2527 - The Provision of a Vulnerability Disclosure and Bug Bounty Program

Official summary

What is being procured?

An Post is seeking to engage a supplier capable of delivering a structured and secure vulnerability disclosure and bug bounty program. The objective is to enhance our cyber resilience and the security posture of An Post’s digital assets by enabling the identification and reporting of previously unknown vulnerabilities across systems, platforms, and applications. Implementing a secure and ethical program will ensure vulnerabilities are identified and safeguard An Post data from future vulnerabilities. The Contract, the subject of this competition is a Contract for three (3) years with an option for one or more extensions by up to two (2) years, at AN POST’s discretion, up to a maximum duration of five (5) years subject to the terms and conditions of the Contract.