---
title: "Qualys Vulnerability Management Solution (SaaS)"
ocid: "ocds-h6vhtk-078fca"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-078fca"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-078fca.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-078fca.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "ASTER GROUP LIMITED"
published: "2026-10-26"
---

# Qualys Vulnerability Management Solution (SaaS)

Buyer: ASTER GROUP LIMITED  
Current stage: Award  
OCID: ocds-h6vhtk-078fca

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-078fca)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-078fca.json)

## Summary

Aster Group Limited bought a cloud-based Qualys vulnerability management service to identify known security vulnerabilities across its IT estate and support remediation through automated patching. The requirement replaces a manual process and supports the organisation’s Cyber Essentials Plus certification and cyber security strategy. The estate covered comprises more than 200 servers and approximately 1,500 laptops. The procurement is for security software and associated software maintenance services. Delivery is in the United Kingdom.

The procurement is complete and the contract is active. Aster used a below-threshold limited competition, with one lot. Ultima Business Solutions Ltd was selected and the contract was signed on 24 September 2026. The contract runs from 1 October 2026 to 30 September 2029. Its value is £138,182.40 excluding VAT, or £172,728 including VAT. The award record does not state a separate award date or evaluation criteria.

For suppliers competing for a similar requirement from Aster, this award indicates demand for managed vulnerability identification and automated patching across a sizeable mixed server and laptop estate. Credible providers would need to demonstrate effective vulnerability detection across technical environments, practical integration with remediation workflows and reliable software maintenance. The solution must help an organisation meet Cyber Essentials Plus requirements and support its cyber security strategy, so evidence of security outcomes and implementation capability would be relevant. The limited competition route and selection of a large business show the type of supplier and procurement approach used for this purchase; suppliers should be able to deliver a complete software-as-a-service solution at organisational scale.

## Notice

Aster is required to achieve Cyber Essentials Plus certification and supports elements of the refreshed Cyber Security sub strategy. Delivering this depends on a solution capable of identifying Common Vulnerabilities and Exposures across the technical estate and remediating them through automated patching, replacing the manual process presently applied across an estate of more than 200 servers & approx 1500 laptops.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/100835-2026 |
| Notice type | UK7 - Contract Details Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Limited |
| Procurement method details | Below threshold - limited competition |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 26 Oct 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 1 Oct 2026 - 30 Sep 2029 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £138,182 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | ASTER GROUP LIMITED |
| Locality | DEVIZES |
| Postcode area | Swindon |
| Postcode | SN10 2AZ |
| Country | England |
| ITL 1 | TLK South West (England) |
| ITL 2 | TLK7 Gloucestershire and Wiltshire |
| ITL 3 | TLK72 Wiltshire |
| Local authority | Wiltshire |
| Electoral ward | Urchfont & Bishops Cannings |
| Westminster constituency | Melksham and Devizes |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Ultima Business Solutions |

## CPV Codes

### Divisions

- 48 - Software package and information systems
- 72 - IT services: consulting, software development, Internet and support

### Codes

- 48730000 - Security software package
- 72267100 - Maintenance of information technology software

## Release History

- 26 Oct 2026 at 09:42 - Award - UK7 - Contract Details Notice - https://www.find-tender.service.gov.uk/Notice/100835-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/100835-2026
  26th October 2026 - Contract details notice on Find a Tender

## Notice URLs

- http://www.ultima.com
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-078fca. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-078fca.json.