Award GB CF

Static application security testing

POLICE DIGITAL SERVICE

Stage: Award

the latest stage the buyer has published
Buyer: POLICE DIGITAL SERVICE
Supplier: Softcat PLC

named in the award notice
Value: £19.8K

net · GBP
Awarded: 26 Jun 2026

the award date on the notice
End date: For subscribers only
Where: London, England
First published: 13 Aug 2026

last seen 13 Aug 2026

What the buyer published

PDS requires an enterprise-grade platform for Static Application Security Testing (SAST) and Software Composition Analysis (SCA), which is essential for maintaining secure and compliant software across a complex policing environment. By embedding the software into Azure DevOps pipelines, we can enforce consistent security and code quality gates at build time, ensuring vulnerabilities, code smells, and dependency risks are identified early and remediated before deployment. This aligns directly with NCSC secure development principles and supports defensible audit and compliance requirements. Additionally, the software's deep support for multiple languages and frameworks allows us to standardise scanning across diverse services

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date For subscribers only

Why we call this Penetration testing

Judged against the rules we publish. How we decide.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.