider to undertake the financial administration and management of a number…
Re-procurement plannedEnergy Loans and Grants Administration · tender expected
- Published value
- £62m
- Annual run-rate
- —start date not published
- Term
- Ends 30 Nov 2026 · start not published
- Reference
ocds-h6vhtk-03bdce
- Ends · in 34 days
Provision of Interim Enterprise Server Infrastructure (1-3 Year Horizon)
ST BASILS · West Midlands
Incumbent: Intercity Technology Limited
move fully to the cloud. • Reduce the risk of service disruption. • Ensure compliance with UK data protection, cyber security, and social housing regulatory requirements. Scope of Supply The supplier will be expected to: • Propose the most…
- Published value
- £77k
- Annual run-rate
- £77kpublished value ÷ term, exc. VAT
- Term
- 1 Dec 2025 → 30 Nov 2026 · 1 yr
- Reference
ocds-h6vhtk-067c47
- Ends · in 35 daysExtension option · up to 30 Nov 2028
FENCCSS (Further Education Network & Cyber Security Services)
Department for Education · Central government · Nationwide (UK)
Incumbent: Jisc
Contract to provide Connectivity, Cyber Security and Specialist Advisory Services to the Further Education sector in England. Overview of services required DfE is proposing to contract with Jisc to deliver a comprehensive digital infrastructure and support…
- Published value
- £42m
- Annual run-rate
- —term under 6 months
- Term
- 15 Sept 2026 → 1 Dec 2026 · 3 months · up to 30 Nov 2028 with extensions
- Reference
ocds-h6vhtk-059d41
- Ends · in 35 days
DTAC Standard Harmonisation for Medical Device Regulation
NHS England · Central government
Incumbent: BSI Standards Limited
across the NHS and adult social care system. There are several parts to DTAC - Clinical Safety. Information Security, Cyber Security, Interoperability and Usability. DHTs must be assessed against DTAC at the point of purchase within…
- Published value
- £70k
- Annual run-rate
- £119kpublished value ÷ term, exc. VAT
- Term
- 1 May 2026 → 1 Dec 2026 · 7 months
- Reference
ocds-h6vhtk-07798d
- Estimated end · in 38 days
Cyber Security Operations Centre
University of Sussex · Education · South East England
Incumbent: Exponential-E Limited · Last contest: 4 bids
The University of Sussex wishes to procure and implement a managed Security Operations Centre [SOC] service from an…
- Published value
- £1.3m
- Annual run-rate
- —start date not published
- Term
- Estimated end 4 Dec 2026 · start not published
- Reference
ocds-h6vhtk-03a441
- Ends · in 51 days
BT418 - Cyber Security OHIO Urgent Products and Services
Westminster City Council · Local authority
Incumbent: Softcat Plc
To provide emergency support and advice in light of recent Cyber attack affecting the organisation.
- Published value
- £99k
- Annual run-rate
- £99kpublished value ÷ term, exc. VAT
- Term
- 19 Dec 2025 → 17 Dec 2026 · 1 yr
- Reference
ocds-h6vhtk-06057e
- Ends · in 65 days
DSPT IT Health Check
The Queen Elizabeth Hospital King's Lynn NHS Foundation Trust · Central government
Incumbent: AMR Cybersecurity LTD
Provision of Penetration Testing Assessment with Accordance of DSPT ITHC Scope Requirements…
- Published value
- £14k
- Annual run-rate
- £14kpublished value ÷ term, exc. VAT
- Term
- 1 Jan 2026 → 31 Dec 2026 · 1 yr
- Reference
ocds-h6vhtk-068278
- Estimated end · in 85 days
Collection and Consolidation of British Horserace Betting Data
Horserace Betting Levy Board · Nationwide (UK)
Incumbent: Deloitte · Last contest: 7 bids
Collection, anonymisation, amalgamation and provision of race by race turnover and gross win betting data from participating bookmakers…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 20 Jan 2027 · start not published
- Reference
ocds-h6vhtk-03fc5e
- Ends · in 105 days
Cyber Response Service
Police and Crime Commissioner for West Midlands · Police & fire · Nationwide (UK)
Incumbent: Nettitude Limited
provide the Authority with Managed Security Services and/or additional cyber security services for Security Monitoring and Response to their Operating Environment…
- Published value
- £34k
- Annual run-rate
- £34kpublished value ÷ term, exc. VAT
- Term
- 10 Feb 2026 → 9 Feb 2027 · 1 yr
- Reference
ocds-h6vhtk-060490
- Estimated end · in 107 days
Security Information and Event Management (SIEM)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 107 days
Extended Detection and Response (XDR)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 107 days
Endpoint Detection and Response (EDR)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 107 days
Managed Detection and Response (MDR)
ScotRail Trains Limited · Scotland
Incumbent: NCC Group Security Services Limited · Last contest: 13 bids (6 SME)
this procurement process to become a key partner in supporting the modernisation of the existing IT cyber security architecture. With the following key objectives: Implement 24-7 managed detection and response capability; Provide a seamless protection…
- Published value
- Not published
- Annual run-rate
- —value not published
- Term
- Estimated end 11 Feb 2027 · start not published
- Reference
ocds-h6vhtk-03c327
- Estimated end · in 122 days
Managed Cyber Security Service for the Office for Students
Office for Students · Central government · South West England
Incumbent: ITHQ Ltd · Last contest: 4 bids · awarded 11% over the estimate
Office for Students requires a managed cyber security service (known as a Managed SOC) that uses Rapid7 InsightOne toolset as its base (SIEM…
- Published value
- £355k
- Annual run-rate
- —start date not published
- Term
- Estimated end 26 Feb 2027 · start not published
- Reference
ocds-h6vhtk-030324
- Ends · in 124 days
Security Export Statistics 2025
Department for Business & Trade · Central government · Nationwide (UK)
Incumbent: Westlands Advisory Ltd
Supply of security export statistics for 2025 to Department for Business and Trade (Security and Cyber Exports…
- Published value
- £51k
- Annual run-rate
- £96kpublished value ÷ term, exc. VAT
- Term
- 20 Aug 2026 → 28 Feb 2027 · 6 months
- Reference
ocds-h6vhtk-06e98a
- Ends · in 125 daysExtension option · up to 1 Mar 2028
Cyber Security Assessment and Cyber Enhancement Services
THE FINANCIAL REPORTING COUNCIL LIMITED · Central government · Nationwide (UK)
Incumbent: Pen Test Partners LLP
THIS IS A CONTRACT AWARD NOTICE The Financial Reporting Council (FRC) requirement for Cyber Security Assessment and Cyber Enhancement services is being fulfilled by Pen Test Partners LLP. Cyber Security Assessment and Enhancement services are crucial…
- Published value
- £156k
- Annual run-rate
- £156kpublished value ÷ term, exc. VAT
- Term
- 2 Mar 2026 → 1 Mar 2027 · 1 yr · up to 1 Mar 2028 with extensions
- Reference
ocds-h6vhtk-0682f8
- Ends · in 150 days
Cyber Security Training Platform licences (con_30912)
Department for Education · Central government
Incumbent: TryHackMe Ltd
Cyber Security training platform licences for product TryHackMe…
- Published value
- £13k
- Annual run-rate
- £13kpublished value ÷ term, exc. VAT
- Term
- 26 Mar 2026 → 26 Mar 2027 · 1 yr
- Reference
ocds-h6vhtk-066613
- Ends · in 154 days
Cyber Security Subscription Renewal
Corporation of Trinity House · Central government
Incumbent: Network Surety Ltd T/A Camwey
Renewal of our Sophos Managed Device Response. To view this notice, please click here: https://trinityhouse.delta-esourcing.com/delta/viewNotice.html?noticeId=1010583757…
- Published value
- £49k
- Annual run-rate
- £49kpublished value ÷ term, exc. VAT
- Term
- 31 Mar 2026 → 30 Mar 2027 · 1 yr
- Reference
ocds-h6vhtk-06127d
How to read the radar
- End date is the contract period end the buyer published on the notice (or on the lot). Where the notice gives only a duration, the end is estimated as the signature date (or, without one, the publication date) plus that duration, and the row says so. Contracts with neither are not on the radar; neither are contracts the buyer cancelled or terminated early.
- List or panel totals. When one total is repeated on every provider of an approved list or panel, it is shown on the row but never added to the GBP totals or used for a run-rate.
- Extension option means the notice publishes a renewal or option clause; the buyer may extend. Hiding these rows shows contracts without a published option, but does not establish that the buyer will procure them again.
- Incumbent is the supplier named on the award behind the contract. A panel (several suppliers on one award) is shown as a panel; no single incumbent is invented.
- Annual run-rate = published GBP value ÷ published term for a single supplier and a term of six months or more. Values linked to a framework or DPS have no run-rate until we can tell whether they are a ceiling or a contract. The annual sort ranks comparable values excluding VAT first; gross-only values remain visible on their rows. This is not actual annual spend.
- Counts are exact for the time-horizon and sector filters. A parent framework or DPS counts once; call-offs published by other buyers count separately. Where the parent cannot be identified, agreements stay separate and are marked as linked to a framework or DPS; check the source notice before treating their date or value as a single contract fact. With other filters, a result above 1,000 rows shows as “1,000+”.
- Source. Official UK procurement notices, reused under the Open Government Licence v3.0; the radar is rebuilt nightly. How we count: methodology.