Cybersecurity Renewal & Competitor Lead Finder

Turn Czech public-sector contract data into actionable cybersecurity renewal and competitor-account signals.

This Actor scans official Czech Contract Registry open-data records and looks for evidence that an ESET or Fortinet account may be approaching its next buying cycle. Instead of returning a raw procurement database, it returns structured ATTACK or DEFEND opportunities with the incumbent supplier, product, contract value, licence count when available, evidence, source contract, and a conservative expected buying window.

The Actor is designed for cybersecurity resellers, MSPs, distributors, vendor channel teams, account managers, and sales operations teams that want a focused list of accounts worth reviewing.

This Actor is not affiliated with the Czech Contract Registry, ESET, Fortinet, or any reseller. A buying-window signal is not a guarantee that a future procurement or renewal will occur.

What you get

Each returned opportunity can include:

• ATTACK / DEFEND action — target a competitor-held account or protect your own installed base
• Confidence level based on the evidence available in the public record
• Public-sector buyer
• Cybersecurity vendor and normalized product family
• Licence / seat count when stated in the registry subject
• Incumbent reseller or supplier
• Contract value and VAT context when available
• Explicit contract term or service-end date when available
• Expected buying-window range
• Evidence and reason codes used to create the signal
• Direct source contract URL for verification

The current live version focuses on ESET and Fortinet opportunities in Czech public-sector contracts.

How the signal works

The Actor streams official Czech Contract Registry monthly XML open-data dumps and applies deterministic extraction and quality checks. High-confidence opportunities require strong timing evidence such as an explicit one-year licence/support term or an explicit service-end date.

The output deliberately uses a buying window rather than a fake exact prediction date. For example, a one-year security licence signed in September may create a summer-to-autumn buying window for the following year, giving a reseller time to qualify the account before the likely renewal cycle.

Every live result keeps its source URL so users can independently verify the evidence.

ATTACK mode

Use ATTACK mode to find accounts currently supplied by other resellers.

Example input:

{
  "scanMonthsBack": 1,
  "mode": "attack",
  "vendors": ["ESET", "Fortinet"],
  "reseller": "",
  "horizonMonths": 18,
  "minConfidence": "HIGH",
  "limit": 20
}

Typical use cases:

• Find ESET public-sector accounts approaching their next buying cycle
• Find Fortinet renewal opportunities where another supplier is incumbent
• Build a focused account list for channel sales teams
• Monitor fresh public cybersecurity licence/support purchases for future renewal timing

DEFEND mode

Use DEFEND mode to find contracts where your reseller name is the incumbent supplier.

{
  "scanMonthsBack": 3,
  "mode": "defend",
  "vendors": ["ESET", "Fortinet"],
  "reseller": "Your Company Name",
  "horizonMonths": 18,
  "minConfidence": "HIGH",
  "limit": 20
}

This can act as an external public-data cross-check for renewal planning. Supplier matching is currently text-based, so use the company name as it normally appears in Czech public contracts.

Confidence levels

HIGH — strong timing evidence exists, such as an explicit one-year term or explicit service-end date.

MEDIUM — there is renewal language and recurring-product evidence, but the exact term is weaker or inferred.

WATCH — the contract looks commercially relevant, but timing evidence is not strong enough for a high-confidence sales action.

For initial prospecting, HIGH is the recommended setting.

Output example

{
  "action": "ATTACK",
  "confidence": "HIGH",
  "buyer": "Město Týn nad Vltavou",
  "vendor": "ESET",
  "product": "ESET PROTECT Enterprise",
  "seats": 130,
  "incumbent": "UNISMINI - služby, spol. s r.o.",
  "contractValue": 124155,
  "currency": "CZK",
  "termMonths": 12,
  "windowStart": "2027-07-10",
  "windowEnd": "2027-10-23",
  "sourceUrl": "https://smlouvy.gov.cz/smlouva/39430557",
  "dataStatus": "AUTO_QA_PASSED"
}

Data quality and limitations

The Actor intentionally favors precision over volume. Automatic QA rejects ambiguous suppliers and weak high-confidence signals, and results are deduplicated before delivery.

Public metadata is not always complete. Seat counts, exact service periods, or product editions may be absent from some contracts. The expected buying window is an evidence-based commercial signal, not a statement that a tender, renewal, or supplier change is certain to happen.

The current live MVP scans up to three monthly registry dumps per run and supports ESET and Fortinet. Additional cybersecurity vendors and deeper attachment-level term extraction can be added as the product matures.

Pricing

The Actor is designed for pay-per-event pricing: users pay for opportunities actually delivered to the default dataset. The current event is named verified-opportunity. The exact active event price is shown by Apify before a paid run.

Privacy and source data

The Actor focuses on legal entities, public buyers, suppliers, products, values, terms, and contract metadata. It does not intentionally enrich or sell personal contact data.

Source records come from the official Czech Contract Registry public open-data feed, and every delivered opportunity includes a source contract URL for traceability.