# Provision of Vulnerability Reporting Service Triage

> A sourced UK public-sector contract award published by Crown Commercial Service.

## Key facts

- Public buyer: [Crown Commercial Service](/buyers/crown-commercial-service/contract-awards)
- Contract winner: [NCC GROUP SECURITY SERVICES LIMITED](/contract-winners/ncc-group-security-services/public-sector-contract-awards)
- Award value: £1,417,200
- Tender value: £1,417,200
- Award date: 30 January 2026
- Published: 10 February 2026
- Contract start: 1 April 2026
- Contract end: 31 March 2027
- Stage: awarded
- Procurement category: services
- Notice ID: 40f52a9a-7aba-46f3-b7af-2766853f5693-876540
- OCID: ocds-b5fd17-3949f282-6570-416c-af00-d6fbd0557853

## Description

This Procurement will establish a single Supplier Contract for the purchase of Vulnerability Reporting Service Triage Provider\. The chosen provider will acknowledge every vulnerability report received, handle all communication with the reporter of the vulnerability and perform a vulnerability triage culimnating in the production of a report\.

## Related contract awards

- [Construction Professional Services](/contracts/ocds-b5fd17-ef9d53d6-d412-4bf4-a5cc-856df493e69d): Crown Commercial Service
- [Spark - The Technology Innovation Marketplace](/contracts/ocds-b5fd17-86deb6aa-1381-4aff-a471-38d360ed6f6d): Crown Commercial Service
- [Audit and Assurance Services Two \(A&AS2\)](/contracts/ocds-b5fd17-134ddb7b-5d67-4256-819f-96af62f09e23): Crown Commercial Service
- [Provision of Phishing Tooling Solution](/contracts/ocds-b5fd17-ec0740c8-0458-4bd1-98dc-b1c961c422f8): Government Commercial Agency
- [Penetration Testing Services](/contracts/ocds-b5fd17-df37e029-9384-4c15-aaa9-f98aff770005): FCA
- [Red Team testing](/contracts/ocds-b5fd17-ab0aad93-3c9f-4f36-9724-d458cbbb9b1d): The Crown Estate

## Source

[View the original notice on Contracts Finder](https://www.contractsfinder.service.gov.uk/Notice/40f52a9a-7aba-46f3-b7af-2766853f5693-876540)