This public procurement record has 1 release in its history.

Award

26 Oct 2026 at 09:42

Summary of the contracting process

Aster Group Limited bought a cloud-based Qualys vulnerability management service to identify known security vulnerabilities across its IT estate and support remediation through automated patching. The requirement replaces a manual process and supports the organisation’s Cyber Essentials Plus certification and cyber security strategy. The estate covered comprises more than 200 servers and approximately 1,500 laptops. The procurement is for security software and associated software maintenance services. Delivery is in the United Kingdom.

The procurement is complete and the contract is active. Aster used a below-threshold limited competition, with one lot. Ultima Business Solutions Ltd was selected and the contract was signed on 24 September 2026. The contract runs from 1 October 2026 to 30 September 2029. Its value is £138,182.40 excluding VAT, or £172,728 including VAT. The award record does not state a separate award date or evaluation criteria.

For suppliers competing for a similar requirement from Aster, this award indicates demand for managed vulnerability identification and automated patching across a sizeable mixed server and laptop estate. Credible providers would need to demonstrate effective vulnerability detection across technical environments, practical integration with remediation workflows and reliable software maintenance. The solution must help an organisation meet Cyber Essentials Plus requirements and support its cyber security strategy, so evidence of security outcomes and implementation capability would be relevant. The limited competition route and selection of a large business show the type of supplier and procurement approach used for this purchase; suppliers should be able to deliver a complete software-as-a-service solution at organisational scale.

How relevant is this notice?

Notice Information

Notice Title

Qualys Vulnerability Management Solution (SaaS)

Notice Description

Aster is required to achieve Cyber Essentials Plus certification and supports elements of the refreshed Cyber Security sub strategy. Delivering this depends on a solution capable of identifying Common Vulnerabilities and Exposures across the technical estate and remediating them through automated patching, replacing the manual process presently applied across an estate of more than 200 servers & approx 1500 laptops.

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-078fca
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/100835-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Limited
Procurement Method Details
Below threshold - limited competition
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support


CPV Codes

48730000 - Security software package

72267100 - Maintenance of information technology software

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£138,182 £100K-£500K

Notice Dates

Publication Date
26 Oct 2026Yesterday
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
1 Oct 2026 - 30 Sep 2029 3-4 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
ASTER GROUP LIMITED
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
DEVIZES
Postcode
SN10 2AZ
Postcode Area
Swindon
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK7 Gloucestershire and Wiltshire
Small Region (ITL 3)
TLK72 Wiltshire
Delivery Location
Not specified

Local Authority
Wiltshire
Electoral Ward
Urchfont & Bishops Cannings
Westminster Constituency
Melksham and Devizes

Supplier Information

Number of Suppliers
1
Supplier Name

Ultima Business Solutions

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...