This public procurement record has 1 release in its history.

Award

29 Sep 2026 at 12:06

Summary of the contracting process

The UK Health Security Agency (UKHSA) procured DevSecOps software licences and related support services. The tools named are Snyk, IriusRisk, LinearB, LocalStack, InfraCost, Virtuoso and SonarCloud, supporting software security, threat modelling, automated testing, engineering performance monitoring and cloud cost governance. This is a software and IT systems procurement, delivered for UKHSA in London. The requirement combines multiple software products with associated support, rather than a single standalone application. The procurement was made through the Government Commercial Agency’s Technology Products and Associated Services 2 framework, Software lot.

The procurement is complete and was awarded to Softcat plc. The award date was 23 September 2026. The award value was £1,065,358.25. The contract period runs from 1 September 2026 to 31 March 2028. This was a selective framework call-off, using the Technology Products and Associated Services 2 framework’s Software lot. The tender submission deadline was 31 August 2026 at 17:00. The stated suitability information excludes SMEs and voluntary, community and social enterprises. No separate evaluation criteria are recorded in the procurement details.

For suppliers considering similar UKHSA requirements, this award demonstrates demand for a multi-product DevSecOps software estate delivered with associated support, rather than for one tool in isolation. Relevant capability spans software security, threat modelling, automated testing, engineering performance monitoring and cloud cost governance, with the ability to supply the named products or equivalent solutions aligned to these functions. A credible competitor would need to coordinate licensing and support across a varied set of software products and understand how the tools contribute to software engineering and security workflows. UKHSA used the Technology Products and Associated Services 2 framework’s Software lot, so experience supplying software through this framework route would be pertinent. The recorded suitability excludes SMEs and VCSEs; the selected supplier is a large company, indicating this requirement was served at substantial scale.⟂

How relevant is this notice?

Notice Information

Notice Title

DevSecOps Licensing and Tooling 2026-2028

Notice Description

Provision of DevSecOps software licences and associated support services for UKHSA, including Snyk, IriusRisk, LinearB, LocalStack, InfraCost, Virtuoso and SonarCloud. The contract supports software security, threat modelling, automated testing, engineering performance monitoring and cloud cost governance activities. Awarded via the GCA Technology Products and Associated Services 2 (TePAS 2) Framework RM6098 Lot 3 Software.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/cd1693d7-87b3-44de-b6ec-eac2f70f7de7
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Goods
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems


CPV Codes

48000000 - Software package and information systems

Notice Value(s)

Tender Value
£1,065,358 £1M-£10M
Lots Value
Not specified
Awards Value
£1,065,358 £1M-£10M
Contracts Value
Not specified

Notice Dates

Publication Date
29 Sep 20261 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
23 Sep 20262 weeks ago
Contract Period
1 Sep 2026 - 31 Mar 2028 1-2 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
UK Health Security Agency
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
E14 4PU
Postcode Area
East London
Country
England

Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI4 Inner London - East
Small Region (ITL 3)
TLI42 Tower Hamlets
Delivery Location
Not specified

Local Authority
Tower Hamlets
Electoral Ward
Canary Wharf
Westminster Constituency
Poplar and Limehouse

Supplier Information

Number of Suppliers
1
Supplier Name

Softcat Plc

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...