---
title: "Penetration Testing/IT Health Checks 2026"
ocid: "ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "Driver and Vehicle Standards Agency"
published: "2026-09-17"
---

# Penetration Testing/IT Health Checks 2026

Buyer: Driver and Vehicle Standards Agency  
Current stage: Award  
OCID: ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf.json)

## Summary

The Driver and Vehicle Standards Agency (DVSA) procured computer audit and testing services covering penetration testing and IT health checks. The requirement was a call-off from the Cyber Security 3 framework (RM3764iii), for assessing and testing the agency’s information technology and cyber security arrangements. Services may be delivered across the United Kingdom, the Channel Islands, the Isle of Man, Europe, British Overseas Territories and other locations worldwide. This is a services contract rather than a goods supply or construction project. It is relevant to cyber security consultancies and technical testing providers with the capability to plan and carry out penetration tests and IT health checks for a UK government agency operating across a broad geographic area.

The procurement is complete and has been awarded through a selective call-off from a framework agreement. Bids had to be submitted by 29 May 2026 at 14:00. DVSA awarded the contract to Dionach Limited on 27 August 2026 for £533,333. The contract runs from 27 August 2026 to 26 August 2028. The published procurement value and awarded value are both £533,333. The process used the Cyber Security 3 framework, with no separate lots identified. The award record shows one active award and one supplier. The procurement was classified as computer audit and testing services, and the stated requirement was for penetration testing and IT health checks.

This award demonstrates established public-sector demand for penetration testing and IT health checks from DVSA, with work sourced through the Cyber Security 3 framework. A credible future competitor would need to provide both penetration testing and broader IT health-check capability, understand the assurance needs of a government agency, and deliver consistently across the United Kingdom and potentially overseas locations. The requirement was identified as suitable for small and medium-sized enterprises, so scale alone is not the defining barrier. Suppliers should be able to operate within a framework call-off route, manage a substantial multi-year cyber assurance engagement, and show the technical capacity, governance and delivery discipline needed for repeat testing and health-check work.

## Notice

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/0a7c52c6-2243-4e38-985b-656988d6fd5e |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | SME |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 17 Sep 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 27 Aug 2026 |
| Contract period | 27 Aug 2026 - 26 Aug 2028 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £533,333 |
| Lots value | Not specified |
| Awards value | £533,333 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Driver and Vehicle Standards Agency |
| Locality | BRISTOL |
| Postcode area | Bristol |
| Postcode | BS5 0DA |
| Country | England |
| ITL 1 | TLK South West (England) |
| ITL 2 | TLK5 West of England |
| ITL 3 | TLK51 Bristol, City of |
| Local authority | Bristol, City of |
| Electoral ward | Lawrence Hill |
| Westminster constituency | Bristol East |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Dionach Limited |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72800000 - Computer audit and testing services

## Release History

- 17 Sep 2026 at 09:11 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/0a7c52c6-2243-4e38-985b-656988d6fd5e

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/0a7c52c6-2243-4e38-985b-656988d6fd5e
  17th September 2026 - Awarded contract notice on Contracts Finder
- https://www.contractsfinder.service.gov.uk/Notice/Attachment/8c4cc67b-e254-467c-a0fd-1a3bef9eb7a4
  n/a

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-a8e4106b-c9ac-4a72-9965-5c7c996e74bf.json.