Award GB CF

Bug Bounty, Vulnerability Rewards and Vulnerability Disclosure Programme

MINISTRY OF DEFENCE

Stage: Award

the latest stage the buyer has published
Buyer: MINISTRY OF DEFENCE
Supplier: Hackerone Inc

named in the award notice
Value: £2.5M

net · GBP
Awarded: 16 Oct 2023

the award date on the notice
End date: 30 Apr 2025

expected
First published: 10 Jan 2024

last seen 10 Jan 2024

What the buyer published

The MOD's computer networks and systems support the nation's defence and are crucial both for daily business operations and mission-critical activities. Maintaining the security and integrity of The MOD's networks and systems is a matter of national security and requires the continuous identification and remediation of vulnerabilities that can be exploited by malicious cyber actors. To reduce the cyber risk the MOD has been working with the ethical hacking community to find vulnerabilities in the MOD's systems. This is being done in the forms of a Vulnerability Rewards Programme (VRP), Bug Bounty challenges, an in-person bug bounty and a supply chain Vulnerability Disclosure Programme (VDP).

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date 30 Apr 2025, expected

Why we call this Penetration testing

Judged against the rules we publish. How we decide.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.