Insta: secure systems, industrial automation and defense software
Insta combines industrial automation with defence, cyber security and software services. Its 2025 disclosures show why the whole group's sales are not defence revenue.
Cyber / Archive
Cyber reporting
Page 1 of 2
What CWIX 2026 actually demonstrates about defense software interoperability
CWIX2026 exposed integration gaps as well as successful connections. Its place alongside TIDE and Federated Mission Networking explains why a useful supplier reference needs a tested configuration, a customer purpose and a maintenance plan.
DSIT’s GINA notice shows a market for GNSS interference data services
DSIT’s proposed GINA purchase combines analytics access with end-user research. Ordnance Survey’s later annual report places the service within its positioning business, while the procurement record still requires a separate confirmation of contract completion.
Fraunhofer's Q-net-Q demonstration tests integration across a quantum communications network
The February 2026 research announcement describes a real-world test involving several organisations and manufacturers. Commercial service readiness remains a separate assessment.
MTU’s €575,000 cyber-range award includes the platform underneath
The €575,000 MTU award combines a cyber-range platform with support for the university’s existing OpenStack environment. Its June2025-to-February2026 procurement history provides a useful comparison for suppliers selling into education and industry training.
The UK’s AI Measurement Centre creates a concrete buyer for assurance research
DSIT’s signed four-year contract gives NPL a funded measurement programme. Its research remit and published lifecycle work show where evaluation tools can help AI customers make better adoption decisions.
Gladiator’s £16.9m extension keeps training integration in the supplier market
The support extension bridges an existing training system towards a separate Gladiator–SPARTAN service competition. The 2026 notices show how the future scope and contract period developed.
PESCO’s electronic warfare projects are at different commercial stages
One PESCO EW project completed its feasibility study, ACCESS coordinates a development concept, and JEEWCI focuses on common training and doctrine. Their different outputs point to different commercial relationships.
NATO’s data strategy makes metadata and access control a product requirement
The Alliance’s data strategy identifies catalogues, originator control and accountable product teams as parts of its 2030 direction. For software suppliers, the opportunity depends on fitting those responsibilities into existing customer systems.
The NCSC’s post-quantum roadmap changes the questions buyers ask suppliers
The NCSC’s roadmap now has a consultancy pilot and a July2026 industry workshop report behind it. Together they show a near-term market for discovery and planning, alongside the longer product migration towards2035.
Advai: AI evaluation and assurance services
Advai supplies AI testing and monitoring, with MOD evaluation work and the FCA's live-testing programme providing concrete evidence of its role.
Backup promises and restoration evidence in a software service
Stored copies, recovery objectives and a demonstrated return to useful service are different claims. Buyers need a defined business outcome and evidence covering its dependencies.
Building the product inventory needed for post-quantum migration
A useful cryptographic inventory connects product functions, evidence and change ownership. It helps distinguish a verified capability from a roadmap dependent on suppliers or customers.
Can a Cyber Improvement Plan keep an MOD bid viable while assurance gaps are closed?
A remediation plan can be considered in supplier selection, but its commitments need a delivery budget and an accountable owner.
Cloud security responsibilities inside a defence software offer
Cloud infrastructure, application support and customer administration have different owners. A credible offer makes those boundaries visible and prices the work required for the supported service.
Comparing a security assessment with a continuing assurance service
A dated assessment and a continuing assurance service support different purchasing decisions. Compare the assessed subject, scope, corrective evidence and treatment of later product changes.
CR14’s cyber ranges offer a way to scope credible product evaluation
Estonia’s cyber-range operator describes testing, validation and experimentation services. A vendor should decide what evidence its next customer actually needs.
Does Defence Cyber Certification replace the MOD supplier cyber questionnaire?
Certification, the contract risk profile and the supplier questionnaire perform different jobs in MOD cyber assurance.
Evaluating a vendor's vulnerability disclosure and support process
A public security contact only starts the process. Buyers should compare assessment ownership, communication milestones and the supported releases covered by the offer.
Filigran: OpenCTI, security products and an open-source business
Filigran builds a business around OpenCTI and OpenAEV, with enterprise subscriptions, managed hosting and named customer examples across healthcare, automotive research and government.
HarfangLab: endpoint security and European customer relationships
HarfangLab combines endpoint detection, protection and asset visibility with cloud and local deployment options. Named customer testimony, an official French certification report and distribution agreements clarify its market position.
SBOM and VEX: separating component inventory from vulnerability status
VEX connects a vulnerability assessment to a particular product and time. Buyers need that connection, an attributed explanation and a maintained route to updates.
Second Front Systems: Game Warden and government software delivery
Second Front’s products support software development, deployment and ongoing operation. Its public Cohere example illustrates a platform relationship without establishing a government sales award.
Security support lifetime as a product purchasing criterion
Hardware warranty, software maintenance and product-family support can follow different clocks. Buyers need the applicable release, dates, dependencies and cost of staying within support.