The Monday Awards, Issue 2
Week to 9 October 2026
Which cyber contracts an SME wins
We track UK public sector cyber contracts for firms that sell cyber services, software, insurance or consultancy. Some you could win alone. Some you could win with a partner. For some, you could show the buyer a better way to buy. Every contract below is free to read.
What has changed: We now also read Contracts Finder, which carries many smaller contracts and framework call-offs. That is why this week's counts are higher than in issue 1. Year-on-year comparisons use Find a Tender and Scotland only, so they stay like for like.
The week in numbers
- 16 cyber contracts published this week, worth £3,480,000 in total
- 6 of the 16 contracts whose notice states SME status went to an SME
This week's story: Which cyber contracts an SME wins
In the 12 months to 9 October 2026, 883 cyber contract notices say whether the winner is a small or medium-sized business (SME). SMEs won 35% of them.
SMEs did better on separate contracts (39%) than on framework contracts (31%). So look first at contracts published on their own.
Notices that do not say, or that name both an SME and a larger firm, are left out.
Contract of the week
Dionach by Nomios won a £381,000 penetration testing contract from Crown Office and Procurator Fiscal Service.
- Bids received: 1
- Winner is an SME: Yes
- Scoring: price only, no weighting published
- Route: G-Cloud 14 framework (Government Commercial Agency)
Read the contract on TenderCyber or the original notice on Public Contracts Scotland.
Contracts in the last four weeks
New this week
SOC, detection and response
- Trustmarque Solutions won work from East Renfrewshire Council, £182K over 2 years.
Network security
- Softcat won work from Southern Housing, £208K (product).
- Aspire Technology Solutions won work from West College Scotland, £194K over 5 years (product).
- Computacenter won work from Public Services Delivery Scotland (PSD Scotland), £136K (product).
Penetration testing
- Prism Infosec won work from ICS on behalf of DSIT and DESNZ, £450K over 2 years.
- Dionach by Nomios won work from Crown Office and Procurator Fiscal Service, £381K.
- MTI Technology won work from University of Portsmouth, £66.5K.
- CDW won work from Amplius Living, £34.7K (product).
Governance, risk and audit
- Risk Ledger won work from City of London Corporation, £104K over 4 years (product).
- BDO won work from NHS Resolution, £43.5K.
Training and awareness
- Redflags (Think Cyber Security) won work from NHS Property Services Limited, £63.4K over 25 months.
Backup, recovery and resilience
- Kingsfield Computer Products won work from Surrey County Council, £1M over 3 years.
- Softcat won work from University of Chester, £220K over 4 years (product).
Cyber work, type not named
- Insight Direct (UK) won work from Moorfields Eye Hospital NHS Foundation Trust, £238K over 3 years (product).
- Frazer-Nash Consultancy won work from DESNZ, £145K.
1 of the 16 contracts this week is cyber work inside a bigger IT contract, which a cyber firm cannot bid for on its own. It is on the website and not in this list.
All 16 contracts from this week, and the four weeks before, are on tendercyber.com/browse.
Coming in the subscriber edition
- 20 open cyber tenders, worth £12,700,000 where the buyer published a value
- 1 contract whose end date moved into the 6 to 18 month window this week
The subscriber edition will be via email. Find out more at tendercyber.com/pricing
Sources: Find a Tender Service, Contracts Finder and Public Contracts Scotland. Contains public sector information licensed under the Open Government Licence v3.0.