This public procurement record has 1 release in its history.

Award

12 Aug 2026 at 13:39

Summary of the contracting process

The Department for Work & Pensions commissioned “Hack Yourself First”, an online workshop to build defensive software-security skills. The training approaches security from an attacker’s perspective, teaching developers how to probe for risks and exploit vulnerabilities in a specially built vulnerable web application. Participants work towards defined goals and learn through practical, interactive exercises, with the group identifying multiple attack vectors and sharing different approaches to exploiting specific risks. This is staff training delivered online or virtually for DWP participants across England, including the North East, North West, Yorkshire and the Humber, East Midlands, West Midlands, East of England, London, South East and South West. The procurement is for services rather than goods or construction, with the relevant classification being staff training services.

The procurement is complete and the contract was awarded to PROGRESSION DEVELOPMENT LTD, an SME. It used a direct award below the applicable threshold, without competition, and comprised one completed lot. The award was made on 12 August 2026; the contract was signed the same day and runs from 13 August 2026 to 1 September 2027. Its value is £22,000 excluding VAT, or £26,400 including VAT. The contract is active. The stated delivery approach is online or virtual, with the course intended to start in late November or early December 2026. The requirement was processed by SSCL. The published outcome identifies the successful supplier and service category, but does not set out a separate scored evaluation breakdown.

This requirement indicates demand for practical cyber-security training aimed specifically at software developers, rather than general awareness training. Suppliers well placed for comparable work would be able to design and run instructor-led virtual workshops using a deliberately vulnerable web application, realistic attack scenarios and structured participant goals. Credibility would depend on demonstrable expertise in web application vulnerabilities, defensive development and explaining offensive techniques safely to professional audiences. Providers should be able to make sessions interactive, draw out varied approaches from participants and connect exploitation activity to risk identification and remediation. Experience delivering reliable online training to a geographically distributed public-sector workforce would also be relevant. The awarded supplier is an SME, showing that specialist delivery capability can meet this buyer’s requirement without the scale of a large training provider.

How relevant is this notice?

Notice Title

Hack Yourself First

Notice Description

"Hack Yourself First" is all about building up defensive skills in software developers. It looks at security from the attacker's perspective and takes them through the steps necessary to exploit vulnerable software on the web so that they can experience hacking first hand. Workshop participants are set specific goals they must complete that involve probing for risks and then exploiting discrete vulnerabilities in a specially built vulnerable application. The interactive nature of the workshop means that multiple attack vectors are usually identified across the spectrum of participants and each person contributes their own unique perspective as to how specific risks are exploited. Method of Delivery Online/Virtual Course to start late November/early December 2026. Processed by SSCL

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-06e29c
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/076785-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Below threshold - without competition
Tender Suitability
Not specified
Awardee Scale
SME

Common Procurement Vocabulary (CPV)

CPV Divisions

80 - Education and training services


CPV Codes

80511000 - Staff training services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£22,000 Under £100K

Notice Dates

Publication Date
12 Aug 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
12 Aug 20262 weeks ago
Contract Period
13 Aug 2026 - 1 Sep 2027 1-2 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
Department for Work & Pensions
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
LONDON
Postcode
SW1H 9NA
Postcode Area
South West London
Country
England

Major Region (ITL 1)
TLI London
Basic Region (ITL 2)
TLI3 Inner London - West
Small Region (ITL 3)
TLI35 Westminster and City of London
Delivery Location
Not specified

Local Authority
Westminster
Electoral Ward
St James's
Westminster Constituency
Cities of London and Westminster

Supplier Information

Number of Suppliers
1
Supplier Name

PROGRESSION DEVELOPMENT LTD

Further Information

Notice Documents

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...