Skip to content
SkimSkim home
In deliveryIrelandServices€0Add to pipeline

2527 - The Provision of a Vulnerability Disclosure and Bug Bounty Program

Awarded to YesWeHack

An Post_391(buyer)

Published
Published 10 September 2025

Tender documents

Skim pulls every file the buyer attaches to this process and extracts the requirements from it.

Documents as they publish

Specification, evaluation criteria, pricing schedules and every requirement — extracted, searchable and mapped to your response.

View tender files

Overview

An Post has awarded a three-year contract (with options to extend up to two additional years) to YesWeHack for the provision of a vulnerability disclosure and bug bounty program. The program will enhance An Post's cyber resilience by enabling structured identification and reporting of previously unknown vulnerabilities across systems, platforms, and applications.

Contracting authority

Find the key decision makers

The people who scope, score and sign this contract — names, roles and how to reach them.

What this covers

  • 2527 - The Provision of a Vulnerability Disclosure and Bug Bounty Program

    An Post is seeking to engage a supplier capable of delivering a structured and secure vulnerability disclosure and bug bounty program. The objective is to enhance our cyber resilience and the security posture of An Post’s digital assets by enabling the identification and reporting of previously unknown vulnerabilities across systems, platforms, and applications. Implementing a secure and ethical program will ensure vulnerabilities are identified and safeguard An Post data from future vulnerabilities. The Contract, the subject of this competition is a Contract for three (3) years with an option for one or more extensions by up to two (2) years, at AN POST’s discretion, up to a maximum duration of five (5) years subject to the terms and conditions of the Contract.

    €0Won by YesWeHack

Key details

Country
Ireland
Status
In delivery
Category
Services
Estimated value
€0
Procedure
Limited
Published
10 September 2025
Classification (CPV)
Software package and information systemsIT software packageFile security software packageData security software packageIT services: consulting, software development, Internet and supportSecurity software development servicesFile security software development servicesSoftware-related services+1 more

Award outcome

Awarded value
€0
Award date
9 June 2026
Contract period
— → 14 May 2031
Winner
  • YesWeHack

Contract ending soon? Skim tracks incumbents and flags recompetes early. Start for Free to set up alerts.

Notice history

Every published notice in this contracting process, newest first.

  1. Contract Award Notice

    11 June 2026

  2. Contract Notice

    10 September 2025

Get the full picture

AI analysis, bid scoring, and expert strategy for this tender

Skim analyses every tender against your company profile and tells you whether to bid, how to win, and who you are up against.

How to win this tender

Skim reads the notice and every document attached to it, scores the fit against your company profile for a clear bid or no-bid call, then drafts each answer from your own evidence and past bids. You review, refine and submit — on time, with every requirement covered.

See exactly how Skim’s agents do this →

Comparing platforms? Skim is set against the alternatives for pre-tender intelligence, tender management software and bid management software.

Find tenders like this before your competitors do.

Skim scans every portal daily and scores each tender against your profile. Start for free and see the tenders you are missing.