UKRI-6251 Cyber Security - Managed Service and Detection Response & Security Operations Centre service

UK Research & Innovation (UKRI)

This public procurement record has 1 release in its history.

Planning

21 Aug 2026 at 16:36

Summary of the contracting process

UK Research and Innovation (UKRI), through the Science and Technology Facilities Council (STFC), intends to procure a cyber security managed service. The requirement is for a managed security service provider to deliver managed detection and response and Security Operations Centre (SOC) services, working collaboratively with the existing STFC cyber security team. The service will provide continuous cyber security monitoring, threat detection and incident response across the United Kingdom. The initial service is for STFC, with potential to extend or scale provision to other UKRI councils during the contract. This is a cyber security and computer support consultancy service, including security services and security software development support. The procurement is suitable for small and medium-sized enterprises.

This procurement is at the planning stage and is not an invitation to tender. UKRI expects to issue a subsequent notice on 1 October 2026. It is undertaking pre-market engagement through a Request for Information questionnaire, with responses requested by 11 September 2026. Selected suppliers may then be invited to structured one-to-one Microsoft Teams meetings. The anticipated contract is for three years, with mobilisation expected to begin on 1 February 2027 and the service expected to be operational by 1 May 2027; the stated contract period runs to 1 February 2030. The estimated value is £1.25 million excluding VAT, or £1.5 million including VAT. There is one planned lot.

The planned requirement will suit established cyber security providers able to operate a managed detection and response service and SOC on a continuous 24/7, 365-day basis. Suppliers should be prepared to work closely with an existing public-sector cyber security team, supporting collaborative monitoring, detection, investigation and response rather than providing an isolated service. Relevant operational capability includes service mobilisation, transition into live operations, incident handling and the ability to scale delivery beyond the initial STFC requirement to other UKRI councils. Providers with the capacity to support a multi-organisation environment and develop a scalable commercial and technical model should monitor the next procurement stage. Participation in the market engagement will not form part of any later evaluation or give participants an advantage.

How relevant is this notice?

Notice Title

UKRI-6251 Cyber Security - Managed Service and Detection Response & Security Operations Centre service

Notice Description

UKRI-6251 Cyber Security - Managed Service and Detection Response & Security Operations Centre service. A Cyber Security provider to deliver collaborative SOC services, working with the existing STFC cyber security team.

Planning Information

Pre-Market Engagement – Cyber Security Managed Service Detection and Response UK Research and Innovation (UKRI) and the Science and Technology Facilities Council (STFC) is undertaking a pre-market engagement to inform an upcoming procurement for a Managed Security Service Provider to deliver a cyber security managed detection and response / Security Operations Centre service. The initial requirement is for the Science and Technology Facilities Council for an anticipated three-year contract, with an estimated value of approximately £1.25 million excluding VAT. The service is expected to provide 24/7 x 365 cyber security detection and response, with mobilisation commencing from February 2027 and the service operational by 1 May 2027. STFC is also exploring the potential to scale the service to additional UKRI councils during the lifetime of the contract. STFC is seeking feedback from the market to help inform the proposed service requirements, mobilisation and transition arrangements, scalability and commercial approach. Engagement Activities STFC intends to undertake: Request for Information (RFI): Suppliers are invited to complete the questionnaire. To request a copy of the RFI, please email STFCProcurement@UKRI.org STFC may invite a limited number of suppliers to participate in structured one-to-one MS Teams meetings following review of the RFI responses. More information on this and the proposed route to market can be found in the RFI. Participation in this pre-market engagement does not form part of any subsequent procurement evaluation and will not provide suppliers with an advantage in any future competition.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06e9f0
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/080084-2026
Current Stage
Planning
All Stages
Planning

Procurement Classification

Notice Type
UK2 - Preliminary Market Engagement Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Not Specified
Procurement Method Details
Not specified
Tender Suitability
SME
Awardee Scale
Not specified

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support

79 - Business services: law, marketing, consulting, recruitment, printing and security


CPV Codes

72212730 - Security software development services

72600000 - Computer support and consultancy services

79710000 - Security services

Notice Value(s)

Tender Value
£1,250,000 £1M-£10M
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
Not specified

Notice Dates

Publication Date
21 Aug 20265 days ago
Submission Deadline
Not specified
Future Notice Date
1 Oct 20262 months to go
Award Date
Not specified
Contract Period
1 Feb 2027 - 1 Feb 2030 3-4 years
Recurrence
Not specified

Notice Status

Tender Status
Planning
Lots Status
Planning
Awards Status
Not Specified
Contracts Status
Not Specified

Contracting Authority (Buyer)

Main Buyer
UK Research & Innovation (UKRI)
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
SWINDON, WILTSHIRE
Postcode
SN2 1FL
Postcode Area
Swindon
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK71 Swindon
Delivery Location
Not specified

Local Authority
Swindon
Electoral Ward
Rodbourne Cheney
Westminster Constituency
Swindon North

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...