Digital forensics contracts

• The five suppliers that won the most digital forensics contracts took 39% of them (30 of 77).
• The median contract, £97k, is close to the median across it & software contracts (£110k).
• Yorkshire and The Humber had the most contracts: 14, or 18% of the total.

1. 1Humberside Police8 contracts£169k
2. 2Police and Crime Commissioner for Durham5 contracts£145k
3. 3Department for Work and Pensions4 contracts£18.5m
4. 4Police, Fire and Crime Commissioner for Northamptonshire4 contracts£232k
5. 5Greater Manchester Combined Authority3 contracts£1.2m
6. 6Police and Crime Commissioner for Sussex3 contracts£672k
7. 7Police and Crime Commissioner for Surrey3 contracts£563k
8. 8South Yorkshire Mayoral Combined Authority3 contracts£529k
9. 9Police and Crime Commissioner for Cheshire3 contracts£454k
10. 10West Midlands Police3 contracts£250k

1. 1Magnet Forensics12 contracts£1.4m
2. 2Softcat5 contracts£1.3m
3. 3ESAFE GLOBAL LIMITED5 contracts£931k
4. 4Cellebrite4 contracts£2.9m
5. 5INTAFORENSICS LTD4 contracts£1.9m
6. 6CCL Forensics4 contracts£465k
7. 7Semantics 214 contracts£446k
8. 8OpenText4 contracts£43k
9. 9MICRO SYSTEMATION LIMITED4 contracts£28k
10. 10CCL Solutions Group3 contracts£529k

Latest

• The Supply of a Digital Forensics Service (official notice, opens in a new tab)

  Value not published

  Police, Fire & Crime Commissioner for Staffordshire to CCL Forensics · Awarded 25 August 2026

• Provision of Digital Forensic Services (official notice, opens in a new tab)

  £113k

  Department for Work and Pensions to CCL Solutions Group · Awarded 21 August 2026

• Forensic Case Management System (official notice, opens in a new tab)

  £1.2m

  Greater Manchester Combined Authority to Redline Discovery Ltd · Awarded 19 August 2026

• Nimbus Forensic Case Management Subscription (official notice, opens in a new tab)

  £31k

  Competition and Markets Authority to Black Rainbow Consulting Ltd · Awarded 14 August 2026

• Tachograph Forensic Services (official notice, opens in a new tab)

  £575k

  H M REVENUE & CUSTOMS to Orchid Cellmark Ltd · Awarded 14 August 2026

• Digital Forensic Video Recovery Services (2026-30) (official notice, opens in a new tab)

  £150k

  Mayor's Office for Policing and Crime (MOPAC) to SABRE SECURITY & RF SYSTEMS LTD · Awarded 11 August 2026

• Digital Forensic System (official notice, opens in a new tab)

  £78k

  Police, Fire and Crime Commissioner for Cumbria to Magnet Forensics · Awarded 31 July 2026

• The Provision of Axiom Licences and DVR Examiner (official notice, opens in a new tab)

  £40k

  Police, Fire and Crime Commissioner for Northamptonshire to DEMUX VIDEO SERVICES LIMITED · Awarded 23 July 2026

• The Provision of eSafe Monitoring Service (official notice, opens in a new tab)

  £6k

  Police, Fire and Crime Commissioner for Northamptonshire to ESAFE GLOBAL LIMITED · Awarded 22 July 2026

• Digital Forensic Software Renewal (official notice, opens in a new tab)

  £214k

  West Yorkshire Combined Authority to Magnet Forensics · Awarded 14 July 2026

Largest

• Digital Forensics - Aggregated Software (official notice, opens in a new tab)

  £18.0m

  Department for Work and Pensions to Trustmarque · Awarded 12 June 2026

• Digital Forensics Outsourcing - South West Forensics - AWARD (official notice, opens in a new tab)

  £7.0m

  Devon and Cornwall Police to Cyfor · Awarded 21 October 2025

• Foreseen 12 month contract extension - Digital Forensic Investigative Unlocking Tool Type 1 (Cellebrite) (official notice, opens in a new tab)

  £2.5m

  Mayor's Office for Policing and Crime (MOPAC) to Cellebrite · Awarded 19 June 2026

• Digital Forensics Provision (official notice, opens in a new tab)

  £1.8m

  The Insolvency Service to INTAFORENSICS LTD · Awarded 23 February 2026

• Vigil AI CAID Media Classifier Plugin Licences (official notice, opens in a new tab)

  £1.1m

  Home Office to Roke Manor Research · Awarded 17 February 2026

Retained or on-demand help to contain, investigate and recover from a cyber attack, including digital forensics and post-incident reporting.

• Incident response retainers
• Emergency breach response and containment
• Digital forensics and malware analysis for cyber incidents
• Ransomware recovery support
• Post-incident reviews

• Continuous monitoring, not incident-triggered response (see Security operations centre)
• Rehearsals and exercises, not live response (see Cyber security training and exercises)
• Police forensic examination of evidence devices, not cyber incidents (see Digital forensics tools and services)
• Advisory and assurance work outside an incident (see Cyber security consultancy and assurance)

• Telecare
• Firewalls
• Cyber security assurance
• Single sign on
• Link analysis software

• Probation services