---
title: "Provision of Vulnerability Reporting Service - Platform"
ocid: "ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "GOVERNMENT COMMERCIAL AGENCY"
published: "2026-05-07"
---

# Provision of Vulnerability Reporting Service - Platform

Buyer: GOVERNMENT COMMERCIAL AGENCY  
Current stage: Award  
OCID: ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c.json)

## Summary

The contracting process for the "Provision of Vulnerability Reporting Service - Platform" is conducted by the Government Commercial Agency on behalf of the Cabinet Office in the United Kingdom. This procurement falls under the industry category of operating systems and is based in London. The process has reached the award stage, with the contract awarded to Hackerone Inc. The procurement method used is selective, specifically as part of a call-off from a framework agreement. The tender period concluded on 19th January 2026, and the contract period is set from 3rd July 2026 to 2nd July 2027. The total contract value is £875,000.

This tender presents potential growth opportunities for businesses with expertise in operating systems and vulnerability disclosure platforms. Primarily, large enterprises with capacity for developing user-friendly and intuitive training materials for system owners would find this contract particularly suitable. Although SMEs and VCSEs are not the main targets due to the nature and scale of the project, businesses with robust security and IT infrastructure services can leverage this opportunity to establish partnerships with governmental entities, enhancing their portfolio in public sector contracts.

## Notice

The Buyer requires a Supplier to provide a service for the vulnerability disclosure platform. The Platform will provide user friendly and intuitive training material to on-board new system owners who will be responsible for remediating the vulnerabilit

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/8b6c08ab-9efd-4f4a-9aa1-e28c39c0ee35 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Goods |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 7 May 2026 |
| Submission deadline | 19 Jan 2026 |
| Future notice date | Not specified |
| Award date | 29 Mar 2026 |
| Contract period | 3 Jul 2026 - 3 Jul 2027 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £875,000 |
| Lots value | Not specified |
| Awards value | £875,000 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | GOVERNMENT COMMERCIAL AGENCY |
| Locality | LIVERPOOL |
| Post town | Liverpool |
| Postcode | L3 9PP |
| Country | England |
| ITL 1 | TLD North West (England) |
| ITL 2 | TLD7 Merseyside |
| ITL 3 | TLD72 Liverpool |
| Local authority | Liverpool |
| Electoral ward | City Centre North |
| Westminster constituency | Liverpool Riverside |
| Delivery location | TLI London |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | HACKERONE |

## CPV Codes

### Divisions

- 48 - Software package and information systems

### Codes

- 48620000 - Operating systems

## Release History

- 7 May 2026 at 10:09 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/8b6c08ab-9efd-4f4a-9aa1-e28c39c0ee35

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/8b6c08ab-9efd-4f4a-9aa1-e28c39c0ee35
  7th May 2026 - Awarded contract notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/7e0adb88-3260-4e70-80c1-cf0893899b26
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/4b1589fb-392a-453f-8df9-a4d5136da3aa
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/717dd2a4-a6b0-4d44-8427-58ae5be43f98

## Notice URLs

- https://www.gov.uk/government/organisations/crown-commercial-service

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-5ffa919e-526e-4381-a426-056dd47cd09c.json.