Upcoming
Penetration Testing Services 2026-2030
NHS England · NHS and health
In brief
NHS England has announced plans to buy IT and software work. This is an early notice: there is nothing to bid on yet, but it tells you a tender may follow.
The estimated value is £6,000,000 excluding VAT.
The contract runs for 2 years, up to 4 years with extensions, starting 28 October 2026.
The buyer says it is suitable for small and medium-sized businesses.
Built from the notice's own fields. Always check the official notice before you bid.
Can I win this?
Competition
Typical: a median of 5 bids per contract for this buyer (from 85 awards in the last 12 months).
What the notice says
This requirement is for new procurement for the provision of Penetration testing for a 4 year call off contract (2+1+1). The procurement route is Crown Commercial Services' Cyber Security Services 3 Dynamic Purchasing System (DPS) - Ref RM3764. Penetration testing is required throughout various programmes, systems and services across NHS England and the wider NHS.
How to bid
- Read the full notice on Find a Tender, including any tender documents it links to.
- Register your organisation on the Central Digital Platform (through Find a Tender) if you have not already. Suppliers need to be registered to take part in procurements under the Procurement Act 2023.
- Follow the submission instructions in the notice; it does not name an e-tendering portal.
Timeline
- Pipeline notice · UK1, notice 028400-2026
About the buyer
NHS EnglandLast 12 months
Procurements
1187Awards
476Suppliers it has used most for IT and software
- Bloomsbury Health2 contracts
- Cystic Fibrosis Trust2 contracts
- Egton Medical Information Systems Limited2 contracts
- University College London2 contracts
- Addvantage Digital Solutions Ltd1 contract
Similar open tenders
All open IT and software tenders- £82kestimated
- £29.9mestimated
- £2.6mestimated
- £250kestimated
- £20kestimated
From notice 028400-2026 on Find a Tender, first published 27 March 2026. We last checked for changes on 28 September 2026.