This public procurement record has 2 releases in its history.

Award

22 Jul 2026 at 14:31

Planning

15 Jul 2026 at 12:59

Summary of the contracting process

The Ministry of Defence (MOD), located in Corsham, United Kingdom, has completed the procurement process for the "715884522 - DOBUS Core Contract," a service related to Defence Out of Bounds Update Service (DOBUS), focusing on cyber security patch acquisition and distribution. This procurement, which falls under the defence and security industry category, was executed through a direct award method to Boxxe Limited. The contract is scheduled to start on 1st August 2026 and end on 31st July 2029, with a total value of approximately £4.73 million. The procurement stage is complete, following an earlier planning notice dated 15th July 2026.

This tender presents significant opportunities for businesses specialising in cyber security and network management, particularly those capable of providing high-availability services at OFFICIAL and SECRET classifications. Large-scale companies like Boxxe Limited, who possess the infrastructure to support MOD's requirements for secure hosting, repository management, and continuous service improvement, would find this contract advantageous for growth. As the MOD intends to engage further with the market during the contract term, businesses in defence technology and cyber security services should evaluate potential future competitive procurement processes that could open additional avenues for business expansion.

How relevant is this notice?

Notice Title

715884522 - DOBUS Core Contract

Notice Description

Provision of the Defence Out of Bounds Update Service (DOBUS), a managed cyber security patch acquisition, assurance, hosting and distribution service for Defence. The requirement includes the operation and maintenance of a secure and accredited platform for the acquisition, verification and distribution of software and firmware patches and updates across Defence networks. Services include secure hosting, repository management, service desk support, out-of-hours assistance, performance reporting, governance, security compliance, change management and continuous service improvement. The Supplier shall provide a highly available service supporting Defence systems operating at OFFICIAL and SECRET classifications, ensuring timely access to trusted patch content to support cyber resilience and vulnerability remediation across Defence.

Procurement Information

1. Legal Basis This contract will be awarded in accordance with Section 41 of the Procurement Act 2023 (Direct Award in Special Cases), relying on Schedule 5, Paragraph 20. The Authority is satisfied that the contract is a defence authority contract and a defence and security contract, and that direct award is necessary to maintain and enhance the operational capability, effectiveness, readiness, safety and security of the Armed Forces 2. Justification The Authority considers that continuation of the service is necessary to maintain operational effectiveness and support the ongoing management of cyber security risks. A sustained reduction in the service would increase operational risk and reduce the efficiency and resilience of Defence digital and information systems. The contract includes the continued sustainment and enhancement of the existing service to ensure it continues to meet Defence requirements. The Authority has therefore determined that a direct award is necessary and proportionate to maintain the operational effectiveness, resilience and security of this Defence capability while future requirements and procurement options are considered. 3. Reasons for Duration The contract term of 3 years (01 July 2026 to 30 June 2029), with break points at the end of Years 1 and 2, represents the period required to maintain continuity of this cyber security capability whilst undertaking service sustainment activities, reviewing longer-term requirements, and assessing future procurement options. The contract duration balances operational necessity with the Authority's intention to consider future competitive procurement arrangements and longer-term capability requirements. 4. Future Procurement During the contract term, the Authority intends to undertake additional market engagement, technical assessment and option analysis to inform the long-term Enterprise Patching strategy. Subject to the outcome of this activity and future approvals, the Authority may undertake a future competitive procurement for the enduring capability.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06cbff
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/069282-2026
Current Stage
Award
All Stages
Planning, Award

Procurement Classification

Notice Type
UK5 - Transparency Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Direct award
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72511000 - Network management software services

Notice Value(s)

Tender Value
£4,900,000 £1M-£10M
Lots Value
Not specified
Awards Value
£3,942,100 £1M-£10M
Contracts Value
Not specified

Notice Dates

Publication Date
22 Jul 2026Today
Submission Deadline
Not specified
Future Notice Date
20 Jul 2026Expired
Award Date
22 Jul 2026Today
Contract Period
31 Jul 2026 - 31 Jul 2029 3-4 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Pending
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
MINISTRY OF DEFENCE
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CORSHAM
Postcode
SN13 9NR
Post Town
Swindon
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK72 Wiltshire
Delivery Location
Not specified

Local Authority
Wiltshire
Electoral Ward
Corsham Ladbrook
Westminster Constituency
Chippenham

Supplier Information

Number of Suppliers
1
Supplier Name

BOXXE

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-06cbff-2026-07-22T15:31:16+01:00",
    "date": "2026-07-22T15:31:16+01:00",
    "ocid": "ocds-h6vhtk-06cbff",
    "initiationType": "tender",
    "planning": {
        "documents": [
            {
                "id": "066797-2026",
                "documentType": "plannedProcurementNotice",
                "noticeType": "UK1",
                "description": "Pipeline notice on Find a Tender",
                "url": "https://www.find-tender.service.gov.uk/Notice/066797-2026",
                "datePublished": "2026-07-15T13:59:09+01:00",
                "format": "text/html"
            }
        ]
    },
    "parties": [
        {
            "id": "GB-PPON-PHVX-4316-ZVGZ",
            "name": "Ministry of Defence",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PHVX-4316-ZVGZ"
            },
            "address": {
                "streetAddress": "MoD Corsham",
                "locality": "Corsham",
                "postalCode": "SN139NR",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKK15"
            },
            "contactPoint": {
                "name": "Farai Ntengerenji",
                "email": "ukstratcomdd-cm-sw-cybercomm@mod.gov.uk",
                "telephone": "03033711219"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "https://www.gov.uk/government/organisations/ministry-of-defence",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    }
                ]
            }
        },
        {
            "id": "GB-COH-02109168",
            "name": "Boxxe Limited",
            "identifier": {
                "scheme": "GB-COH",
                "id": "02109168"
            },
            "address": {
                "streetAddress": "Floor 3, Artemis House, Eboracum Way",
                "locality": "York",
                "postalCode": "YO317RE",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKE21"
            },
            "contactPoint": {
                "email": "emma.cruddas@boxxe.com",
                "telephone": "07792 876538"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "http://www.boxxe.com",
                "scale": "large",
                "vcse": false
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PHVX-4316-ZVGZ",
        "name": "Ministry of Defence"
    },
    "tender": {
        "id": "715884522 - DOBUS Core Contract",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "715884522 - DOBUS Core Contract",
        "description": "Provision of the Defence Out of Bounds Update Service (DOBUS), a managed cyber security patch acquisition, assurance, hosting and distribution service for Defence. The requirement includes the operation and maintenance of a secure and accredited platform for the acquisition, verification and distribution of software and firmware patches and updates across Defence networks. Services include secure hosting, repository management, service desk support, out-of-hours assistance, performance reporting, governance, security compliance, change management and continuous service improvement. The Supplier shall provide a highly available service supporting Defence systems operating at OFFICIAL and SECRET classifications, ensuring timely access to trusted patch content to support cyber resilience and vulnerability remediation across Defence.",
        "items": [
            {
                "id": "1",
                "additionalClassifications": [
                    {
                        "scheme": "CPV",
                        "id": "72511000",
                        "description": "Network management software services"
                    }
                ],
                "deliveryAddresses": [
                    {
                        "region": "UK",
                        "country": "GB",
                        "countryName": "United Kingdom"
                    }
                ],
                "relatedLot": "1"
            }
        ],
        "value": {
            "amountGross": 5880000,
            "amount": 4900000,
            "currency": "GBP"
        },
        "procurementMethod": "direct",
        "procurementMethodDetails": "Direct award",
        "mainProcurementCategory": "services",
        "specialRegime": [
            "defenceSecurity"
        ],
        "aboveThreshold": true,
        "lots": [
            {
                "id": "1",
                "contractPeriod": {
                    "startDate": "2026-07-31T00:00:00+01:00",
                    "endDate": "2031-07-31T23:59:59+01:00"
                },
                "status": "complete"
            }
        ],
        "communication": {
            "futureNoticeDate": "2026-07-20T23:59:59+01:00"
        },
        "status": "complete",
        "procurementMethodRationale": "1. Legal Basis This contract will be awarded in accordance with Section 41 of the Procurement Act 2023 (Direct Award in Special Cases), relying on Schedule 5, Paragraph 20. The Authority is satisfied that the contract is a defence authority contract and a defence and security contract, and that direct award is necessary to maintain and enhance the operational capability, effectiveness, readiness, safety and security of the Armed Forces 2. Justification The Authority considers that continuation of the service is necessary to maintain operational effectiveness and support the ongoing management of cyber security risks. A sustained reduction in the service would increase operational risk and reduce the efficiency and resilience of Defence digital and information systems. The contract includes the continued sustainment and enhancement of the existing service to ensure it continues to meet Defence requirements. The Authority has therefore determined that a direct award is necessary and proportionate to maintain the operational effectiveness, resilience and security of this Defence capability while future requirements and procurement options are considered. 3. Reasons for Duration The contract term of 3 years (01 July 2026 to 30 June 2029), with break points at the end of Years 1 and 2, represents the period required to maintain continuity of this cyber security capability whilst undertaking service sustainment activities, reviewing longer-term requirements, and assessing future procurement options. The contract duration balances operational necessity with the Authority's intention to consider future competitive procurement arrangements and longer-term capability requirements. 4. Future Procurement During the contract term, the Authority intends to undertake additional market engagement, technical assessment and option analysis to inform the long-term Enterprise Patching strategy. Subject to the outcome of this activity and future approvals, the Authority may undertake a future competitive procurement for the enduring capability.",
        "documents": [
            {
                "id": "conflictOfInterest",
                "documentType": "conflictOfInterest",
                "description": "Not published"
            }
        ],
        "procurementMethodRationaleClassifications": [
            {
                "id": "defenceSecurityOperational"
            }
        ]
    },
    "language": "en",
    "awards": [
        {
            "id": "1",
            "title": "715884522 - DOBUS Core Contract",
            "status": "pending",
            "value": {
                "amountGross": 4730520.83,
                "amount": 3942100.69,
                "currency": "GBP"
            },
            "mainProcurementCategory": "services",
            "aboveThreshold": true,
            "suppliers": [
                {
                    "id": "GB-COH-02109168",
                    "name": "Boxxe Limited"
                }
            ],
            "items": [
                {
                    "id": "1",
                    "additionalClassifications": [
                        {
                            "scheme": "CPV",
                            "id": "72511000",
                            "description": "Network management software services"
                        }
                    ],
                    "relatedLot": "1"
                }
            ],
            "contractPeriod": {
                "startDate": "2026-08-01T00:00:00+01:00",
                "endDate": "2029-07-31T23:59:59+01:00"
            },
            "relatedLots": [
                "1"
            ],
            "documents": [
                {
                    "id": "069282-2026",
                    "documentType": "awardNotice",
                    "noticeType": "UK5",
                    "description": "Transparency notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/069282-2026",
                    "datePublished": "2026-07-22T15:31:16+01:00",
                    "format": "text/html"
                }
            ],
            "milestones": [
                {
                    "id": "1",
                    "type": "futureSignatureDate",
                    "dueDate": "2026-07-31T23:59:59+01:00",
                    "status": "scheduled"
                }
            ]
        }
    ]
}