Keep them on file. (Score 2)

We believe that it is possible for the average innocent person to have information about a security hole or breach in a computer system.

The biggest reason why the average person doesn't pass this valuable information along to the administrator of the system is fear of persecution.

It is a valid fear.

As far as the account, I would thank them for allowing you to bid, and make sure that they know how to get in touch with the person who was assigned as their contact should they require your services at a later date.

As far as the vulnerabilities, I would let them know anonymously if the problem remains for more than a few days after the other company has finished.

Mark A.