Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support – Provision Of An Intermediation Platform Of Independent Experts For Bug Bounty Services (Bug Bounty) And Vulnerability Disclosure Program (Vulnerability Disclosure Program)

It Services: Consulting, Software Development, Internet And Support – Provision Of An Intermediation Platform Of Independent Experts For Bug Bounty Services (Bug Bounty) And Vulnerability Disclosure Program (Vulnerability Disclosure Program). La Postes Anti-Cybercrime Service (Slcc) Wishes To Use A Saas Intermediation Platform Enabling The Management Of Bug Bounty And Vulnerability Disclosure Program (Vdp) Campaigns By Cybersecurity Researchers. The Platform In A Standard “Turnkey” Saas Mode. This Intermediation Platform Must Offer The Following Functionalities: -Creation And Management Of Independent Campaigns According To The La Poste Applications To Be Analyzed. A Campaign Is Characterized By A Technical Description Of The Scope To Be Tested (Urls Concerned, Exclusions). The Intermediation Platform Must Make It Possible To Call On Independent Cybersecurity Experts To Carry Out Tests On This Scope: These Are Private Campaigns. -Definition And Launch, Monitoring, Modification Or Complete Shutdown Of Current Campaigns. -Management Of The Relationship With Independent Cybersecurity Experts Registered With The Service Provider: -Invitations Of Independent Experts To Campaigns Carried Out With La Poste; -Processing Of Vulnerability Reports And Exchanges Relating To Reports Established By Independent Experts; -Possible Payments To Independent Experts Made According To The Criticality Of The Vulnerabilities Identified. -Provision Of Statistics On The Operation Of The Platform (Availability Rate), Customer Account Activity And On Each Campaign Independently. The Statistics Must Be Accessible From The Platform Itself Or Via A Specific Api Provided By The Service Provider. -Creation Of A Dashboard On Overall Activity For The Benefit Of La Poste From The Platform. -Export Of Vulnerability Reports From The Platform Or Via A Specific Api Provided By The Service Provider. -Creation Of A List Of Experts For Each Campaign. Where Applicable, Possibility From The Platform To Assign Access Identifiers To The La Poste Applications Concerned - Differentiated Access To The Platform By La Poste Program Administrators Independently Publishing Their Campaigns. -Establishment Of A Communication Channel Allowing The Collection Of Vulnerabilities, Outside Of The Bug Bounty Campaign, By Independent Cybersecurity Experts On La Poste Applications. The Services Will Also Include Technical Support On The Platform And Its Functionalities As Well As Functional Support In Order To Support La Poste In The Implementation And Management Of Bug Bounty Campaigns Through The Following Services: -Advice For Writing Campaigns -Recommendation Of Independent Experts According To The Relevance Of Their Work To Other Clients The Maximum Amount Of The Lot Is Set At 600,000 Euros Excluding Tax, Over The Total Duration Of The Contract, Renewal Periods Included. The Number Of Beneficiaries Is Set At 1. The Duration Of The Offer Is One Year.