This public procurement record has 3 releases in its history.

Award

12 Aug 2026 at 09:20

Award

30 Jun 2026 at 08:46

Award

30 Jun 2026 at 08:30

Summary of the contracting process

The Ministry of Defence procured cyber data product delivery services for Defence cyber operations. The requirement covers developing, testing and maintaining tools and solutions that transform raw cyber data into actionable intelligence for cyber analysts. The service supports identification and response to cyber threats, including the integration and exploitation of data from Defence platforms and systems. Potential data sources include network activity, system events and access-management processes, helping make information more accessible and usable in cyber operations. Delivery covers the United Kingdom. This is a defence and security requirement for a central government buyer, focused on cyber data engineering, network management software services and the continued development of cyber monitoring capability.

The procurement is complete and was awarded through a direct award under the Procurement Act 2023, using the defence and security special-case provisions. The Ministry of Defence awarded the contract to Leonardo UK Ltd on 30 June 2026; it was signed on 9 July 2026. The award value is £877,759.88 excluding VAT and £1,053,311.86 including VAT. The awarded contract period runs from 5 August 2026 to 31 March 2027, while the award record gives a service period from 13 July 2026 to 31 March 2027. The authority justified the direct award on operational continuity, readiness and security grounds, following a gap in system onboarding and a backlog of systems awaiting integration. The procurement comprised one lot.

This award indicates established demand for cyber data products that connect Defence platforms and systems, support system onboarding and turn raw operational data into usable intelligence. Suppliers seeking credibility for comparable work would need strong capability in cyber data engineering, network management software, data integration, threat monitoring and analyst-facing tools. Evidence of developing, testing and maintaining secure solutions in a defence or similarly sensitive operational environment would be important, alongside the ability to protect information and maintain service continuity. The requirement also favours organisations able to manage a growing pipeline of systems awaiting integration, work with network activity, system-event and access-management data, and support ongoing enhancement of cyber detection and response capability at central-government scale.

How relevant is this notice?

Notice Title

UK5 - Transparency Notice - 715882482 - Cyber Mission Data - Lot 2 (Cyber Data Product Delivery)

Notice Description

The contract covers the delivery of cyber data products that support Defence in identifying and responding to cyber threats. The supplier is responsible for developing, testing, and maintaining tools and solutions that transform raw cyber data into actionable intelligence for cyber analysts.

Procurement Information

1. Legal Basis This contract will be awarded in accordance with Section 41 of the Procurement Act 2023 (Direct Award in Special Cases), relying on Schedule 5, Paragraph 20. The Authority is satisfied that the contract is a defence authority contract and a defence and security contract, and that direct award is necessary to maintain the operational capability, effectiveness, readiness, and security of the armed forces. 2. Justification The expiry of the previous contract has resulted in a temporary pause in Defence's ability to onboard new systems into the Cyber Mission Data capability. This service supports the integration and exploitation of data from Defence platforms and systems, enabling information to be more accessible and usable within Defence cyber operations. This may include data relating to network activity, system events, and access management processes. During the intervening period, Defence has remained able to utilise and exploit data from systems already onboarded prior to contract expiry, and priority systems were incorporated under the previous contractual arrangements. However, new onboarding activity has been delayed for approximately seven weeks, resulting in a growing backlog of systems awaiting integration. The identified risk relates to the impact of a prolonged inability to onboard additional systems rather than the short gap experienced to date. If this position were to continue for an extended period, Defence's ability to expand and enhance its cyber monitoring capability in line with evolving operational requirements would be reduced. The Authority has therefore determined that continuation of these services through a direct award is necessary to maintain operational effectiveness, continuity of service and the ongoing development of Defence's cyber data capabilities whilst a future competitive procurement is undertaken. 3. Reasons for Limited Duration The contract term is 8 months, representing the minimum necessary time required for the Authority to undertake a separate competitive procurement procedure and transition to a future solution whilst maintaining operational capability, effectiveness and security and avoiding risk and disruption to Defence's cyber detection and response capability during this time.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06bf9a
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/076498-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Direct award
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72511000 - Network management software services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
£877,759 £500K-£1M
Contracts Value
£877,759 £500K-£1M

Notice Dates

Publication Date
12 Aug 20261 months ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
30 Jun 20262 months ago
Contract Period
5 Aug 2026 - 31 Mar 2027 6-12 months
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
Ministry of Defence
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CORSHAM
Postcode
SN13 9NR
Postcode Area
Swindon
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK72 Wiltshire
Delivery Location
Not specified

Local Authority
Wiltshire
Electoral Ward
Corsham Without
Westminster Constituency
Chippenham

Supplier Information

Number of Suppliers
1
Supplier Name

Leonardo UK Ltd

Further Information

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...