Award

New Threat Intel Product

H M REVENUE & CUSTOMS

This public procurement record has 1 release in its history.

Award

09 Apr 2026 at 10:16

Award Notice
Summary of the contracting process

The procurement process led by H M Revenue & Customs focuses on acquiring a "New Threat Intel Product" within the industry category of Software Package and Information Systems, located in London, England. This process, which employed a selective procurement method through a call-off from a framework agreement, has reached the award stage. The contract was awarded to Insight Direct (UK) Ltd on 8th April 2026, and will commence on 13th April 2026, lasting until 12th April 2027. The contract, worth £135,553, aims to bolster HMRC's capacity to detect and respond to cyber threats through advanced threat intelligence integration with existing systems such as SPLUNK SIEM and SOAR.

This tender offers significant opportunities for growth for large-scale businesses specialising in cybersecurity solutions, particularly those capable of providing sophisticated threat intelligence platforms and real-time threat monitoring services. Although the tender process has concluded, businesses in this sector can consider similar frameworks or partnerships for future procurements. Companies will benefit from refining their capabilities in delivering integrated software solutions that can adapt to evolving security needs in public sector environments, particularly those focusing on threat detection, risk prioritisation, and incident response enhancement.

Find more tenders on our Open Data Platform.
How relevant is this notice?

Notice Information

Notice Title

New Threat Intel Product

Notice Description

Google Threat Intelligence is a cloud-based service combining Mandiant's intelligence-based threat feeds with VirusTotal's crowdsourced data to help HMRC's Cyber Delivery operational teams identify, track, and respond to cyber threats. It provides actionable, high-context intelligence for proactive threat detection, combined with detailed, actionable insights into threat actors, tactics, techniques, and procedures (TTPs). It will support our threat team to hunt for specific threats in real-time or historically using custom Yara rules, and provide risk prioritisation using 'GTI Score' to rank threats based on potential impact so we can concentrate on critical risks impacting our estate. In addition we will strengthen our intelligence to further identify and reduce the impact from malicious activity, including phishing campaigns, brand impersonation, and malware. The product integrates with our SPLUNK SIEM and SOAR platforms to help streamline incident response.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-b5fd17-f44f6fa8-ede8-42b2-86d5-3a49498d2201
Publication Source
Contracts Finder
Latest Notice
https://www.contractsfinder.service.gov.uk/Notice/229496e1-2a2b-40b6-b5ab-fc83f6d031b3
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Framework
Procurement Category
Services
Procurement Method
Selective
Procurement Method Details
Call-off from a framework agreement
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

CPV Codes

48000000 - Software package and information systems

Notice Value(s)

Tender Value
£135,553 £100K-£500K
Lots Value
Not specified
Awards Value
£135,553 £100K-£500K
Contracts Value
Not specified

Notice Dates

Publication Date
9 Apr 20262 weeks ago
Submission Deadline
5 Mar 2026Expired
Future Notice Date
Not specified
Award Date
7 Apr 20262 weeks ago
Contract Period
12 Apr 2026 - 12 Apr 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Not Specified
Awards Status
Active
Contracts Status
Not Specified

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
H M REVENUE & CUSTOMS
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SS99 1AA
Post Town
Southend-on-Sea
Country
England
Major Region (ITL 1)
TLH East (England)
Basic Region (ITL 2)
TLH3 Essex
Small Region (ITL 3)
TLH31 Southend-on-Sea
Delivery Location
Not specified
Local Authority
Southend-on-Sea
Electoral Ward
Victoria
Westminster Constituency
Southend East and Rochford

Supplier Information

Number of Suppliers
1
Supplier Name

INSIGHT DIRECT (UK

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts. 

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-b5fd17-f44f6fa8-ede8-42b2-86d5-3a49498d2201-2026-04-09T11:16:22+01:00",
    "date": "2026-04-09T11:16:22+01:00",
    "ocid": "ocds-b5fd17-f44f6fa8-ede8-42b2-86d5-3a49498d2201",
    "language": "en",
    "initiationType": "tender",
    "tender": {
        "id": "SR2889131015",
        "title": "New Threat Intel Product",
        "description": "Google Threat Intelligence is a cloud-based service combining Mandiant's intelligence-based threat feeds with VirusTotal's crowdsourced data to help HMRC's Cyber Delivery operational teams identify, track, and respond to cyber threats. It provides actionable, high-context intelligence for proactive threat detection, combined with detailed, actionable insights into threat actors, tactics, techniques, and procedures (TTPs). It will support our threat team to hunt for specific threats in real-time or historically using custom Yara rules, and provide risk prioritisation using 'GTI Score' to rank threats based on potential impact so we can concentrate on critical risks impacting our estate. In addition we will strengthen our intelligence to further identify and reduce the impact from malicious activity, including phishing campaigns, brand impersonation, and malware. The product integrates with our SPLUNK SIEM and SOAR platforms to help streamline incident response.",
        "status": "complete",
        "classification": {
            "scheme": "CPV",
            "id": "48000000",
            "description": "Software package and information systems"
        },
        "items": [
            {
                "id": "1",
                "deliveryAddresses": [
                    {
                        "postalCode": "SS991AA"
                    }
                ]
            }
        ],
        "value": {
            "amount": 135553,
            "currency": "GBP"
        },
        "procurementMethod": "selective",
        "procurementMethodDetails": "Call-off from a framework agreement",
        "tenderPeriod": {
            "endDate": "2026-03-05T10:00:00Z"
        },
        "contractPeriod": {
            "startDate": "2026-04-13T00:00:00+01:00",
            "endDate": "2027-04-12T23:59:59+01:00"
        },
        "suitability": {
            "sme": false,
            "vcse": false
        },
        "mainProcurementCategory": "services"
    },
    "parties": [
        {
            "id": "GB-GOR-D25",
            "name": "H M REVENUE & CUSTOMS",
            "identifier": {
                "legalName": "H M REVENUE & CUSTOMS",
                "scheme": "GB-GOR",
                "id": "D25"
            },
            "address": {
                "streetAddress": "100 PARLIAMENT STREET",
                "locality": "LONDON",
                "postalCode": "SS991AA",
                "countryName": "England"
            },
            "contactPoint": {
                "name": "Hifzur Khan",
                "email": "hifzur.khan@hmrc.gov.uk",
                "telephone": "03000558444"
            },
            "roles": [
                "buyer"
            ]
        },
        {
            "id": "GB-COH-02579852",
            "name": "Insight Direct (UK) Ltd",
            "identifier": {
                "legalName": "Insight Direct (UK) Ltd",
                "scheme": "GB-COH",
                "id": "02579852"
            },
            "address": {
                "streetAddress": "1st Floor, 1 St Paul's Place, Sheffield, S1 2JX"
            },
            "details": {
                "scale": "large",
                "vcse": false
            },
            "roles": [
                "supplier"
            ]
        }
    ],
    "buyer": {
        "id": "GB-GOR-D25",
        "name": "H M REVENUE & CUSTOMS"
    },
    "awards": [
        {
            "id": "ocds-b5fd17-f44f6fa8-ede8-42b2-86d5-3a49498d2201-1",
            "status": "active",
            "date": "2026-04-08T00:00:00+01:00",
            "datePublished": "2026-04-09T11:16:22+01:00",
            "value": {
                "amount": 135553,
                "currency": "GBP"
            },
            "suppliers": [
                {
                    "id": "GB-COH-02579852",
                    "name": "Insight Direct (UK) Ltd"
                }
            ],
            "contractPeriod": {
                "startDate": "2026-04-13T00:00:00+01:00",
                "endDate": "2027-04-12T23:59:59+01:00"
            },
            "documents": [
                {
                    "id": "1",
                    "documentType": "awardNotice",
                    "description": "Awarded contract notice on Contracts Finder",
                    "url": "https://www.contractsfinder.service.gov.uk/Notice/229496e1-2a2b-40b6-b5ab-fc83f6d031b3",
                    "datePublished": "2026-04-09T11:16:22+01:00",
                    "format": "text/html",
                    "language": "en"
                }
            ]
        }
    ]
}