---
title: "Penetration Testing/IT Health Checks 2026"
ocid: "ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97"
markdown_url: "https://d3tenders.com/contract/ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97.md"
json_url: "https://d3tenders.com/contract/ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97.json"
source: "Contracts Finder"
current_stage: "Award"
buyer: "Driver and Vehicle Standards Agency"
published: "2026-09-17"
---

# Penetration Testing/IT Health Checks 2026

Buyer: Driver and Vehicle Standards Agency  
Current stage: Award  
OCID: ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97.json)

## Summary

The Driver and Vehicle Standards Agency (DVSA) procured penetration testing and IT health-check services. The requirement covers computer audit and testing services, supporting the agency’s need to assess the security of its information technology. Delivery may take place across the United Kingdom, Europe, the Channel Islands, the Isle of Man, British Overseas Territories and elsewhere internationally. This is a services procurement rather than a goods or construction opportunity. The work is relevant to cyber-security consultancies and specialist information-security providers able to carry out penetration tests and IT health checks for a public-sector organisation operating across a broad geographic footprint. The procurement was suitable for small and medium-sized enterprises, so businesses of that scale were within the intended supplier market.

This procurement has been awarded following a selective call-off from the Crown Commercial Service Cyber Security 3 framework, RM3764iii. The tender deadline was 29 May 2026 at 2pm. Dionach Limited was awarded the contract on 27 August 2026 for £533,333, with the contract running from 27 August 2026 to 26 August 2028. The procurement is complete and the award is active. Evaluation was conducted through the framework call-off process. The requirement was treated as a single service package for penetration testing and IT health checks. The award value is the value reported for this procurement and should not be interpreted as a wider framework value. The selected supplier is a large organisation.

For suppliers that did not win, this award is a clear example of DVSA’s demand for externally delivered cyber-security assurance: penetration testing and IT health checks procured through the RM3764iii Cyber Security 3 framework. A credible competitor for this requirement when it next reaches the market would need specialist capability in computer security testing, the capacity to deliver repeatable assessments for a public-sector buyer, and the operational reach to support work across the UK and potentially other international locations. The opportunity was expressly suitable for SMEs, indicating that smaller specialist cyber-security firms can be relevant where they can demonstrate sufficient delivery capacity and dependable service management. Framework access and experience using call-off procedures would also be important for competing through the same route.

## Notice

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Contracts Finder |
| Latest notice | https://www.contractsfinder.service.gov.uk/Notice/0c3c409c-52dc-4e4e-9c06-455e96b78902 |
| Notice type | Award Notice |
| Procurement type | Framework |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Call-off from a framework agreement |
| Tender suitability | SME |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 17 Sep 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | 27 Aug 2026 |
| Contract period | 27 Aug 2026 - 26 Aug 2028 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £533,333 |
| Lots value | Not specified |
| Awards value | £533,333 |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Not specified |
| Awards status | Active |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Driver and Vehicle Standards Agency |
| Locality | BRISTOL |
| Postcode area | Bristol |
| Postcode | BS5 0DA |
| Country | England |
| ITL 1 | TLK South West (England) |
| ITL 2 | TLK5 West of England |
| ITL 3 | TLK51 Bristol, City of |
| Local authority | Bristol, City of |
| Electoral ward | Lawrence Hill |
| Westminster constituency | Bristol East |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Dionach Limited |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72800000 - Computer audit and testing services

## Release History

- 17 Sep 2026 at 09:03 - Award - Award Notice - https://www.contractsfinder.service.gov.uk/Notice/0c3c409c-52dc-4e4e-9c06-455e96b78902

## Documents

- https://www.contractsfinder.service.gov.uk/Notice/0c3c409c-52dc-4e4e-9c06-455e96b78902
  17th September 2026 - Awarded contract notice on Contracts Finder

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-b5fd17-aa51f2f6-c71b-4fc6-91e5-2b530e4a5c97.json.