Notice Information
Notice Title
715884522 - DOBUS Core Contract
Notice Description
Provision of the Defence Out of Bounds Update Service (DOBUS), a managed cyber security patch acquisition, assurance, hosting and distribution service for Defence. The requirement includes the operation and maintenance of a secure and accredited platform for the acquisition, verification and distribution of software and firmware patches and updates across Defence networks. Services include secure hosting, repository management, service desk support, out-of-hours assistance, performance reporting, governance, security compliance, change management and continuous service improvement. The Supplier shall provide a highly available service supporting Defence systems operating at OFFICIAL and SECRET classifications, ensuring timely access to trusted patch content to support cyber resilience and vulnerability remediation across Defence.
Procurement Information
1. Legal Basis This contract will be awarded in accordance with Section 41 of the Procurement Act 2023 (Direct Award in Special Cases), relying on Schedule 5, Paragraph 20. The Authority is satisfied that the contract is a defence authority contract and a defence and security contract, and that direct award is necessary to maintain and enhance the operational capability, effectiveness, readiness, safety and security of the Armed Forces 2. Justification The Authority considers that continuation of the service is necessary to maintain operational effectiveness and support the ongoing management of cyber security risks. A sustained reduction in the service would increase operational risk and reduce the efficiency and resilience of Defence digital and information systems. The contract includes the continued sustainment and enhancement of the existing service to ensure it continues to meet Defence requirements. The Authority has therefore determined that a direct award is necessary and proportionate to maintain the operational effectiveness, resilience and security of this Defence capability while future requirements and procurement options are considered. 3. Reasons for Duration The contract term of 3 years (01 July 2026 to 30 June 2029), with break points at the end of Years 1 and 2, represents the period required to maintain continuity of this cyber security capability whilst undertaking service sustainment activities, reviewing longer-term requirements, and assessing future procurement options. The contract duration balances operational necessity with the Authority's intention to consider future competitive procurement arrangements and longer-term capability requirements. 4. Future Procurement During the contract term, the Authority intends to undertake additional market engagement, technical assessment and option analysis to inform the long-term Enterprise Patching strategy. Subject to the outcome of this activity and future approvals, the Authority may undertake a future competitive procurement for the enduring capability.
Notice Details
Publication & Lifecycle
- Open Contracting ID
- ocds-h6vhtk-06cbff
- Publication Source
- Find A Tender Service
- Latest Notice
- https://www.find-tender.service.gov.uk/Notice/069282-2026
- Current Stage
- Award
- All Stages
- Planning, Award
Procurement Classification
- Notice Type
- UK5 - Transparency Notice
- Procurement Type
- Standard
- Procurement Category
- Services
- Procurement Method
- Direct
- Procurement Method Details
- Direct award
- Tender Suitability
- Not specified
- Awardee Scale
- Large
Common Procurement Vocabulary (CPV)
- CPV Divisions
72 - IT services: consulting, software development, Internet and support
-
- CPV Codes
72511000 - Network management software services
Notice Value(s)
- Tender Value
- £4,900,000 £1M-£10M
- Lots Value
- Not specified
- Awards Value
- £3,942,100 £1M-£10M
- Contracts Value
- Not specified
Notice Dates
- Publication Date
- 22 Jul 2026Today
- Submission Deadline
- Not specified
- Future Notice Date
- 20 Jul 2026Expired
- Award Date
- 22 Jul 2026Today
- Contract Period
- 31 Jul 2026 - 31 Jul 2029 3-4 years
- Recurrence
- Not specified
Notice Status
- Tender Status
- Complete
- Lots Status
- Complete
- Awards Status
- Pending
- Contracts Status
- Not Specified
Buyer & Supplier
Contracting Authority (Buyer)
- Main Buyer
- MINISTRY OF DEFENCE
- Contact Name
- Available with D3 Tenders Premium →
- Contact Email
- Available with D3 Tenders Premium →
- Contact Phone
- Available with D3 Tenders Premium →
Buyer Location
- Locality
- CORSHAM
- Postcode
- SN13 9NR
- Post Town
- Swindon
- Country
- England
-
- Major Region (ITL 1)
- TLK South West (England)
- Basic Region (ITL 2)
- TLK7 Gloucestershire and Wiltshire
- Small Region (ITL 3)
- TLK72 Wiltshire
- Delivery Location
- Not specified
-
- Local Authority
- Wiltshire
- Electoral Ward
- Corsham Ladbrook
- Westminster Constituency
- Chippenham
Further Information
Notice Documents
-
https://www.find-tender.service.gov.uk/Notice/069282-2026
22nd July 2026 - Transparency notice on Find a Tender -
https://www.find-tender.service.gov.uk/Notice/066797-2026
15th July 2026 - Pipeline notice on Find a Tender
Open Contracting Data Standard (OCDS)
The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.
{
"tag": [
"compiled"
],
"id": "ocds-h6vhtk-06cbff-2026-07-22T15:31:16+01:00",
"date": "2026-07-22T15:31:16+01:00",
"ocid": "ocds-h6vhtk-06cbff",
"initiationType": "tender",
"planning": {
"documents": [
{
"id": "066797-2026",
"documentType": "plannedProcurementNotice",
"noticeType": "UK1",
"description": "Pipeline notice on Find a Tender",
"url": "https://www.find-tender.service.gov.uk/Notice/066797-2026",
"datePublished": "2026-07-15T13:59:09+01:00",
"format": "text/html"
}
]
},
"parties": [
{
"id": "GB-PPON-PHVX-4316-ZVGZ",
"name": "Ministry of Defence",
"identifier": {
"scheme": "GB-PPON",
"id": "PHVX-4316-ZVGZ"
},
"address": {
"streetAddress": "MoD Corsham",
"locality": "Corsham",
"postalCode": "SN139NR",
"country": "GB",
"countryName": "United Kingdom",
"region": "UKK15"
},
"contactPoint": {
"name": "Farai Ntengerenji",
"email": "ukstratcomdd-cm-sw-cybercomm@mod.gov.uk",
"telephone": "03033711219"
},
"roles": [
"buyer"
],
"details": {
"url": "https://www.gov.uk/government/organisations/ministry-of-defence",
"classifications": [
{
"id": "publicAuthorityCentralGovernment",
"scheme": "UK_CA_TYPE",
"description": "Public authority - central government"
}
]
}
},
{
"id": "GB-COH-02109168",
"name": "Boxxe Limited",
"identifier": {
"scheme": "GB-COH",
"id": "02109168"
},
"address": {
"streetAddress": "Floor 3, Artemis House, Eboracum Way",
"locality": "York",
"postalCode": "YO317RE",
"country": "GB",
"countryName": "United Kingdom",
"region": "UKE21"
},
"contactPoint": {
"email": "emma.cruddas@boxxe.com",
"telephone": "07792 876538"
},
"roles": [
"supplier"
],
"details": {
"url": "http://www.boxxe.com",
"scale": "large",
"vcse": false
}
}
],
"buyer": {
"id": "GB-PPON-PHVX-4316-ZVGZ",
"name": "Ministry of Defence"
},
"tender": {
"id": "715884522 - DOBUS Core Contract",
"legalBasis": {
"id": "2023/54",
"scheme": "UKPGA",
"uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
},
"title": "715884522 - DOBUS Core Contract",
"description": "Provision of the Defence Out of Bounds Update Service (DOBUS), a managed cyber security patch acquisition, assurance, hosting and distribution service for Defence. The requirement includes the operation and maintenance of a secure and accredited platform for the acquisition, verification and distribution of software and firmware patches and updates across Defence networks. Services include secure hosting, repository management, service desk support, out-of-hours assistance, performance reporting, governance, security compliance, change management and continuous service improvement. The Supplier shall provide a highly available service supporting Defence systems operating at OFFICIAL and SECRET classifications, ensuring timely access to trusted patch content to support cyber resilience and vulnerability remediation across Defence.",
"items": [
{
"id": "1",
"additionalClassifications": [
{
"scheme": "CPV",
"id": "72511000",
"description": "Network management software services"
}
],
"deliveryAddresses": [
{
"region": "UK",
"country": "GB",
"countryName": "United Kingdom"
}
],
"relatedLot": "1"
}
],
"value": {
"amountGross": 5880000,
"amount": 4900000,
"currency": "GBP"
},
"procurementMethod": "direct",
"procurementMethodDetails": "Direct award",
"mainProcurementCategory": "services",
"specialRegime": [
"defenceSecurity"
],
"aboveThreshold": true,
"lots": [
{
"id": "1",
"contractPeriod": {
"startDate": "2026-07-31T00:00:00+01:00",
"endDate": "2031-07-31T23:59:59+01:00"
},
"status": "complete"
}
],
"communication": {
"futureNoticeDate": "2026-07-20T23:59:59+01:00"
},
"status": "complete",
"procurementMethodRationale": "1. Legal Basis This contract will be awarded in accordance with Section 41 of the Procurement Act 2023 (Direct Award in Special Cases), relying on Schedule 5, Paragraph 20. The Authority is satisfied that the contract is a defence authority contract and a defence and security contract, and that direct award is necessary to maintain and enhance the operational capability, effectiveness, readiness, safety and security of the Armed Forces 2. Justification The Authority considers that continuation of the service is necessary to maintain operational effectiveness and support the ongoing management of cyber security risks. A sustained reduction in the service would increase operational risk and reduce the efficiency and resilience of Defence digital and information systems. The contract includes the continued sustainment and enhancement of the existing service to ensure it continues to meet Defence requirements. The Authority has therefore determined that a direct award is necessary and proportionate to maintain the operational effectiveness, resilience and security of this Defence capability while future requirements and procurement options are considered. 3. Reasons for Duration The contract term of 3 years (01 July 2026 to 30 June 2029), with break points at the end of Years 1 and 2, represents the period required to maintain continuity of this cyber security capability whilst undertaking service sustainment activities, reviewing longer-term requirements, and assessing future procurement options. The contract duration balances operational necessity with the Authority's intention to consider future competitive procurement arrangements and longer-term capability requirements. 4. Future Procurement During the contract term, the Authority intends to undertake additional market engagement, technical assessment and option analysis to inform the long-term Enterprise Patching strategy. Subject to the outcome of this activity and future approvals, the Authority may undertake a future competitive procurement for the enduring capability.",
"documents": [
{
"id": "conflictOfInterest",
"documentType": "conflictOfInterest",
"description": "Not published"
}
],
"procurementMethodRationaleClassifications": [
{
"id": "defenceSecurityOperational"
}
]
},
"language": "en",
"awards": [
{
"id": "1",
"title": "715884522 - DOBUS Core Contract",
"status": "pending",
"value": {
"amountGross": 4730520.83,
"amount": 3942100.69,
"currency": "GBP"
},
"mainProcurementCategory": "services",
"aboveThreshold": true,
"suppliers": [
{
"id": "GB-COH-02109168",
"name": "Boxxe Limited"
}
],
"items": [
{
"id": "1",
"additionalClassifications": [
{
"scheme": "CPV",
"id": "72511000",
"description": "Network management software services"
}
],
"relatedLot": "1"
}
],
"contractPeriod": {
"startDate": "2026-08-01T00:00:00+01:00",
"endDate": "2029-07-31T23:59:59+01:00"
},
"relatedLots": [
"1"
],
"documents": [
{
"id": "069282-2026",
"documentType": "awardNotice",
"noticeType": "UK5",
"description": "Transparency notice on Find a Tender",
"url": "https://www.find-tender.service.gov.uk/Notice/069282-2026",
"datePublished": "2026-07-22T15:31:16+01:00",
"format": "text/html"
}
],
"milestones": [
{
"id": "1",
"type": "futureSignatureDate",
"dueDate": "2026-07-31T23:59:59+01:00",
"status": "scheduled"
}
]
}
]
}