RED.ES tenders the cyber threat analysis for the .ES registry

The General Directorate of the Public Business Entity RED.ES has called for a tender to contract the cyber threat analysis and risk management service for the registry of the .ES ccTLD, Spain’s top-level domain. The announcement is published in the Official State Gazette (Boletín Oficial del Estado) number 214, dated August 31, 2026, in section V-A of public sector procurement announcements, with official reference BOE-B-2026-28208 and file number 017/26-SI.

The contract, processed through an open procedure, has an estimated value of 274,965.00 euros and a duration of 12 months. Bids may be submitted until 23:59 hours on September 23, 2026, and the opening of the economic offer will be held in a public act on October 2, 2026 at 11:00 hours, broadcast via the RED.ES electronic office.

Object and scope of the contract

The contracted service focuses on the monitoring and protection of the .ES domain registry, critical infrastructure for the digital identity of companies and citizens in Spain. The successful bidder must provide cyber threat analysis and risk management services for this registry.

The CPV codes defining the object of the contract are:

• 72246000 — Systems consultancy services.
• 71600000 — Technical testing, analysis and consultancy services.
• 72900000 — Backup services and computer conversion of catalogues.
• 79417000 — Security consultancy services.

Conditions for participation and award

The procedure is open and variants will not be accepted. The award will be made according to the following criteria:

• Economic criterion — 60% weighting.
• Quantifiable technical criteria (CTC) — 40% weighting.

Bidders must prove their economic, financial, technical, and professional standing as established in the specifications, and bids must be written in Spanish. Electronic submission of bids, as well as electronic invoicing and payment, will be accepted. The bidder will be obliged to maintain their offer for a period of 3 months.

Financing and processing

The project is financed by European Union funds, specifically by the European Regional Development Fund (ERDF) 2021-2027. The announcement was sent to the Official Journal of the European Union (OJEU) on August 21, 2026, with previous publication identifier 2026-000442202.

The contracting authority is the General Directorate of the Public Business Entity RED.ES, with NIF Q2891006E, headquartered at Plaza Manuel Gómez Moreno s/n in Madrid (NUTS code ES300). The announcement is signed by the Director General, Jesús Herrero Poza, dated August 21, 2026.

Relevance for readers

This tender reinforces the security of the .ES domain registry, an essential digital asset for the trust of companies and citizens in the Spanish online environment. The procurement of specialized cyber threat analysis and risk management services, funded by European funds, demonstrates the administration’s commitment to protecting the national digital infrastructure against a constantly evolving threat landscape.

Source: Official State Gazette, no. 214, August 31, 2026, Sec. V-A, page 45715 (official reference: BOE-B-2026-28208).