--- title: "DevSecOps Licensing and Tooling 2026-2028" ocid: "ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81" canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81" markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81.md" json_url: "https://d3tenders.com/contract/ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81.json" source: "Contracts Finder" current_stage: "Award" buyer: "UK Health Security Agency" published: "2026-09-29" --- # DevSecOps Licensing and Tooling 2026-2028 Buyer: UK Health Security Agency Current stage: Award OCID: ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81 [View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81) [Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81.json) ## Summary The UK Health Security Agency (UKHSA) procured DevSecOps software licences and related support services. The tools named are Snyk, IriusRisk, LinearB, LocalStack, InfraCost, Virtuoso and SonarCloud, supporting software security, threat modelling, automated testing, engineering performance monitoring and cloud cost governance. This is a software and IT systems procurement, delivered for UKHSA in London. The requirement combines multiple software products with associated support, rather than a single standalone application. The procurement was made through the Government Commercial Agency’s Technology Products and Associated Services 2 framework, Software lot. The procurement is complete and was awarded to Softcat plc. The award date was 23 September 2026. The award value was £1,065,358.25. The contract period runs from 1 September 2026 to 31 March 2028. This was a selective framework call-off, using the Technology Products and Associated Services 2 framework’s Software lot. The tender submission deadline was 31 August 2026 at 17:00. The stated suitability information excludes SMEs and voluntary, community and social enterprises. No separate evaluation criteria are recorded in the procurement details. For suppliers considering similar UKHSA requirements, this award demonstrates demand for a multi-product DevSecOps software estate delivered with associated support, rather than for one tool in isolation. Relevant capability spans software security, threat modelling, automated testing, engineering performance monitoring and cloud cost governance, with the ability to supply the named products or equivalent solutions aligned to these functions. A credible competitor would need to coordinate licensing and support across a varied set of software products and understand how the tools contribute to software engineering and security workflows. UKHSA used the Technology Products and Associated Services 2 framework’s Software lot, so experience supplying software through this framework route would be pertinent. The recorded suitability excludes SMEs and VCSEs; the selected supplier is a large company, indicating this requirement was served at substantial scale.⟂ ## Notice Provision of DevSecOps software licences and associated support services for UKHSA, including Snyk, IriusRisk, LinearB, LocalStack, InfraCost, Virtuoso and SonarCloud. The contract supports software security, threat modelling, automated testing, engineering performance monitoring and cloud cost governance activities. Awarded via the GCA Technology Products and Associated Services 2 (TePAS 2) Framework RM6098 Lot 3 Software. ## Key Details | Field | Value | | --- | --- | | Publication source | Contracts Finder | | Latest notice | https://www.contractsfinder.service.gov.uk/Notice/cd1693d7-87b3-44de-b6ec-eac2f70f7de7 | | Notice type | Award Notice | | Procurement type | Framework | | Procurement category | Goods | | Procurement method | Selective | | Procurement method details | Call-off from a framework agreement | | Tender suitability | Not specified | | Awardee scale | Large | | All stages | Award | ## Dates | Field | Value | | --- | --- | | Publication date | 29 Sep 2026 | | Submission deadline | Not specified | | Future notice date | Not specified | | Award date | 23 Sep 2026 | | Contract period | 1 Sep 2026 - 31 Mar 2028 | | Recurrence | Not specified | ## Values | Field | Value | | --- | --- | | Tender value | £1,065,358 | | Lots value | Not specified | | Awards value | £1,065,358 | | Contracts value | Not specified | ## Status | Field | Value | | --- | --- | | Tender status | Complete | | Lots status | Not specified | | Awards status | Active | | Contracts status | Not specified | ## Buyer | Field | Value | | --- | --- | | Main buyer | UK Health Security Agency | | Locality | LONDON | | Postcode area | East London | | Postcode | E14 4PU | | Country | England | | ITL 1 | TLI London | | ITL 2 | TLI4 Inner London - East | | ITL 3 | TLI42 Tower Hamlets | | Local authority | Tower Hamlets | | Electoral ward | Canary Wharf | | Westminster constituency | Poplar and Limehouse | | Delivery location | Not specified | ## Supplier | Field | Value | | --- | --- | | Number of suppliers | 1 | | Supplier names | Softcat Plc | ## CPV Codes ### Divisions - 48 - Software package and information systems ### Codes - 48000000 - Software package and information systems ## Release History - 29 Sep 2026 at 12:06 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/cd1693d7-87b3-44de-b6ec-eac2f70f7de7 ## Documents - https://www.contractsfinder.service.gov.uk/Notice/cd1693d7-87b3-44de-b6ec-eac2f70f7de7 29th September 2026 - Awarded contract notice on Contracts Finder - https://www.contractsfinder.service.gov.uk/Notice/Attachment/5395b9e5-c213-4d79-8295-8c2bd9b2f194 DevSecOps Licensing and Tooling Renewal 20262028 Sofcat C468755._Redacted (002)_Redacted ## Provenance This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-84e57b10-e662-4c65-930e-1ba826283c81.json.