---
title: "Hack Yourself First"
ocid: "ocds-h6vhtk-06e29c"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06e29c"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-06e29c.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-06e29c.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "Department for Work & Pensions"
published: "2026-08-12"
---

# Hack Yourself First

Buyer: Department for Work & Pensions  
Current stage: Award  
OCID: ocds-h6vhtk-06e29c

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06e29c)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-06e29c.json)

## Summary

The Department for Work & Pensions commissioned “Hack Yourself First”, an online workshop to build defensive software-security skills. The training approaches security from an attacker’s perspective, teaching developers how to probe for risks and exploit vulnerabilities in a specially built vulnerable web application. Participants work towards defined goals and learn through practical, interactive exercises, with the group identifying multiple attack vectors and sharing different approaches to exploiting specific risks. This is staff training delivered online or virtually for DWP participants across England, including the North East, North West, Yorkshire and the Humber, East Midlands, West Midlands, East of England, London, South East and South West. The procurement is for services rather than goods or construction, with the relevant classification being staff training services.

The procurement is complete and the contract was awarded to PROGRESSION DEVELOPMENT LTD, an SME. It used a direct award below the applicable threshold, without competition, and comprised one completed lot. The award was made on 12 August 2026; the contract was signed the same day and runs from 13 August 2026 to 1 September 2027. Its value is £22,000 excluding VAT, or £26,400 including VAT. The contract is active. The stated delivery approach is online or virtual, with the course intended to start in late November or early December 2026. The requirement was processed by SSCL. The published outcome identifies the successful supplier and service category, but does not set out a separate scored evaluation breakdown.

This requirement indicates demand for practical cyber-security training aimed specifically at software developers, rather than general awareness training. Suppliers well placed for comparable work would be able to design and run instructor-led virtual workshops using a deliberately vulnerable web application, realistic attack scenarios and structured participant goals. Credibility would depend on demonstrable expertise in web application vulnerabilities, defensive development and explaining offensive techniques safely to professional audiences. Providers should be able to make sessions interactive, draw out varied approaches from participants and connect exploitation activity to risk identification and remediation. Experience delivering reliable online training to a geographically distributed public-sector workforce would also be relevant. The awarded supplier is an SME, showing that specialist delivery capability can meet this buyer’s requirement without the scale of a large training provider.

## Notice

"Hack Yourself First" is all about building up defensive skills in software developers. It looks at security from the attacker's perspective and takes them through the steps necessary to exploit vulnerable software on the web so that they can experience hacking first hand. Workshop participants are set specific goals they must complete that involve probing for risks and then exploiting discrete vulnerabilities in a specially built vulnerable application. The interactive nature of the workshop means that multiple attack vectors are usually identified across the spectrum of participants and each person contributes their own unique perspective as to how specific risks are exploited. Method of Delivery Online/Virtual Course to start late November/early December 2026. Processed by SSCL

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/076785-2026 |
| Notice type | UK7 - Contract Details Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Direct |
| Procurement method details | Below threshold - without competition |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 12 Aug 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 12 Aug 2026 |
| Contract period | 13 Aug 2026 - 1 Sep 2027 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £22,000 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Complete |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Department for Work & Pensions |
| Locality | LONDON |
| Postcode area | South West London |
| Postcode | SW1H 9NA |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI3 Inner London - West |
| ITL 3 | TLI35 Westminster and City of London |
| Local authority | Westminster |
| Electoral ward | St James's |
| Westminster constituency | Cities of London and Westminster |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | PROGRESSION DEVELOPMENT LTD |

## CPV Codes

### Divisions

- 80 - Education and training services

### Codes

- 80511000 - Staff training services

## Release History

- 12 Aug 2026 at 13:39 - Award - UK7 - Contract Details Notice - https://www.find-tender.service.gov.uk/Notice/076785-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/076785-2026
  12th August 2026 - Contract details notice on Find a Tender

## Notice URLs

- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-06e29c. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-06e29c.json.