---
title: "Penetration Testing Services 2026-2030"
ocid: "ocds-h6vhtk-067639"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-067639"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-067639.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-067639.json"
source: "Find A Tender Service"
current_stage: "Planning"
buyer: "NHS ENGLAND"
published: "2026-03-27"
---

# Penetration Testing Services 2026-2030

Buyer: NHS ENGLAND  
Current stage: Planning  
OCID: ocds-h6vhtk-067639

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-067639)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-067639.json)

## Summary

NHS England has initiated the planning phase for the procurement of Penetration Testing Services, set to cover the period from 2026 to 2030. This tender, titled "Penetration Testing Services 2026-2030," falls within the services sector, specifically targeting computer-related professional services. The procurement process is backed by the Crown Commercial Services' Cyber Security Services 3 Dynamic Purchasing System (DPS) as its legal and procurement framework. The contract is structured as a 4-year call-off arrangement with potential extensions, with an estimated value of £6,000,000 to £7,200,000. The commencement date for service is planned for 28th October 2026, with NHS England operating from their headquarters at Wellington House in London, UK, and the call for procurement being announced on the 27th of March 2026. The procurement method is selective, ensuring that pre-qualified suppliers will be considered.

This tender presents significant opportunities for businesses that specialise in penetration testing and cyber security solutions. It is particularly well-suited for small and medium enterprises (SMEs), as indicated by the suitability criteria. Businesses that can deliver comprehensive, high-quality penetration testing services and have experience working in highly regulated environments like the NHS will find this tender particularly advantageous. Engaging with this procurement process not only offers potential financial gain but also the prestige of partnering with a prominent national healthcare entity, paving the way for future opportunities within the public sector.

## Notice

This requirement is for new procurement for the provision of Penetration testing for a 4 year call off contract (2+1+1). The procurement route is Crown Commercial Services' Cyber Security Services 3 Dynamic Purchasing System (DPS) - Ref RM3764. Penetration testing is required throughout various programmes, systems and services across NHS England and the wider NHS.

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/028400-2026 |
| Notice type | UK1 - Pipeline Notice |
| Procurement type | Dynamic |
| Procurement category | Services |
| Procurement method | Selective |
| Procurement method details | Using pre-Procurement Act commercial tool |
| Tender suitability | SME |
| Awardee scale | Not specified |
| All stages | Planning |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 27 Mar 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | 28 Oct 2026 - 27 Oct 2028 |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | £6,000,000 |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | Not specified |

## Status

| Field | Value |
| --- | --- |
| Tender status | Planned |
| Lots status | Planned |
| Awards status | Not specified |
| Contracts status | Not specified |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | NHS ENGLAND |
| Locality | LONDON |
| Post town | South East London |
| Postcode | SE1 8UG |
| Country | England |
| ITL 1 | TLI London |
| ITL 2 | TLI4 Inner London - East |
| ITL 3 | TLI45 Lambeth |
| Local authority | Lambeth |
| Electoral ward | Waterloo & South Bank |
| Westminster constituency | Vauxhall and Camberwell Green |
| Delivery location | Not specified |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72590000 - Computer-related professional services

## Release History

- 27 Mar 2026 at 11:04 - Planning - UK1 - Pipeline Notice - https://www.find-tender.service.gov.uk/Notice/028400-2026

## Documents

- https://www.find-tender.service.gov.uk/Notice/028400-2026
  27th March 2026 - Pipeline notice on Find a Tender

## Notice URLs

- https://www.england.nhs.uk/
- https://www.legislation.gov.uk/ukpga/2023/54/contents

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-067639. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-067639.json.