---
title: "Second Vulnerability Analyst"
ocid: "ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "Financial Conduct Authority"
published: "2026-08-13"
---

# Second Vulnerability Analyst

Buyer: Financial Conduct Authority  
Current stage: Award  
OCID: ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d.json)

## Summary

The Financial Conduct Authority (FCA) procured a second vulnerability analyst to increase capacity and cope with a higher workload. The requirement is for information technology services, specifically vulnerability analysis and related IT consulting, software development, internet and support services. The work is to be delivered in London, at or associated with the FCA’s site at 12 Endeavour Square, London E20 1JN. This is a services requirement rather than a goods or construction contract. It concerns an additional analyst resource, so businesses providing cyber security vulnerability assessment and analysis services are the most relevant potential competitors for comparable requirements from the FCA.

This procurement has been completed and awarded following a selective call-off from a framework agreement. The tender deadline was 1 June 2026 at 12:00, and the award was made on 15 June 2026. SOFTCAT LTD - FCA was selected as supplier. The awarded value is £120,000, compared with the original estimated procurement value of £100,000. The contract runs from 1 July 2026 to 23 December 2026. The requirement was for an initial six-month period, with the contract covering the provision of the additional vulnerability analyst resource. The published procurement category is services, with the work classified under IT services.

For a supplier that did not win this procurement, the award demonstrates FCA demand for additional cyber security capability delivered through a framework call-off. A credible competitor for a future requirement would need to provide experienced vulnerability analysts who can increase delivery capacity quickly and support a public-sector financial regulator’s workload. Relevant capability includes vulnerability identification, assessment, analysis and reporting, alongside the wider IT consulting and support skills associated with the requirement. Suppliers should also be able to operate through the applicable framework route and provide suitable personnel for work based in London. The procurement was not identified as suitable for SMEs or voluntary, community or social enterprises, indicating a preference for established framework suppliers with the required scale and delivery arrangements.

## Notice

Second Vulnerability Analyst required in order to cope with increased workload, ideally to start at the beginning of July for an initial period of 6 months.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/c2f5a00b-d136-40a1-8c4e-d34afb72b176 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | Not specified |
| Awardee scale | Not specified |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 13 Aug 2026 |
| Submission deadline | 1 Jun 2026 |
| Future notice date | Not specified |
| Award date | 15 Jun 2026 |
| Contract period | 1 Jul 2026 - 23 Dec 2026 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £100,000 |
| Lots value | Not specified |
| Awards value | £120,000 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Financial Conduct Authority |
| Locality | LONDON |
| Postcode area | East London |
| Postcode | E20 1JN |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI41 Hackney and Newham |
| Local authority | Newham |
| Electoral ward | Stratford Olympic Park |
| Westminster constituency | Stratford and Bow |
| Delivery location | TLI London |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Softcat Plc |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 13 Aug 2026 at 07:57 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/c2f5a00b-d136-40a1-8c4e-d34afb72b176

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/c2f5a00b-d136-40a1-8c4e-d34afb72b176
  13th August 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-365bd5df-5374-4318-ba82-f8c137e27d4d.json.