Skip to content
Secure by Design · UK central government

Clear the spend-control gate on the first submission.

Secure by Design is mandatory for UK central government digital programmes and arm’s-length bodies. Without the Confidence Profile and the supporting evidence, the spend-control panel sends you back.

What you get

Three outcomes for spend control.

The Confidence Profile

Drafted from your inventory and connector evidence. No more hand-rolled spreadsheets.

An honest baseline

Each Secure by Design principle shown as Met, Partial or Unmet, with the signal behind it.

The remediation list

Gaps surfaced as a short list, sorted by the impact on the Confidence Profile.

How it works

Connect. Profile. Submit.

1. Connect

Read-only OAuth into your cloud and SaaS.

2. Profile

Each principle mapped to evidence. Two reviewers sign off.

3. Submit

One-click Confidence Profile pack the spend-control panel expects.

Who it’s for

UK central government and arm’s-length bodies.

Departments inside the Secure by Design scope. Arm’s- length bodies. Suppliers delivering digital programmes that go through HMG spend control.

Deep detail

Each Secure by Design principle — in our docs.

The full walkthrough — every principle, every Confidence Profile field — lives on docs.secruna.com.

Want to see your Secure by Design gap?
Talk to us for 30 minutes.

A 30-minute call tells you which principles are Met today and which would fail the spend-control panel.