---
title: "Provision of Vulnerability Reporting Service Triage"
ocid: "ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "CROWN COMMERCIAL SERVICE"
published: "2026-02-10"
---

# Provision of Vulnerability Reporting Service Triage

Buyer: CROWN COMMERCIAL SERVICE  
Current stage: Award  
OCID: ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853.json)

## Summary

The procurement process titled "Provision of Vulnerability Reporting Service Triage" was conducted by the Crown Commercial Service on behalf of the Cabinet Office. This procurement falls under the industry category of operating systems, with a focus on services related to vulnerability reporting and triage. The process utilised a selective procurement method through a call-off from a dynamic purchasing system. Located in the East of England, United Kingdom, the contract covers a period from 1 April 2026 to 31 March 2027. The process is currently in the award stage, having been completed on 10 February 2026, and awarded to NCC Group Security Services Limited for a value of £1,417,200 GBP. The tender period concluded on 5 December 2025.

This contract represents a significant business opportunity for companies operating within the cybersecurity and IT services industry, particularly those skilled in vulnerability management and reporting. Businesses with a strong background in providing comprehensive security solutions and managing communication between stakeholders and security protocols are well-suited to deliver the outlined services. Although this particular opportunity has been awarded to a large company, the structure of the procurement method suggests that there may be future opportunities for other businesses within the dynamic purchasing system. This scenario underscores the importance of maintaining an agile approach to public sector tenders to leverage growth within the government contracting space.

## Notice

This Procurement will establish a single Supplier Contract for the purchase of Vulnerability Reporting Service Triage Provider. The chosen provider will acknowledge every vulnerability report received, handle all communication with the reporter of the vulnerability and perform a vulnerability triage culimnating in the production of a report.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/40f52a9a-7aba-46f3-b7af-2766853f5693 |
| Notice type | Award Notice |
| Procurement type | Dynamic |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a dynamic purchasing system |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 10 Feb 2026 |
| Submission deadline | 5 Dec 2025 |
| Future notice date | Not specified |
| Award date | 30 Jan 2026 |
| Contract period | 31 Mar 2026 - 31 Mar 2027 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £1,417,200 |
| Lots value | Not specified |
| Awards value | £1,417,200 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | CROWN COMMERCIAL SERVICE |
| Locality | LIVERPOOL |
| Post town | Liverpool |
| Postcode | L3 9PP |
| Country | England |
| ITL 1 | TLD North West (England) |
| ITL 2 | TLD7 Merseyside |
| ITL 3 | TLD72 Liverpool |
| Local authority | Liverpool |
| Electoral ward | City Centre North |
| Westminster constituency | Liverpool Riverside |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | NCC GROUP SECURITY SERVICES |

## CPV Codes

### Divisions

- 48 - Software package and information systems

### Codes

- 48620000 - Operating systems

## Release History

- 10 Feb 2026 at 10:52 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/40f52a9a-7aba-46f3-b7af-2766853f5693

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/40f52a9a-7aba-46f3-b7af-2766853f5693
  10th February 2026 - Awarded contract notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/f2d806c4-ab94-4a5c-9d9b-d77db196aa51
  Redacted - Order Schedule 4 - Order Tender
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/564f57bd-94b2-4aa0-8c99-b2c47da7ef20
  Redacted - Order Schedule 5 - Pricing Details
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/8a2bdde5-ddda-41cd-b4a2-97a2c9fb5b28
  Redacted - Order Schedule 20 - Specification
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/ed6eb912-2814-4a2f-93de-c74085a98127
  Redacted - Order Form
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/3373d4bd-313d-4383-8131-7673a04772b2
  Redacted - Joint Schedule 11 - Processing Data

## Notice URLs

- https://www.gov.uk/government/organisations/crown-commercial-service

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853.json.