2527 - The Provision of a Vulnerability Disclosure and Bug Bounty Program

An Post is seeking to engage a supplier capable of delivering a structured and secure vulnerability disclosure and bug bounty program. The objective is to enhance our cyber resilience and the security posture of An Post’s digital assets by enabling the identification and reporting of previously unknown vulnerabilities across systems, …

CPV: 72500000 Servizi informatici, 48000000 Pacchetti software e sistemi di informazione, 48517000 Pacchetti software IT, 48732000 Pacchetti software di sicurezza dei dati, 48731000 Pacchetti software di sicurezza dei file, 72260000 Servizi connessi al software, 72212730 Servizi di programmazione di software di sicurezza, 72212731 Servizi di programmazione di software di sicurezza dei file, 72000000 Servizi informatici: consulenza, sviluppo di software, Internet e supporto
Luogo di esecuzione:
2527 - The Provision of a Vulnerability Disclosure and Bug Bounty Program
Ente di assegnazione:
An Post_391
Numero di premio:
0

1. Buyer

1.1 Buyer

Official name : An Post_391
Legal type of the buyer : Body governed by public law
Activity of the contracting authority : General public services
Activity of the contracting entity : Postal services

2. Procedure

2.1 Procedure

Title : 2527 - The Provision of a Vulnerability Disclosure and Bug Bounty Program
Description : An Post is seeking to engage a supplier capable of delivering a structured and secure vulnerability disclosure and bug bounty program. The objective is to enhance our cyber resilience and the security posture of An Post’s digital assets by enabling the identification and reporting of previously unknown vulnerabilities across systems, platforms, and applications. Implementing a secure and ethical program will ensure vulnerabilities are identified and safeguard An Post data from future vulnerabilities. The Contract, the subject of this competition is a Contract for three (3) years with an option for one or more extensions by up to two (2) years, at AN POST’s discretion, up to a maximum duration of five (5) years subject to the terms and conditions of the Contract.
Procedure identifier : eafe9066-d653-4156-8e8f-91ee367736d9
Type of procedure : Negotiated with prior publication of a call for competition / competitive with negotiation

2.1.1 Purpose

Main nature of the contract : Services
Main classification ( cpv ): 72500000 Computer-related services
Additional classification ( cpv ): 48000000 Software package and information systems
Additional classification ( cpv ): 48517000 IT software package
Additional classification ( cpv ): 48732000 Data security software package
Additional classification ( cpv ): 48731000 File security software package
Additional classification ( cpv ): 72260000 Software-related services
Additional classification ( cpv ): 72212730 Security software development services
Additional classification ( cpv ): 72212731 File security software development services
Additional classification ( cpv ): 72000000 IT services: consulting, software development, Internet and support

2.1.2 Place of performance

Country subdivision (NUTS) : Dublin ( IE061 )
Country : Ireland

2.1.3 Value

Estimated value excluding VAT : 0 Euro

2.1.4 General information

Legal basis :
Directive 2014/25/EU

2.1.6 Grounds for exclusion

Sources of grounds for exclusion : Procurement Document

5. Lot

5.1 Lot technical ID : LOT-0001

Title : 2527 - The Provision of a Vulnerability Disclosure and Bug Bounty Program
Description : An Post is seeking to engage a supplier capable of delivering a structured and secure vulnerability disclosure and bug bounty program. The objective is to enhance our cyber resilience and the security posture of An Post’s digital assets by enabling the identification and reporting of previously unknown vulnerabilities across systems, platforms, and applications. Implementing a secure and ethical program will ensure vulnerabilities are identified and safeguard An Post data from future vulnerabilities. The Contract, the subject of this competition is a Contract for three (3) years with an option for one or more extensions by up to two (2) years, at AN POST’s discretion, up to a maximum duration of five (5) years subject to the terms and conditions of the Contract.
Internal identifier : 0

5.1.1 Purpose

Main nature of the contract : Services
Main classification ( cpv ): 72500000 Computer-related services
Additional classification ( cpv ): 48000000 Software package and information systems
Additional classification ( cpv ): 48517000 IT software package
Additional classification ( cpv ): 48732000 Data security software package
Additional classification ( cpv ): 48731000 File security software package
Additional classification ( cpv ): 72260000 Software-related services
Additional classification ( cpv ): 72212730 Security software development services
Additional classification ( cpv ): 72212731 File security software development services
Additional classification ( cpv ): 72000000 IT services: consulting, software development, Internet and support

5.1.2 Place of performance

Country subdivision (NUTS) : Dublin ( IE061 )
Country : Ireland
Additional information :

5.1.3 Estimated duration

Duration : 60 Month

5.1.5 Value

Estimated value excluding VAT : 0 Euro

5.1.6 General information

Reserved participation : Participation is not reserved.
Procurement Project not financed with EU Funds.
The procurement is covered by the Government Procurement Agreement (GPA) : yes

5.1.9 Selection criteria

Sources of selection criteria : Procurement Document

5.1.11 Procurement documents

Languages in which the procurement documents are officially available : English
Languages in which the procurement documents (or their parts) are unofficially available : English
Deadline for requesting additional information : 22/09/2025 12:00 +01:00

5.1.12 Terms of procurement

Terms of submission :
Electronic submission : Required
Languages in which tenders or requests to participate may be submitted : English
Electronic catalogue : Not allowed
Tenderers may submit more than one tender : Not allowed
Deadline for receipt of expressions of interest : 10/10/2025 12:00 +01:00
Terms of contract :
The execution of the contract must be performed within the framework of sheltered employment programmes : No

5.1.15 Techniques

Framework agreement :
No framework agreement
Information about the dynamic purchasing system :
No dynamic purchase system

5.1.16 Further information, mediation and review

Review organisation : The High Court of Ireland
Organisation providing additional information about the procurement procedure : An Post_391
Organisation providing offline access to the procurement documents : An Post_391
Organisation providing more information on the review procedures : The High Court of Ireland
Organisation receiving requests to participate : An Post_391
Organisation processing tenders : An Post_391

8. Organisations

8.1 ORG-0001

Official name : An Post_391
Registration number : 98788
Postal address : General Post Office
Town : Dublin 1
Postcode : D01 F5P2
Country subdivision (NUTS) : Dublin ( IE061 )
Country : Ireland
Telephone : +353 1 7057000
Internet address : https://www.anpost.com
Buyer profile : https://www.anpost.com
Roles of this organisation :
Buyer
Organisation providing additional information about the procurement procedure
Organisation providing offline access to the procurement documents
Organisation receiving requests to participate
Organisation processing tenders

8.1 ORG-0002

Official name : The High Court of Ireland
Registration number : The High Court of Ireland
Department : The High Court of Ireland
Postal address : Four Courts, Inns Quay, Dublin 7
Town : Dublin
Postcode : D07 WDX8
Country subdivision (NUTS) : Dublin ( IE061 )
Country : Ireland
Telephone : +353 1 8886000
Roles of this organisation :
Review organisation
Organisation providing more information on the review procedures

8.1 ORG-0003

Official name : European Dynamics S.A.
Registration number : 002024901000
Department : European Dynamics S.A.
Town : Athens
Postcode : 15125
Country subdivision (NUTS) : Βόρειος Τομέας Αθηνών ( EL301 )
Country : Greece
Telephone : +30 2108094500
Roles of this organisation :
TED eSender

Notice information

Notice identifier/version : 83539137-9eda-4795-a67b-b8214e647038 - 01
Form type : Competition
Notice type : Prior information notice or a periodic indicative notice used as a call for competition – standard regime
Notice dispatch date : 08/09/2025 14:04 +01:00
Languages in which this notice is officially available : English
Notice publication number : 00590755-2025
OJ S issue number : 173/2025
Publication date : 10/09/2025