---
title: "Penetration testing/IT Health Checks 2026"
ocid: "ocds-h6vhtk-078448"
canonical_url: "https://d3tenders.com/contract/?ocid=ocds-h6vhtk-078448"
markdown_url: "https://d3tenders.com/contract/ocds-h6vhtk-078448.md"
json_url: "https://d3tenders.com/contract/ocds-h6vhtk-078448.json"
source: "Find A Tender Service"
current_stage: "Award"
buyer: "Driver and Vehicle Standards Agency"
published: "2026-10-09"
---

# Penetration testing/IT Health Checks 2026

Buyer: Driver and Vehicle Standards Agency  
Current stage: Award  
OCID: ocds-h6vhtk-078448

[View canonical contract page](https://d3tenders.com/contract/?ocid=ocds-h6vhtk-078448)  
[Download OCDS JSON](https://d3tenders.com/contract/ocds-h6vhtk-078448.json)

## Summary

The Driver and Vehicle Standards Agency (DVSA) procured penetration testing and IT health checks to support its cyber security. This is a specialist IT security and computer audit service, intended to assess systems for weaknesses and check their security. DVSA is based in Bristol. The procurement has one requirement, rather than separate service lots, and the work is associated with the UK. The notice describes the purpose as cyber security but does not give a more detailed breakdown of systems, testing methods or deliverables. The selected supplier is recorded as Driver and Vehicle Standards Agency, the same name as the buyer, so the published outcome identifies no separate commercial supplier.

The procurement is complete and a contract has been awarded. DVSA used a call-off from the Crown Commercial Service Cyber Security 3 framework (RM3764iii), through a limited procedure without a separately published competition. The award is dated 29 May 2026 and the contract was signed on that date. Its value is £533,333.33. The award is recorded against the sole lot, although that lot is marked cancelled; the award itself is active. Price was the stated award criterion, and 18 bids were recorded for the lot. The contract is active. No contract period is stated in the published details, so the end of the term cannot be established from this outcome.

For cyber security suppliers, this outcome shows DVSA’s demand for penetration testing and IT health checks as part of its wider cyber security work, procured through the CCS Cyber Security 3 framework. A credible competitor would need to deliver specialist security testing and health checks and compete on price; the recorded evaluation basis was price. The volume of bids indicates that this framework call-off attracted substantial supplier interest. The named award recipient is DVSA itself, rather than a clearly identified external security provider, so the published outcome does not establish which commercial supplier delivered the work or what technical credentials, certifications, team size or testing methods were required. Suppliers considering similar DVSA requirements should therefore focus on demonstrating relevant testing capability and value through the framework route, rather than assuming specific accreditation or delivery conditions from this award.

## Notice

THIS NOTICE IS FOR TRANSPARANCY PURPOSES ONLY. THIS IS BEING PROCURED BY THE DVSA FOR CYBER SECURITY PURPOSES.

### Lot Information

Lot 1

THIS NOTICE IS FOR TRANSPARANCY PURPOSES ONLY. THIS IS BEING PROCURED BY THE DVSA FOR CYBER SECURITY PURPOSES.

### Procurement Information

THIS WAS A CALL - OFF FROM A CCS FRAMEWORK CYBER SECURITY 3 RM3764iii

## Key Details

| Field | Value |
| --- | --- |
| Publication source | Find A Tender Service |
| Latest notice | https://www.find-tender.service.gov.uk/Notice/095457-2026 |
| Notice type | Award Notice |
| Procurement type | Standard |
| Procurement category | Services |
| Procurement method | Limited |
| Procurement method details | Award procedure without prior publication of a call for competition |
| Tender suitability | Not specified |
| Awardee scale | Large |
| All stages | Award |

## Dates

| Field | Value |
| --- | --- |
| Publication date | 9 Oct 2026 |
| Submission deadline | Not specified |
| Future notice date | Not specified |
| Award date | Not specified |
| Contract period | Not specified |
| Recurrence | Not specified |

## Values

| Field | Value |
| --- | --- |
| Tender value | Not specified |
| Lots value | Not specified |
| Awards value | Not specified |
| Contracts value | £533,333 |

## Status

| Field | Value |
| --- | --- |
| Tender status | Complete |
| Lots status | Cancelled |
| Awards status | Active |
| Contracts status | Active |

## Buyer

| Field | Value |
| --- | --- |
| Main buyer | Driver and Vehicle Standards Agency |
| Locality | BRISTOL |
| Postcode area | Bristol |
| Postcode | BS5 0DA |
| Country | England |
| ITL 1 | TLK South West (England) |
| ITL 2 | TLK5 West of England |
| ITL 3 | TLK51 Bristol, City of |
| Local authority | Bristol, City of |
| Electoral ward | Lawrence Hill |
| Westminster constituency | Bristol East |
| Delivery location | Not specified |

## Supplier

| Field | Value |
| --- | --- |
| Number of suppliers | 1 |
| Supplier names | Driver and Vehicle Standards Angency |

## CPV Codes

### Divisions

- 72 - IT services: consulting, software development, Internet and support

### Codes

- 72800000 - Computer audit and testing services

## Release History

- 9 Oct 2026 at 08:47 - Award - Award Notice - https://www.find-tender.service.gov.uk/Notice/095457-2026

## Notice URLs

- https://www.gov.uk/government/organisations/driver-and-vehicle-standards-agency

## Provenance

This Markdown file is an alternate public rendering of the D3 Tenders contract record. The canonical page is https://d3tenders.com/contract/?ocid=ocds-h6vhtk-078448. The underlying structured data is available as OCDS JSON at https://d3tenders.com/contract/ocds-h6vhtk-078448.json.