---
title: "Penetration testing/IT Health Checks 2026"
ocid: "ocds-h6vhtk-077739"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-077739"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-077739.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-077739.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "Driver and Vehicle Standards Agency"
published: "2026-09-22"
---

# Penetration testing/IT Health Checks 2026

Buyer: Driver and Vehicle Standards Agency  
Current stage: Award  
OCID: ocds-h6vhtk-077739

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-077739)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-077739.json)

## Summary

The Driver and Vehicle Standards Agency (DVSA) procured computer audit and testing services for cyber-security purposes, specifically penetration testing and IT Health Checks. The work covers DVSA’s information-technology security requirements across the UK. The procurement is a services contract and was arranged as a call-off from the Crown Commercial Service Cyber Security 3 framework, RM3764iii. The published scope is brief, but identifies cyber-security testing as the purpose and the DVSA as both the buying organisation and the recorded supplier. The agency is based at Berkeley House, Croydon Street, Bristol. The requirement is therefore relevant to cyber-security consultancies and specialist information-security providers able to deliver penetration testing and IT health-check services for a UK national agency.

The procurement is complete and has been awarded through a limited procedure without prior publication of a competition, as a call-off from the CCS Cyber Security 3 framework RM3764iii. The stated rationale was that the procurement fell outside the relevant directive’s scope. The award date was 29 May 2026 and the contract is active. The contract value is £533,333.33 including the published currency of GBP. The award is recorded as active and names Driver and Vehicle Standards Agency as supplier. The procurement used one lot, which is recorded as cancelled, while the associated award and contract remain active. Price was the stated evaluation criterion. Eighteen bids were recorded for the lot. The process reached award without a separately published call for competition.

This procurement indicates demand from DVSA for sizeable, repeatable cyber-security assurance work delivered through a public-sector framework. A credible competitor would need demonstrable capability in penetration testing, IT Health Checks, computer auditing and technical security testing, with the capacity to support a national agency across the UK. Familiarity with framework call-offs and public-sector security requirements would be important, as would the ability to compete primarily on price where evaluation is price-led. The award shows that an SME can be recorded as the successful supplier, so the requirement is not limited to large technology integrators. Providers should be able to evidence suitably qualified security testers, robust reporting, dependable delivery controls and experience handling sensitive government or regulated information.

## Notice

THIS NOTICE IS FOR TRANSPARANCY PURPOSES ONLY. THIS IS BEING PROCURED BY THE DVSA FOR CYBER SECURITY PURPOSES.

### Lot Information

Lot 1

THIS NOTICE IS FOR TRANSPARANCY PURPOSES ONLY. THIS IS BEING PROCURED BY THE DVSA FOR CYBER SECURITY PURPOSES.

### Procurement Information

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/089503-2026 |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Limited |
| Procurement method details | Award procedure without prior publication of a call for competition |
| Tender suitability | Not specified |
| Awardee scale | SME |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 22 Sep 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £533,333 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Driver and Vehicle Standards Agency |
| Locality | BRISTOL |
| Postcode area | Bristol |
| Postcode | BS5 0DA |
| Country | England |
| ITL 1 | TLK South West (England) |
| ITL 2 | TLK5 West of England |
| ITL 3 | TLK51 Bristol, City of |
| Local authority | Bristol, City of |
| Electoral ward | Lawrence Hill |
| Westminster constituency | Bristol East |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Driver and Vehicle Standards Angency |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72800000 - Computer audit and testing services

## Release History

- 22 Sep 2026 at 11:07 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/089503-2026

## Notice URLs

- https://www.gov.uk/government/organisations/driver-and-vehicle-standards-agency

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-077739. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-077739.json.