Award notice Services
Project "OpenJS: AI Vulnerability Disclosure"
- Public buyer
- Sovereign Tech Agency GmbH
Berlin - Place of performance
- Berlin
- Procedure
- Negotiated procedure without prior publication
The buyer consulted a few companies directly: it is no longer possible to take part. - Publication
- 18 September 2026
- Notice language
- English
AI analysis: go for it or not?
Summary in English, criteria, documents to provide and a GO / NO GO verdict in one minute.
Unlimited analyses during the 14-day Pro trial, no card needed.
Description
The contract concerns the project OpenJS: AI Vulnerability Disclosure, which covers research into how Node.js handles reports of security flaws now that artificial intelligence finds those flaws faster and in greater numbers. As part of four work packages, the contract covers rules and tooling for deciding which reports can be handled in public, a pilot that tests this on Node.js, a comparison of the results with the project's past record, and published guidance for other projects. The aim of this service is to keep security fixes for Node.js fast and reliable, and to give other open source projects a tested way to do the same.
CPV codes
European codes that classify what the contract is about. They are how we find the tenders for your trade.
73000000
Winning prices for comparable contracts
- A quarter below
- €168,067
- Median
- €266,212
- A quarter above
- €728,856
Amounts awarded (excl. VAT) over the last 3 years for 64 contracts in the same CPV group (7300…), excluding framework agreements. Half of the contracts fall between the two quartiles. TED source: mostly contracts above the EU thresholds, so amounts tend to be high.
Similar contracts already awarded
Source : TED – Office des publications de l'Union européenne © Union européenne, données retraitées. Reference 645014-2026.