Bug bounty program services

Summary

The tender concerns a framework agreement for bug bounty program services and vulnerability disclosure services supporting the security of the German EUDI Wallet ecosystem. The provider must run a public bug bounty programme on its own platform, manage a community of security researchers, and handle submission intake, triage, researcher management and bounty payout administration. The notice says the exact qualification, exclusion and compliance requirements must be checked in the tender documents.