PublizoomAward notice Services
Bug Bounty Program Services
- Public buyer
- SPRIND GmbH
Leipzig - Place of performance
- Leipzig
- Estimated value
- €1,600,000 excl. VAT
- Amount awarded
- €1,600,000 excl. VAT
- Planned end of contract
- 7 August 2027
likely re-tender around February 2027 - Bids received
- 4
- Form
- Framework agreement
Multi-year contract: the buyer places orders as needs arise. - Procedure
- Open procedure
Any company may submit a bid. - Publication
- 1 September 2026
- Notice language
- English
AI analysis: go for it or not?
Summary in English, criteria, documents to provide and a GO / NO GO verdict in one minute.
Unlimited analyses during the 14-day Pro trial, no card needed.
Description
SPRIND GmbH intends to award a framework agreement for the provision of a bug bounty program and vulnerability disclosure services supporting the security of the German EU Digital Identity (EUDI) Wallet ecosystem. The bug bounty platform provider will operate a public bug bounty program on its own plat-form, attract and manage a qualified community of security researchers, and deliver end to end services from submission intake and vulnerability triage to researcher management and bounty payout administration. The agreement is aimed at experienced providers with a proven track record in running large scale bug bounty programmes, especially for public sector bodies or operators of critical infrastructure.
Further information on the scope of services can be found in the service description (Annex B of Part C framework agreement).
Awarded to
- HackerOne Inc. BCE/KBO 0941.045.401
CPV codes
European codes that classify what the contract is about. They are how we find the tenders for your trade.
72222300 72200000
Winning prices for comparable contracts
- A quarter below
- €22,254
- Median
- €328,266
- A quarter above
- €1,539,393
Amounts awarded (excl. VAT) over the last 3 years for 15 contracts in the same CPV group (7222…), excluding framework agreements. Half of the contracts fall between the two quartiles. TED source: mostly contracts above the EU thresholds, so amounts tend to be high.
Similar contracts already awarded
| Contract | Winner | Amount |
|---|---|---|
| Übernahme der fachlichen Programmleitung des Programms P20 Bundesrepublik Deutschland, vertreten durch das Bundesministerium des Innern, vertreten durch das Beschaffungsamt des BMI · 21 October 2026 |
Gerald Eder Beratung | – |
| Betriebswirtschaftliches Monitoring für die Hessischen Inklusionsbetriebe, LWV Hessen Landeswohlfahrtsverband Hessen - Zentrale Vergabestelle · 19 October 2026 |
FAF gGmbH | – |
| Digitalisierungsstrategie Parkraumbewirtschaftung Parkraumgesellschaft Baden-Württemberg mbH · 13 October 2026 |
MHP Management- und IT-Beratung GmbH | – |
| Netzwerkservice 2026 Medizinischer Dienst Baden-Württemberg · 1 October 2026 |
TechniData TCC Products GmbH Controlware GmbH |
– |
| Transfer auf XFT Add-on Suite 4S4 GFZ Helmholtz-Zentrum für Geoforschung · 24 September 2026 |
GISA GmbH | €233,500 |
Source : TED – Office des publications de l'Union européenne © Union européenne, données retraitées. Reference 600540-2026.