Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Nexus (Sonatype) Pro and Repository Firewall

FCA

This public procurement record has 1 release in its history.

Award

13 Aug 2026 at 07:26

Award Notice
Summary of the contracting process

The FCA procured software supply-chain security services centred on Sonatype Nexus Pro and Repository Firewall. The requirement included 200 self-hosted Repository Firewall licences to detect and block malicious or high-risk open-source components before they enter the FCA’s repositories. It also covers quarantining suspicious components and continuous auditing against security, licensing and quality policies, helping prevent non-compliant artefacts from entering development workflows. Nexus Pro is intended to address critical operational, security and compliance risks, while improving resilience and role-based access controls. The service is categorised as a professional service and is delivered for the FCA in London. The buyer is the Financial Conduct Authority, based at 12 Endeavour Square, London.

This procurement is complete and has been awarded through a selective call-off from a framework agreement. The tender submission deadline was 1 April 2026 at 12:00. The FCA made the award to SOFTCAT LTD - FCA on 15 April 2026. The awarded value is £80,000, against an estimated procurement value of £90,000. The contract runs from 1 May 2026 to 30 April 2027. The award is active and covers the Sonatype Nexus Pro and Repository Firewall requirement. The procurement was evaluated and conducted as a services call-off, with the outcome represented by a single award to Softcat. The requirement was not identified as suitable for small or medium-sized enterprises or voluntary, community and social enterprises.

This award indicates demand from the FCA for specialist software composition analysis and repository security capability, rather than general IT support. Suppliers positioned for comparable requirements would need to provide Sonatype Nexus Pro and Repository Firewall, including self-hosted deployment and licensing at meaningful organisational scale. Credible delivery capability would include automatically identifying and blocking malicious or high-risk open-source components, quarantining suspicious items, and applying continuous security, licensing and quality policy checks. Suppliers should also understand software supply-chain risk, compliance controls, repository governance, resilience and role-based access control. Experience supporting secure development workflows and integrating controls into existing repositories would be relevant. The framework call-off route and the stated unsuitability for SMEs indicate that established, framework-appointed technology suppliers are best placed.

How relevant is this notice?

Notice Information

Notice Title

Nexus (Sonatype) Pro and Repository Firewall

Notice Description

Sonatype Firewall - Purchasing 200 licences for Sonatype Repository Firewall (self-hosted) to strengthen our software supply chain by automatically detecting and blocking malicious or high-risk open-source components before they enter our repositories. It also enables quarantining of suspicious components and continuous auditing against security, licensing and quality policies to prevent non-compliant artefacts from entering the development workflows. Nexus Pro - To mitigate existing risks from critical capabilities essential for meeting our operational, security, and compliance needs, to improving resilience and RBAC controls.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-2f5bfa02-472b-48fe-8a1b-cfe29d052962
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/6383507c-861f-4299-ac5b-34a0719006fe
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
Not specified
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

73 - Research and development services and related consultancy services

CPV Codes

73400000 - Research and Development services on security and defence materials

Notice Value(s)

Tender Value
£90,000 Under £100K
Lots Value
Not specified
Awards Value
£80,000 Under £100K
Contracts Value
Not specified

Notice Dates

Publication Date
13 Aug 20262 weeks ago
Submission Deadline
1 Apr 2026Expired
Future Notice Date
Not specified
Award Date
15 Apr 20264 months ago
Contract Period
1 May 2026 - 30 Apr 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
FCA
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
E20 1JN
Postcode Area
East London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI4 Inner London - East
Small Region (ITL 3)
TLI41 Hackney and Newham
Delivery Location
TLI London
Local Authority
Newham
Electoral Ward
Stratford Olympic Park
Westminster Constituency
Stratford and Bow

Supplier Information

Number of Suppliers
1
Supplier Name

SOFTCAT LTD - FCA

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...