Cyber Security Tenders and Contracts

Search live tenders across Find a Tender, Contracts Finder, and the smaller public-sector portals, or watch them all in one place on Stotles. A meaningful share of this market moves through framework call-offs rather than fresh open tenders, so a filter that also catches call-off notices is worth more than watching a single portal for new adverts. Reading a buyer's prior cyber security spend and supplier history before a requirement goes live gives more lead time than waiting for the tender itself.

Security operations centre monitoring, penetration testing and IT health checks, Cyber Essentials and information security certification support, vulnerability management tooling, and staff awareness training all show up regularly. Buyers range from central government departments and the NHS to police forces and local councils, and contract sizes run from five-figure training call-offs to seven-figure managed SOC services.

The two that turn up most often are 72000000 (IT services: consulting, software development, Internet and support) and 72800000 (Computer audit and testing services), covering the broad IT-services and audit or testing routes buyers use for cyber security work. 72222300 (Information technology services) is close behind.

Often, yes. Sampled notices repeatedly reference cyber security frameworks and DPS arrangements running call-offs for SOC monitoring, penetration testing, and Cyber Essentials assessment work, alongside open tenders procured directly by the buyer. Both routes appear in the notices tracked here, so a search built only around open tenders misses a real slice of the market.