Scope
Reference
PROC/2024/72
Description
The requirement for a Distributed Denial of Service (DDoS) protection service sits within the BBC Technology and Media Operations group, and specifically the Digital Distribution team.
*
Digital Distribution has had a Network DDoS Protection service in place since 2016 to protect the BBC's Internet Network. The purpose of this is to provide a malicious traffic 'scrubbing' facility in the event of a volumetric packet-based or protocol-based traffic attack targeting the services on the network and exhausting circuit or server capacity. It forms part of a suite of protection services and techniques required to continually protect the BBC's Internet edge from attack.
*
The BBC's Internet Network carries all the BBC's audience facing traffic and CDN origin traffic. Additionally, it provides transit for the corporate network. The availability of this network and services delivered across it are crucial in maintaining the BBC's online presence for critical services such as www.bbc.co.uk and BBC iPlayer.
*
The current DDoS protection service has been provided by the incumbent supplier since 2019. The BBC is now entering a tender process to procure this service from December 2025 and ensure continued network DDoS protection.
Contract 1. Distributed Denial of Service (DDoS) Protection Service
Supplier
Contract value
- £2,300,000 excluding VAT
- £2,760,000 including VAT
Above the relevant threshold
Award decision date
24 November 2025
Date assessment summaries were sent to tenderers
24 November 2025
Standstill period
- End: 4 December 2025
- 8 working days
Earliest date the contract will be signed
5 December 2025
Contract dates (estimated)
- 11 January 2027 to 10 January 2030
- Possible extension to 10 January 2032
- 5 years
Description of possible extension:
One 24 month extension.
Main procurement category
Services
CPV classifications
- 72222300 - Information technology services
- 72315000 - Data network management and support services
Contract locations
- UK - United Kingdom
Information about tenders
- 12 tenders received
- 3 tenders assessed in the final stage:
- 0 submitted by small and medium-sized enterprises (SME)
- 0 submitted by voluntary, community and social enterprises (VCSE)
- 1 supplier awarded contracts
- 2 suppliers unsuccessful (details included for contracts over £5 million)
Submission
Submission type
Tenders
Procedure
Procedure type
Competitive flexible procedure
Supplier
HCL Technologies UK Limited
- Public Procurement Organisation Number: PXVG-2513-YLNL
Church Road
Egham
TW20 9QB
United Kingdom
Email: ccsframeworks@hcl.com
Website: http://www.hcltech.com
Region: UKJ25 - West Surrey
Small or medium-sized enterprise (SME): No
Voluntary, community or social enterprise (VCSE): No
Supported employment provider: No
Public service mutual: No
Contract 1. Distributed Denial of Service (DDoS) Protection Service
Contracting authority
BBC (British Broadcasting Corporation)
- Public Procurement Organisation Number: PJRB-3233-GTQL
Broadcasting House, Portland Place
London
W1A 1AA
United Kingdom
Email: no_reply@bbc.co.uk
Website: http://www.bbc.co.uk/supplying/
Region: UKI32 - Westminster
Organisation type: Public authority - sub-central government