---
title: "Provision of IT Penetration Testing (NCSC CHECK)"
ocid: "ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "Intellectual Property Office"
published: "2026-08-27"
---

# Provision of IT Penetration Testing (NCSC CHECK)

Buyer: Intellectual Property Office  
Current stage: Award  
OCID: ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08.json)

## Summary

The Intellectual Property Office bought IT penetration testing services from a qualified and experienced supplier accredited under the NCSC CHECK scheme. The work supports security testing of the IPO’s information technology and related systems, covering consulting, software, internet and support services. Delivery is associated with the IPO’s premises on Cardiff Road in Newport, United Kingdom. The requirement is categorised as a services contract and was intended to suit small and medium-sized enterprises. The selected supplier was Salus Digital Security Limited, an SME based in Birmingham. This is a focused cyber-security requirement for providers able to deliver formal penetration testing to CHECK standards for a UK public-sector organisation.

The procurement is complete and has been awarded. It used a selective procedure as a call-off from a framework agreement. The tender submission deadline was 24 June 2026 at 11:00. The contract was awarded to Salus Digital Security Limited on 10 August 2026 for £1,337,500. The contract period runs from 17 August 2026 to 16 August 2030. The award covers the IPO’s penetration testing requirement as a single procurement. The process was evaluated through the framework call-off arrangements; the published information identifies the service scope and CHECK accreditation requirement, but does not set out individual scoring criteria. The contract remains active for its stated period.

This award demonstrates sustained public-sector demand for accredited penetration testing within the Intellectual Property Office and provides a clear benchmark for future competition. Credible competitors would need current NCSC CHECK accreditation, experienced penetration testers and the technical capability to assess the IPO’s information systems thoroughly and report findings in a way suitable for public-sector assurance and remediation. Familiarity with framework call-off routes would be important, since this requirement was bought through a framework rather than an open standalone tender. The opportunity is suitable for an SME-scale cyber-security provider with enough specialist staff, quality controls and delivery capacity to support a substantial, multi-year testing programme for one central government organisation.

## Notice

Contract for a qualified and experienced supplier to provide CHECK accredited penetration testing services to the IPO.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/747e0208-e6d0-470a-8299-e756de657547 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | SME |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 27 Aug 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 10 Aug 2026 |
| Contract period | 17 Aug 2026 - 16 Aug 2030 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | £1,337,500 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Intellectual Property Office |
| Locality | NEWPORT |
| Postcode area | Newport |
| Postcode | NP10 8QQ |
| Country | Wales |
| ITL 1 | TLL Wales |
| ITL 2 | TLL5 South East Wales |
| ITL 3 | TLL54 Monmouthshire and Newport |
| Local authority | Newport |
| Electoral ward | Tredegar Park and Marshfield |
| Westminster constituency | Newport West and Islwyn |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Salus Digital Security Limited |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72000000 - IT services: consulting, software development, Internet and support

## Release History

- 27 Aug 2026 at 11:12 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/747e0208-e6d0-470a-8299-e756de657547

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/747e0208-e6d0-470a-8299-e756de657547
  27th August 2026 - Awarded contract notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/094dc62c-900d-437f-a4be-b1f170f911da
  C4305 RM3764.3-DPS-Schedule-6-Order-Form-Template-and-Order-Schedules-v3 FINAL - REDACTED

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-7bd80455-fcaf-4c78-a3b5-a8b2de784c08.json.