This public procurement record has 1 release in its history.

Award

09 Oct 2026 at 08:47

Summary of the contracting process

The Driver and Vehicle Standards Agency (DVSA) procured penetration testing and IT health checks to support its cyber security. This is a specialist IT security and computer audit service, intended to assess systems for weaknesses and check their security. DVSA is based in Bristol. The procurement has one requirement, rather than separate service lots, and the work is associated with the UK. The notice describes the purpose as cyber security but does not give a more detailed breakdown of systems, testing methods or deliverables. The selected supplier is recorded as Driver and Vehicle Standards Agency, the same name as the buyer, so the published outcome identifies no separate commercial supplier.

The procurement is complete and a contract has been awarded. DVSA used a call-off from the Crown Commercial Service Cyber Security 3 framework (RM3764iii), through a limited procedure without a separately published competition. The award is dated 29 May 2026 and the contract was signed on that date. Its value is £533,333.33. The award is recorded against the sole lot, although that lot is marked cancelled; the award itself is active. Price was the stated award criterion, and 18 bids were recorded for the lot. The contract is active. No contract period is stated in the published details, so the end of the term cannot be established from this outcome.

For cyber security suppliers, this outcome shows DVSA’s demand for penetration testing and IT health checks as part of its wider cyber security work, procured through the CCS Cyber Security 3 framework. A credible competitor would need to deliver specialist security testing and health checks and compete on price; the recorded evaluation basis was price. The volume of bids indicates that this framework call-off attracted substantial supplier interest. The named award recipient is DVSA itself, rather than a clearly identified external security provider, so the published outcome does not establish which commercial supplier delivered the work or what technical credentials, certifications, team size or testing methods were required. Suppliers considering similar DVSA requirements should therefore focus on demonstrating relevant testing capability and value through the framework route, rather than assuming specific accreditation or delivery conditions from this award.

How relevant is this notice?

Notice Information

Notice Title

Penetration testing/IT Health Checks 2026

Notice Description

THIS NOTICE IS FOR TRANSPARANCY PURPOSES ONLY. THIS IS BEING PROCURED BY THE DVSA FOR CYBER SECURITY PURPOSES.

Lot Information

Lot 1

THIS NOTICE IS FOR TRANSPARANCY PURPOSES ONLY. THIS IS BEING PROCURED BY THE DVSA FOR CYBER SECURITY PURPOSES.

Procurement Information

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

Notice Details

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-078448
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/095457-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
Award Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Limited
Procurement Method Details
Award procedure without prior publication of a call for competition
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

72 - IT services: consulting, software development, Internet and support


CPV Codes

72800000 - Computer audit and testing services

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
Not specified
Contracts Value
£533,333 £500K-£1M

Notice Dates

Publication Date
9 Oct 20262 weeks ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
Not specified
Contract Period
Not specified - Not specified
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Cancelled
Awards Status
Active
Contracts Status
Active

Buyer & Supplier

Contracting Authority (Buyer)

Main Buyer
Driver and Vehicle Standards Agency
Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
BRISTOL
Postcode
BS5 0DA
Postcode Area
Bristol
Country
England

Major Region (ITL 1)
TLK South West (England)
Basic Region (ITL 2)
TLK5 West of England
Small Region (ITL 3)
TLK51 Bristol, City of
Delivery Location
Not specified

Local Authority
Bristol, City of
Electoral Ward
Lawrence Hill
Westminster Constituency
Bristol East

Supplier Information

Number of Suppliers
1
Supplier Name

Driver and Vehicle Standards Angency

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

Loading OCDS record...