Public contract award
A public contract awarded to the prospect, from Contracts Finder and Find a Tender in the UK or SAM.gov in the US.
Cybersecurity campaigns timed to a prospect's public contract win
When a prospect wins a public contract, your security firm's campaign reaches its IT lead, MD and FD within 30 minutes.
The problem
Smaller companies buy security after a trigger
Smaller companies tend to buy security when something forces it: a new contract or customer asks for evidence, an insurer asks questions, or a breach comes close. A firm that hears late finds the assessment already booked with whoever spoke to the prospect first.
A contract often brings the buyer's security requirements, such as Cyber Essentials or a supplier questionnaire, with a date to meet them by. Reformat Agency monitors up to 100 prospects 24/7 for contract awards and security job adverts. An agentic workflow, steps that run by themselves when an alert comes in, launches each campaign with a guide on meeting those requirements.
43%
of UK businesses had a cyber breach or attack in the last 12 months, and 85% of those experienced phishing
DSIT, Cyber Security Breaches Survey 2025 · 2025 ↗88%
of breaches at smaller businesses involved ransomware, against 39% at larger organisations (US and international)
Verizon, 2025 Data Breach Investigations Report, SMB snapshot · 2025 ↗A$56,600
average self-reported cost of cybercrime for an Australian small business in 2024 to 2025, up 14%
Australian Signals Directorate, Annual Cyber Threat Report 2024 to 2025 · 2025 ↗Alerts
The alerts we monitor for in this industry
A public contract award is the strongest alert for a security firm, because the contract often sets security requirements the prospect must meet before the work starts.
Security job advert
An information security, governance, risk and compliance (GRC) or data protection officer (DPO) role, or any IT role that mentions security.
New IT or security lead
A new Head of IT, IT manager or security lead on LinkedIn and Sales Navigator, or a new FD or MD filed at Companies House.
Webinar attendance
A contact at the prospect registers for or attends one of your own webinars.
Post about a problem
A LinkedIn post about phishing, a scam email, downtime, an account takeover, a supplier security questionnaire or cyber insurance.
Merger, funding or new site
A merger, acquisition, funding round or new site in the prospect's news, each adding systems to secure.
Who we market for
Businesses we work with
- 1Managed security service providers (MSSPs) and security operations centre (SOC) services
- 2Security consultancies and virtual chief information security officer (CISO) services
- 3Penetration testers
- 4Cyber Essentials and IASME certification bodies and assessors
Decision-makers
The decision-makers each campaign reaches
- 1IT lead (Head of IT, IT manager or whoever looks after IT)
- 2MD or owner
- 3FD, or a compliance or operations lead in regulated sectors
Last page of every guide
Public email and website records
- SPF, DMARC and DKIM email records
- Mail provider
- SSL certificate and its expiry date
- HTTPS and HSTS
- Cyber Essentials status: whether the prospect's website shows a Cyber Essentials badge or announcement, and its date
- Each result labelled In place, Worth checking or Worth fixing, with one line on what it means and one on what fixes it
- Nothing on the prospect's systems is tested or scanned
Built from public records only.
Guide topics
Examples of the guide in each campaign
- Won a public contract: the security requirements to meet
- Phishing: the current wave and how to brief staff
- Cyber Essentials renewal checklist
- What a breach in your sector means for you
- Cyber insurance questionnaire: what insurers ask
Questions
Common questions in this industry
Security buyers distrust automated outreach.
Each claim in a campaign links to a public source, and each campaign is about an alert at that prospect.
Our prospects already have an MSP.
Companies with an MSP often buy specialist security separately, such as penetration testing, certification and SOC services. Each campaign is about the alert at that prospect and offers a guide on that subject.
Pointing out weaknesses looks like scaremongering.
Each result on the guide's last page says what would fix it, and nothing is presented as a finding against the prospect.
Other industries
More industries we market for
Talk to us
The campaigns we would run for your prospects
Send us the companies you want to win. We show you the alerts at each one and the campaign we would launch.