E-CONEX takes CANUT’s €2.82bn surveillance contract
A major French award leads the week, while Clean Hydrogen, Czech border control and SURF open sizeable frameworks. Bid data shows where competition is thin.
CANUT reported a signed €2.82bn contract with E-CONEX for the supply, installation, maintenance and advisory work around urban videoprotection and video-surveillance systems. The award, published on 21 September, drew 8 bids. It is an award, not a new opportunity.
Where this market is going
Cybersecurity accounted for 23.95% of all classified notices in the week to 27 September, compared with 23.57% across the 84-day baseline from 29 June. That is an increase of 0.38 percentage points on a like-for-like classifier basis, rather than a measure of market volume.
Cybersecurity: share of all classified public IT tenders
Share, not volume. Weekly, only weeks classified by the same classifier generation.
Where the tenders were published
Notices of every kind by buyer country, 7 days to 2026-09-27.
How hard the competition is
Competitive awards averaged 2.4 bids across 79 measured awards, while 53% of those awards, or 42, had a single bid. Direct awards are separate from that measure, and there were 3. SMEs submitted 80% of bids, which is a measure of bidding participation rather than contracts won.
How these tenders will be decided
Stated award criterion, for the 54 new calls that declared one.
Bids are counted on contract awards from competitive procedures only. Direct awards (negotiated without a call, single-source) have one bidder by design and are counted separately. Shown only when at least 10 awards reported a bid count. Direct awards this window: 3.
What is driving it
One notice in this window cited BSI IT-Grundschutz. The past-year citation register also records NIS2 with 51 citations and Poland’s uKSC with 41, making assurance and compliance requirements a continuing qualification issue even where the current notice does not specify a deadline.
Regulations named in Cybersecurity tenders
Notices in this vertical citing each framework, past 12 months.
The calendar ahead
| Date | Framework | Milestone | Where |
|---|---|---|---|
| 2027-07-10 | EU AML Package (AMLR 2024/1624 + AMLA 2024/1620) | applies from | EU |
| 2027-12-11 | Cyber Resilience Act (Regulation 2024/2847) | applies from | EU |
What shifted this week
Type of work requested, against the usual mix
Percentage difference from the count expected at this vertical’s mix over the previous 84 days.
Whose technology is being named
Vendor names are mentions in calls and awards, not evidence of the supplier that won. Check Point was named in 8 notices, all awards, which was 242% more often than the vertical’s usual mix would predict. Fortinet appeared in 7 notices, including 2 calls and 5 awards, 3% less often than expected. Microsoft appeared in 4 notices, 26% less often than expected.
Vendors named in this window’s notices
Procedures naming each vendor, calls and awards together.
Who is buying repeatedly
| Calls | Buyer | Country | Largest call |
|---|---|---|---|
| 2 | Nemocnice TGM Hodonín, příspěvková organizace | CZ | Zvýšení kybernetické bezpečnosti Nemocnice TGM Hodonín – Nástroj pro zabezpečení zdravotnických z |
Buyers that published more than one call for tender in this window. An organisation running several at once is usually working through a programme rather than buying once.
The biggest new open tenders
The largest new open call is Clean Hydrogen Joint Undertaking’s €15m framework ceiling for managed IT services, published on 24 September with bids due 3 November. Ministerstvo vnitra is seeking eGate barriers and support for automated border control under a €10.93m framework ceiling, closing 2 November; SURF B.V.’s €6.89m Security Incident Response 2.0 framework closes 22 October. ČD - Telematika a.s. is buying a multitenant security platform and related services for €2.2m, due 9 November; HLAVNÍ MĚSTO PRAHA seeks Fidelis licences, manufacturer support and operational support for €1.91m, due 12 October; and Evida Service A/S has a €1.34m managed SOC re-tender closing 23 October. Values were stated for 26 of 95 calls, and framework figures are ceilings rather than a committed purchase.
| Estimated value | Tender | Buyer | Closes |
|---|---|---|---|
| €15.0m (framework ceiling) | MANAGED IT SERVICES 2026 | Clean Hydrogen Joint Undertaking BE | 2026-11-03 |
| €10.9m (framework ceiling) | Delivery of eGate barriers and their subsequent support to ensure automated border control - RD | Ministerstvo vnitra CZ | 2026-11-02 |
| €6.9m (framework ceiling) | Security Incident Response 2.0 (2026) | SURF B.V. NL | 2026-10-22 |
| €2.2m | Delivery and implementation of a multitenant security platform including related services | ČD - Telematika a.s. CZ | 2026-11-09 |
| €1.9m | Ensuring licences, manufacturer support and operational support of Fidelis technology in ICT environment MHMP and MPP | HLAVNÍ MĚSTO PRAHA CZ | 2026-10-12 |
| €1.3m | Procurement and delivery of Managed SOC for IT to Evida - Re-tender | Evida Service A/S DK | 2026-10-23 |
| €800k | HW for High Security Information zone | STÁTNÍ TISKÁRNA CENIN, státní podnik CZ | 2026-11-05 |
| €588k | Supply of firewalls for Olomouc Region | Olomoucký kraj CZ | 2026-10-29 |
Calls for tender published in this window and still open, by the buyer’s estimated value in EUR; 26 of 95 new calls stated one. A framework agreement states a ceiling for several purchases, not one contract.
Closing in the next two weeks
Contracts awarded
Beyond E-CONEX’s CANUT contract, BWI GmbH awarded Greenbone AG a €6.01m framework ceiling for a vulnerability-scanning platform; SBB CFF FFS Infra-Bahnsteuerung awarded DE_Evolit Schweiz AG €4.63m for online key management for ETCS; Nemocnice Třebíč awarded Aricoma Systems a.s. €2.09m for cybersecurity infrastructure; Spain’s central contracting body awarded Sistemas Avanzados De Tecnología, S.A. €1.45m under its dynamic purchasing system; and KOMENDA GŁÓWNA POLICJI awarded NETFORMERS Sp. z o.o. €829,106 for Cisco Umbrella protection-query licences and support. None of those listed awards is marked as a direct award. In the award count, Advanced Business Systems sp. z o. o., Nomios Poland Sp. z o.o. and ПрАТ Інститут інформаційних технологій each recorded 2 awards.
| Contract value | Contract | Buyer | Winner |
|---|---|---|---|
| €2.82bn | FOURNITURE, INSTALLATION, MAINTENANCE ET PRESTATIONS DE CONSEIL AUTOUR DES SYSTEMES DE VIDEOPROTECTION ET VIDEOSURVEILLANCE URBAINE | CANUT FR | E-CONEX |
| €6.0m (framework ceiling) | 1858-CK-Vulnerability-Scanning-Platform | BWI GmbH DE | Greenbone AG |
| €4.6m | oKM4E – online Key Management for ETCS | SBB CFF FFS Infra-Bahnsteuerung CH | DE_Evolit Schweiz AG |
| €2.1m | Zvýšení kybernetické bezpečnosti Nemocnice Třebíč – Infrastruktura | Nemocnice Třebíč, příspěvková organizace CZ | Aricoma Systems a.s. |
| €1.4m | Contrato Específico Del Sistema Dinámico De Adquisición (Sda 24/2022) De Adquisición, Suministro | Dirección General de Racionalización y Centralización de la Contratación-Junta de Contratación Centralizada ES | Sistemas Avanzados De Tecnología, S.A. |
| €829k | Przedłużenie licencji/subskrypcji ochrony zapytań DNS Cisco Umbrella lub równoważnej wraz ze wsparciem technicznym producenta w ramach zapew | KOMENDA GŁÓWNA POLICJI PL | NETFORMERS Sp. z o.o. |
| €752k | La contratación de un servicio de protección de la navegación web corporativa en la nube. | Consejería de Movilidad, Transformación Digital e Inteligencia Artificial de la Junta de Castilla y León ES | TELEFONICA SOLUCIONES DE INFORMATICA Y COMUNICACIONES DE ESPAÑA SA |
| €719k | Ochrana privilegovaných účtů a přístupů | Fakultní nemocnice Ostrava CZ | ASECPRO s.r.o. |
Contract award notices published in this window, by the signed contract value in EUR. These are contracts already placed, not open opportunities.
Who won
Suppliers with the most contract awards this window
Award notices naming each supplier; call-offs under one agreement count separately.
Browse every open public IT tender on SalesDots
The immediate deadlines are 5 October for Polska Agencja Kosmiczna’s industrial UTM security equipment, Berlin TXL’s ISO-IEC 27001 preparation, BSI’s SecAutomotiveOS work and Logroño’s security-platform maintenance; the federal IT infrastructure and network-security framework follows on 6 October, with CPO LT’s firewall call due 9 October.
Method
Built from 193 public procurement notices published from 2026-09-21 to 2026-09-27 and classified into the Cybersecurity vertical: 95 calls for tender, 91 contract awards, 1 prior information notices and 2 other notices. A tender republished in a new version is counted once. Values are converted to EUR at reference rates. Comparisons use the previous 84 days, classified by the same classifier generation. Every figure on this page is computed from the notices; the commentary is written around them. Sources: TED, e-Zamówienia (BZP), Prozorro, SEAP / SICAP (e-licitatie.ro), CVP IS (Lithuania), ЦАИС ЕОП (CAIS EOP), IUB (Latvia). Tenders named in earlier editions of this column are not named again.
Frequently Asked Questions
What share of classified notices was cybersecurity?
Cybersecurity represented 23.95% of classified notices in the week to 27 September, compared with a 23.57% baseline share.
How competitive were cybersecurity awards?
Competitive awards averaged 2.4 bids across 79 measured awards. Single-bid awards accounted for 53%, or 42 awards, while 3 awards were direct.
Which vendor was named most often?
Check Point was named in 8 notices, with 8 award mentions and 0 call mentions. Its count was 242% above the expected mix.
