Supplies - 457976-2018

19/10/2018    S202

Belgium-Brussels: Open Source Software Audits via Bug Bounties for the EU Institutions (OSS-BB)

2018/S 202-457976

Contract award notice

Results of the procurement procedure

Supplies

Legal Basis:
Regulation (EU, Euratom) No 966/2012

Section I: Contracting authority

I.1)Name and addresses
Official name: European Commission, Directorate-General for Informatics, Directorate A: Strategy and Ressources, Unit A3: ICT Procurement and Contracts
Postal address: rue Montoyer 15
Town: Brussels
NUTS code: BE100 Arr. de Bruxelles-Capitale / Arr. van Brussel-Hoofdstad
Postal code: 1049
Country: Belgium
Contact person: DIGIT Contracts Info Centre
E-mail: digit-contracts-info-centre@ec.europa.eu
Telephone: +32 229-60762
Fax: +32 229-57702
Internet address(es):
Main address: https://ec.europa.eu/info/departments/informatics_en
Address of the buyer profile: https://ec.europa.eu/info/funding-tenders/tender-opportunities-department/informatics-tenders-and-contracts_en
I.4)Type of the contracting authority
European institution/agency or international organisation
I.5)Main activity
General public services

Section II: Object

II.1)Scope of the procurement
II.1.1)Title:

Open Source Software Audits via Bug Bounties for the EU Institutions (OSS-BB)

Reference number: DIGIT/A3/PO/2017/037
II.1.2)Main CPV code
72260000 Software-related services
II.1.3)Type of contract
Supplies
II.1.4)Short description:

Open source software audits via bug bounties for the EU Institutions see procurement documents at https://etendering.ted.europa.eu/cft/cft-display.html?cftId=3375

II.1.6)Information about lots
This contract is divided into lots: no
II.1.7)Total value of the procurement (excluding VAT)
Value excluding VAT: 1 748 000.00 EUR
II.2)Description
II.2.3)Place of performance
NUTS code: BE100 Arr. de Bruxelles-Capitale / Arr. van Brussel-Hoofdstad
NUTS code: LU000 Luxembourg
II.2.4)Description of the procurement:

Open source software audits via Bug Bounties for the EU Institutions see procurement documents at https://etendering.ted.europa.eu/cft/cft-display.html?cftId=3375

II.2.5)Award criteria
Quality criterion - Name: All quality criteria are stated in the procurement documents / Weighting: 60
Price - Weighting: 40
II.2.11)Information about options
Options: no
II.2.13)Information about European Union funds
The procurement is related to a project and/or programme financed by European Union funds: yes
Identification of the project:

Preparatory action "Governance and quality of software code - Auditing of free andopen-source software" (budget line 26 03 77 06)

II.2.14)Additional information

Section IV: Procedure

IV.1)Description
IV.1.1)Type of procedure
Open procedure
IV.1.3)Information about a framework agreement or a dynamic purchasing system
The procurement involves the establishment of a framework agreement
IV.1.8)Information about the Government Procurement Agreement (GPA)
The procurement is covered by the Government Procurement Agreement: yes
IV.2)Administrative information
IV.2.1)Previous publication concerning this procedure
Notice number in the OJ S: 2018/S 073-161072
IV.2.8)Information about termination of dynamic purchasing system
IV.2.9)Information about termination of call for competition in the form of a prior information notice

Section V: Award of contract

Contract No: DI-07740
Title:

Open Source Software Audits via Bug Bounties for the EU Institutions

A contract/lot is awarded: yes
V.2)Award of contract
V.2.1)Date of conclusion of the contract:
02/10/2018
V.2.2)Information about tenders
Number of tenders received: 5
The contract has been awarded to a group of economic operators: no
V.2.3)Name and address of the contractor
Official name: Intigriti NV
National registration number: BE0660623646
Postal address: Parklaan 113 bus 8
Town: Aalst
NUTS code: BE231 Arr. Aalst
Postal code: 9300
Country: Belgium
The contractor is an SME: yes
V.2.4)Information on value of the contract/lot (excluding VAT)
Total value of the contract/lot: 1 748 000.00 EUR
V.2.5)Information about subcontracting
The contract is likely to be subcontracted
Value or proportion likely to be subcontracted to third parties
Proportion: 19 %

Section V: Award of contract

Contract No: DI-07741
Title:

Open Source Software Audits via Bug Bounties for the EU Institutions

A contract/lot is awarded: yes
V.2)Award of contract
V.2.1)Date of conclusion of the contract:
02/10/2018
V.2.2)Information about tenders
Number of tenders received: 5
The contract has been awarded to a group of economic operators: no
V.2.3)Name and address of the contractor
Official name: Hackerone Inc.
Postal address: 300 Montgomery St
Town: San Francisco
NUTS code: 00 Not specified
Postal code: 94104
Country: United States
The contractor is an SME: yes
V.2.4)Information on value of the contract/lot (excluding VAT)
Total value of the contract/lot: 1 748 000.00 EUR
V.2.5)Information about subcontracting

Section V: Award of contract

Contract No: DI-07742
Title:

Open Source Software audits via Bug Bounties for the EU Institutions

A contract/lot is awarded: yes
V.2)Award of contract
V.2.1)Date of conclusion of the contract:
02/10/2018
V.2.2)Information about tenders
Number of tenders received: 5
The contract has been awarded to a group of economic operators: yes
V.2.3)Name and address of the contractor
Official name: Econocom Digital Security SAS
National registration number: FR30 810 570 515
Postal address: 50 avenue Daumesnil
Town: Paris
NUTS code: FR101 Paris
Postal code: 75012
Country: France
The contractor is an SME: yes
V.2.3)Name and address of the contractor
Official name: Yes We Hack SAS
National registration number: FR78 814037214
Postal address: 14 rue Charles V
Town: Paris
NUTS code: FR101 Paris
Postal code: 75004
Country: France
The contractor is an SME: yes
V.2.4)Information on value of the contract/lot (excluding VAT)
Total value of the contract/lot: 1 748 000.00 EUR
V.2.5)Information about subcontracting

Section VI: Complementary information

VI.3)Additional information:

See procurement documents at https://etendering.ted.europa.eu/cft/cft-display.html?cftId=3375

Deloitte consulting and advisory (statutory registration number: 047 4.429.572, address: Gateway Office, Luchthaven Nationaal 1J, 1930 Zaventem, Belgium, VAT: BE0474.429.572) became jointly liable for the performance of Framework Contract DI-07740 in accordance with Article 146(5) of Commission Delegated Regulation (EU) No. 1268/2012 of 29.10.2012 on the rules of application of Regulation (EU, Euratom) No. 966/2012 of the European Parliament and of the Council on the financial rules applicable to the general budget of the Union, as amended, by way of co-signing the contract.

VI.4)Procedures for review
VI.4.1)Review body
Official name: General Court of the European Union
Postal address: rue du Fort Niedergrünewald
Town: Luxembourg
Postal code: 2925
Country: Luxembourg
E-mail: generalcourt.registry@curia.europa.eu
Telephone: +352 4303-1
Fax: +352 4303-2100
Internet address: http://curia.europa.eu
VI.4.3)Review procedure
Precise information on deadline(s) for review procedures:

Precise information on deadline(s) for review procedures:

Within 2 months of the notification to the plaintiff or, in absence thereof, of the day on which it came to the knowledge of the plaintiff an action for annulment could be launched. Any request made and any reply from the Contracting Authority, or any complaint for maladministration, will have neither the purpose nor the effect of suspending the time-limit for launching an action for annulment or to open a new period for launching an action for annulment. The body responsible for hearing annulment procedures is indicated in Section VI.4.1.

VI.5)Date of dispatch of this notice:
12/10/2018