Awarded contract

Provision of Vulnerability Reporting Service Triage

Details

Buyer: Crown Commercial Service
Supplier(s): NCC Group Security Services Limited
Value: £1,417,200
Duration: 1 year
Topic: Operating systems
Published: 10 February 2026
Source: uk:contracts_finder

Tender description

This Procurement will establish a single Supplier Contract for the purchase of Vulnerability Reporting Service Triage Provider. The chosen provider will acknowledge every vulnerability report received, handle all communication with the reporter of the vulnerability and perform a vulnerability triage culimnating in the production of a report.

Timeline

Completed: Award published10 February 2026
Current notice
Completed: Award date1 April 2026
Next: Contract expiry date31 March 2027in 5 months

About the buyer

The Government Commercial Agency (CCS) is the UK's central buying body, renamed from the Crown Commercial Service in April 2026. As CCS, it ran national buying agreements for public and non-profit bodies across the UK. Government departments and local authorities drew on it as a shared procurement route. Buyers reached suppliers through frameworks, dynamic purchasing systems, dynamic markets and catalogues. Suppliers paid a commission on sales rather than a fee to join.

Over the past 5 years, most of CCS's contract awards have been in business services, IT services and software and information systems.

Decision makers

Connect with the people behind this procurement.

Job title	Phone number	Work email
Head of Procurement	+44 •••• ••••••	••••••••@crown-commercial-service.gov
Commercial Director	+44 •••• ••••••	••••••••@crown-commercial-service.gov
Procurement Manager	+44 •••• ••••••	••••••••@crown-commercial-service.gov
Category Lead	+44 •••• ••••••	••••••••@crown-commercial-service.gov
Senior Buyer	+44 •••• ••••••	••••••••@crown-commercial-service.gov
Contracts Manager	+44 •••• ••••••	••••••••@crown-commercial-service.gov