Ends in 3 weeks
Contract Award Notice - Subscription to Feedly Advanced Enterprise Aggregation Service for Threat 2023/6
NHS England · Yorkshire and the Humber · 3-year contract
Held by Feedly Inc
Cyber threat intelligence tenders and contracts
UK public sector, covering 600+ buyer sites
191 cyber threat intelligence tenders and contracts, 50 this year.
Updated 4 November 2026 · compiled by BidSkim Limited · How we count
- Awarded a month£350k
- Contracts a month2.3
- Won by SMEs35%
- Renewing in 6 months15
- Frameworks and DPSs3
- Live now1See them →
Cyber threat intelligence contracts
Tap a region to see its contracts. Pick as many as you like.
How many cyber threat intelligence contracts do keyword alerts miss?
In the last year, a "threat intelligence" alert would have missed 21 of 34 cyber threat intelligence contracts (62%) and an expert list of 15 phrases 17 (50%). How we measured this
Keyword alert"threat intelligence"
62% missed
21 of 34
Expert list15 phrases
50% missed
17 of 34
Expert list: threat intelligence, cyber threat intelligence, dark web monitoring, threat intelligence feed, threat sharing, vulnerability intelligence, threat actor intelligence, digital risk protection, threat monitoring, threat intelligence platform, online threat monitoring, cyber intelligence, threat intelligence tooling, threat intelligence service, brand monitoring dark web
BidSkim reads every notice in full and matches the work, not the words.See what BidSkim finds for you
54 contracts across the UK, of any size
Live now
1 cyber threat intelligence opportunity is open now
- Pre-market9 Sep 2026Enhanced Security Operations Managed ServiceStudent Loans Company
- Awarded22 Oct 2026Provision of a Cyber Threat Intelligence SuiteCabinet Office · LondonWon by Mondas Consulting£290k
- Awarded21 Oct 2026Subscription to Feedly Advanced Enterprise Aggregation Service for Threat 2026/9NHS England · LondonWon by Feedly Inc£90k
- Awarded15 Oct 2026Virus TotalThe Pensions Regulator · South EastWon by Chronicle Security Ireland Ltd£65k
- Awarded6 Oct 2026DDaT26409 - Threat Intelligence ToolingDepartment for Science, Innovation and Technology (DSIT) · LondonWon by Brookcourt Solutions Ltd£1.7m
- Awarded1 Oct 2026DDaT26420 - EnCIC Automated Threat Sharing Service (EATSS)Department for Energy Security and Net Zero (DESNZ) · LondonWon by 2T Security Ltd£137k
- Awarded14 Sep 2026PS26212 - Energy Sector Threat Sharing and Analysis CentreDepartment for Energy Security and Net Zero (DESNZ)Won by Frazer-Nash Consultancy£145k
- Awarded1 Sep 2026Threat Intelligence ServicesUK Biobank LtdWon by IBM£365k
- Awarded28 Aug 2026Vulnerability Intelligence Subscription ServiceBritish CouncilWon by Beijing Zhian Yuntu Technology Co., Ltd
- Awarded26 Aug 2026C20262746 - Online Threat Monitoring ServiceOfcomWon by Accenture£375k
- Awarded17 Aug 2026DarkInvaderSheffield City Council · Yorkshire and the HumberWon by Darkinvader Limited£5k
- Awarded6 Aug 2026Online Safety Rapid Insights ReportingOfcom · LondonWon by Child Rescue Coalition£375k
- Awarded17 Jul 2026Strider Intelligence PlatformDepartment for Business and Trade · LondonWon by Strider Technologies UK Ltd£112k
- Awarded14 Jul 2026NHS Cyber Operations Cyber Vigilance - rapid enrichmentNHS England · LondonWon by Insight£35k
- Awarded10 Jul 2026Quorum Cyber - Brand & Credentials ServiceClarion Housing Group · LondonWon by Quorum Cyber£77k
- Awarded1 Jul 2026SecurityTrails Domains FeedOfcom · LondonWon by Recorded Future UK Limited£32k
- Awarded2 Jun 2026DDaT26236 DSIT Threat Intelligence ToolDepartment for Science, Innovation and Technology (DSIT) · LondonWon by Softcat£64k
- Awarded29 May 2026Dark InvaderCity of Doncaster Council · Yorkshire and the HumberWon by Darkinvader Limited£26k
- Awarded21 May 2026Joe Sandbox Threat Intelligence PlatformPublic Services Delivery Scotland · ScotlandWon by Computacenter£42k
- Awarded14 May 2026Provision of Falcon Adversary Intelligence Premium LicenceDriver and Vehicle Licensing Agency · WalesWon by Bechtle£105k
- Awarded8 Apr 2026New Threat Intel ProductHM Revenue & Customs · East of EnglandWon by Insight£136k
- Awarded1 Apr 2026Microsoft Threat Analysis Centre (MTAC) 26 - 28Ministry of DefenceWon by Microsoft£13.3m
- Awarded31 Mar 2026Threat Intelligence SoftwareCity of London Corporation · LondonWon by Softcat£158k
- Awarded12 Mar 2026UpGaurdDe Montfort University · East MidlandsWon by European Electronique£48k
- Awarded26 Feb 2026Securityscorecard 2Salford City Council · North WestWon by Softcat£14k
- Awarded23 Feb 2026ICT-26-007 Cyber Risk Tool - Intelligence AssetThe Education Authority · Northern IrelandWon by Razorthorn Security£150k
- Awarded22 Jan 2026Managed Vulnerability and Threat-Led Intelligence ServiceNHS Blood and Transplant · South WestWon by Softcat
- Awarded16 Dec 2025prj_6292 - Provision of Cyber Threat Intelligence Platform and EnrichmentDESNZ & DSIT Group CommercialWon by Brookcourt Solutions Ltd£1m
- Awarded27 Aug 2025GSOC T1 Platform - Recorded FutureNuclear Decommissioning Authority · North WestWon by Boxxe
- Awarded27 Jun 2025DarkInvader - Continuous External Attack Surface ManagementDurham County Council · North EastWon by Darkinvader Limited£11k
- Awarded14 Apr 2025Provision of Threat Intelligence and Penetration TestingOffice for National Statistics · WalesWon by Nettitude Ltd
Where to bid
Where cyber threat intelligence tenders are run
- BravoSolution2 100%
Tenders published in the last year that name the bid portal they run on.
Frameworks and DPS
3 frameworks for cyber threat intelligence work are running. None are open to join now.
Softcat won the most cyber threat intelligence contracts
Each dot is one contract, coloured by who bought it.
Central governmentNHS and healthCouncilsEducationPolice, fire and rescueOther buyers
| Rank | Contractor | Contracts won, by buyer | Contracts | Value won | Buyers | Share |
|---|---|---|---|---|---|---|
| 1 | Softcat London · See every contract | 8 | £775k | 7 | ||
| 2joint | Brookcourt Solutions Ltd London · SME · See every contract | 4 | £3.1m | 4 | ||
| 2joint | Boxxe North West · See every contract | 4 | £774k | 4 | ||
| 2joint | Computacenter Scotland · See every contract | 4 | £258k | 2 | ||
| 5joint | SOC Radar Cyber Intelligence Inc London · See every contract | 3 | £197k | 2 | ||
| 5joint | Darkinvader Limited Yorkshire and the Humber · SME · See every contract | 3 | £42k | 3 | ||
| 7joint | Through Technology Limited London · SME · See every contract | 2 | £1.5m | 1 | ||
| 7joint | Bright Cyber London · SME · See every contract | 2 | £615k | 2 | ||
| 7joint | Bechtle Wales · See every contract | 2 | £171k | 2 | ||
| 7joint | Insight East of England · See every contract | 2 | £170k | 2 |
20 more cyber threat intelligence contractors ranked. See the full ranking →
Win cyber threat intelligence contracts? Share your ranking.
Who buys
Central government bodies award 65% of cyber threat intelligence contracts
Contracts with a published value in the last 2 years, from the type of buyer to the size of the contract.
12 buyers bought cyber threat intelligence more than once in the last 2 years
Each dot is a buyer, by how many cyber threat intelligence contracts it awarded in the last 2 years.
See who they are and when they usually buy →
Few and big, or many and small
Each dot is a buyer: how many cyber threat intelligence contracts it awarded against what they were worth. The busiest and biggest are named.
Central governmentNHS and healthCouncilsEducationPolice, fire and rescueOther buyers
Top buyers by contracts awarded
| Rank | Buyer | Contracts | Value |
|---|---|---|---|
| 1 | Department for Science, Innovation and Technology (DSIT) | 4 | £3.3m |
| 2 | Ofcom | 3 | £782k |
| 3 | Financial Conduct Authority | 3 | £665k |
| 4 | NHS England | 3 | £391k |
| 5 | Public Services Delivery Scotland | 3 | £146k |
| 6 | Ministry of Defence | 2 | £13.6m |
| 7 | DESNZ & DSIT Group Commercial | 2 | £1.1m |
| 8 | Department for Business and Trade | 2 | £679k |
| 9 | Department for Energy Security and Net Zero (DESNZ) | 2 | £282k |
| 10 | Financial Services Compensation Scheme (FSCS) | 2 | £167k |
127 cyber threat intelligence contracts awarded since 2021
- 82021
- 162022
- 322023
- 192024
- 192025
- 332026 so far
Prices
Half of cyber threat intelligence contracts are worth less than £124k
Central governmentNHS and healthCouncilsEducationPolice, fire and rescueOther buyers
The 10 biggest cyber threat intelligence contracts
- Ministry of DefenceMicrosoft · 1 Apr 2026
- Department for Science, Innovation and Technology (DSIT)Brookcourt Solutions Ltd · 6 Oct 2026
- DESNZ & DSIT Group CommercialBrookcourt Solutions Ltd · 16 Dec 2025
- Department for Science, Innovation and Technology (DSIT)Through Technology Limited · 1 Mar 2026
- Department for Science, Innovation and Technology (DSIT)Through Technology Limited · 13 Mar 2026
- Department for Business and TradeBright Cyber · 13 Jun 2025
- OfcomAccenture · 26 Aug 2026
- OfcomChild Rescue Coalition · 6 Aug 2026
- UK Biobank LtdIBM · 1 Sep 2026
- Government Legal DepartmentBoxxe · 20 May 2025
Renewing contracts
24 cyber threat intelligence contracts come up for renewal in the next 12 months
15 in the next 6 months. The 3 ending soonest are shown in full.
Ends in 4 weeks
DDaT24335 - prj_4021 - Domain Tools Cyber Enrichment
DESNZ & DSIT Group Commercial · London · 20-month contract
Held by Bright Cyber
Ends in 4 weeks
Threat Intel Licence Contract Award Notice, Contracts Finder
Department for Business, Energy & Industrial Strategy · London · 3-year contract
Held by Brookcourt Solutions Ltd
Cyber threat intelligence contract for a central government bodyUK-wide or not stated£100k to £1mEnds Jan 2027
Cyber threat intelligence contract for a central government bodyUK-wide or not stated£100k to £1mEnds Jan 2027
Cyber threat intelligence contract for a central government bodyLondon£100k to £1mEnds Feb 2027
Cyber threat intelligence contract for a central government bodyLondon£100k to £1mEnds Mar 2027
Cyber threat intelligence contract for a police, fire or rescue serviceUK-wide or not stated£100k to £1mEnds Mar 2027
Cyber threat intelligence contract for a councilLondon£1m or moreEnds Mar 2027
Where and when
London awards the most cyber threat intelligence contracts
Contracts by region and by month awarded. Click a region to filter the page.
FewerMore contracts
The regions as a table
| Region | Open now | Contracts | Value | Typical contract | Won the most | Bought the most | Renewing in 12 months |
|---|---|---|---|---|---|---|---|
| London | 0 | 21 | £5.6m | £112k | Softcat (5) | Department for Science, Innovation and Technology (DSIT) (4) | 12 |
| Yorkshire and the Humber | 0 | 3 | £297k | £26k | Darkinvader Limited (2) | – | 3 |
| Scotland | 0 | 3 | £146k | £52k | Computacenter (3) | Public Services Delivery Scotland (3) | 1 |
| North West | 0 | 2 | £14k | – | – | – | 0 |
| South West | 0 | 2 | £175k | – | – | – | 0 |
| Wales | 0 | 2 | £105k | – | – | – | 0 |
| North East | 0 | 1 | £11k | – | – | – | 0 |
| East Midlands | 0 | 1 | £48k | – | – | – | 0 |
| East of England | 0 | 1 | £136k | – | – | – | 1 |
| South East | 0 | 1 | £65k | – | – | – | 0 |
| Northern Ireland | 0 | 1 | £150k | – | – | – | 0 |
| West Midlands | 0 | 0 | Not published | – | – | – | 0 |
Often bought with cyber threat intelligence
Related services
Key findings
- £350k a month
of cyber threat intelligence contracts awarded.
Typical contract £124k x 2.8 contracts a month, last 12 months. - 2.3
cyber threat intelligence contracts are awarded in a typical month.
54 contracts in the last 2 years. - 15
cyber threat intelligence contracts come up for renewal in the next 6 months.
Recurring contracts with a named supplier and a published end date before 4 May 2027. - 3
frameworks and DPSs are running for cyber threat intelligence work.
0 open to join now. - 35%
of cyber threat intelligence contracts are won by SMEs.
As recorded by the buyer, on 43 award notices.
How many cyber threat intelligence tenders and contracts are there?
| Since November 2021 | Last 12 months | |
|---|---|---|
| Notices published | 191 | 50 |
| Contracts awarded | 120 | 34 |
30 cyber threat intelligence contracts and frameworks end in the next 12 months, 27 of them recurring services. In the last two years, 36 buyers awarded cyber threat intelligence contracts to 30 suppliers.
Source: Find a Tender, Contracts Finder, Public Contracts Scotland, Sell2Wales and eTendersNI, to 4 November 2026. By Seamus White. How we count
Questions
How many cyber threat intelligence contracts does the UK public sector award?
54 in the 2 years to 4 November 2026, from 36 public buyers.
How much is a typical public sector cyber threat intelligence contract worth?
The median is £124k, and 72% are worth less than £250k.
Who wins the most public sector cyber threat intelligence contracts?
Softcat won the most (8).
Which buyers award the most cyber threat intelligence contracts?
Central government bodies award 65% of them.
Which part of the UK awards the most cyber threat intelligence contracts?
London: 21 of 54 in the 2 years to 4 November 2026, then Yorkshire and the Humber (3) and Scotland (3).
How many cyber threat intelligence contracts come up for renewal in the next 12 months?
24 contracts end and are likely to be re-let, the first on 22 November 2026. Another 3 ending are one-off work.
Are there frameworks or DPSs for cyber threat intelligence work that are open to join?
3 frameworks and DPSs for cyber threat intelligence work are running. None are open to join now.
What is included
Intelligence on threat actors, dark web activity and state-linked cyber threats, delivered as a data feed, portal or investigation platform.
- Dark web monitoring and investigation platforms
- State threat and threat actor intelligence services
- Threat intelligence feeds and portals
- Digital risk protection and external attack surface monitoring: website defacement and integrity, domain expiry and look-alike domains, brand impersonation and exposed internet-facing assets
What is not included
- Device forensic extraction (see Digital forensics tools and services)
- SIEM and XDR platforms (see SIEM)
- Investigation and OSINT analysis tools (see Investigation and intelligence analysis software)
- Labelled datasets for research (see Cyber security (unspecified))