Award

Ask AI about this notice

Summarise, research or assess it with AI

View Markdown

Share this notice

Send this contract to a colleague

Static application security testing

POLICE DIGITAL SERVICE

This public procurement record has 1 release in its history.

Award

13 Aug 2026 at 10:30

Award Notice
Summary of the contracting process

The Police Digital Service procured an enterprise-grade software platform providing Static Application Security Testing (SAST) and Software Composition Analysis (SCA). The service is intended to secure and improve software across a complex policing environment by integrating security scanning into Azure DevOps pipelines. It is designed to apply build-time security and code-quality gates, identifying vulnerabilities, code smells and dependency risks before software is deployed. The platform also supports multiple programming languages and frameworks, allowing scanning to be standardised across diverse services. The requirement is classified as software and information systems and falls within services procurement. Delivery is for the Police Digital Service in the United Kingdom. The procurement was suitable for small and medium-sized enterprises.

The procurement is complete and was awarded to Softcat PLC on 26 June 2026. It used a selective procedure as a call-off from a framework agreement. The tender submission deadline was 5 June 2026 at 2pm. The awarded contract value is £19,750. The contract period runs from 1 July 2026 to 30 June 2027. One supplier was selected for the requirement. The award covers the SAST and SCA software platform and associated service described for the Police Digital Service. The published outcome records the award as active, with the contract running for one year. The procurement was categorised as a services requirement rather than goods or works.

This award demonstrates a defined public-sector demand for application security tooling that can operate within Azure DevOps and support secure software development at scale. Competitors seeking similar work with the Police Digital Service would need a credible SAST and SCA platform, with dependable scanning for vulnerabilities, code quality issues and software dependencies before deployment. Broad support for programming languages and frameworks would be important because the buyer operates diverse services. Suppliers should also be able to demonstrate how their tooling supports consistent security gates, remediation workflows, NCSC-aligned secure development principles, and defensible audit and compliance requirements in a policing environment. The requirement was considered suitable for SMEs, so a focused specialist with the necessary enterprise capability could be relevant when comparable demand returns.

How relevant is this notice?

Notice Information

Notice Title

Static application security testing

Notice Description

PDS requires an enterprise-grade platform for Static Application Security Testing (SAST) and Software Composition Analysis (SCA), which is essential for maintaining secure and compliant software across a complex policing environment. By embedding the software into Azure DevOps pipelines, we can enforce consistent security and code quality gates at build time, ensuring vulnerabilities, code smells, and dependency risks are identified early and remediated before deployment. This aligns directly with NCSC secure development principles and supports defensible audit and compliance requirements. Additionally, the software's deep support for multiple languages and frameworks allows us to standardise scanning across diverse services

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-4ec8ba4c-79bb-42cf-b485-efedb8b540d1
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/721f6931-0b23-48b0-8cda-44c11281592b
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
SME
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

CPV Codes

48000000 - Software package and information systems

Notice Value(s)

Tender Value
£19,750 Under £100K
Lots Value
Not specified
Awards Value
£19,750 Under £100K
Contracts Value
Not specified

Notice Dates

Publication Date
13 Aug 20262 weeks ago
Submission Deadline
5 Jun 2026Expired
Future Notice Date
Not specified
Award Date
26 Jun 20262 months ago
Contract Period
1 Jul 2026 - 30 Jun 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
POLICE DIGITAL SERVICE
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
EC2M 4WN
Postcode Area
Central London
Country
England
Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI4 Inner London - East
Small Region (ITL 3)
TLI43 Haringey and Islington
Delivery Location
Not specified
Local Authority
Islington
Electoral Ward
Clerkenwell
Westminster Constituency
Islington South and Finsbury

Supplier Information

Number of Suppliers
1
Supplier Name

Softcat PLC

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...