Penetration Testing Services 2026-2030

{
  "id": "028400-2026",
  "tag": [
    "planning"
  ],
  "date": "2026-03-27T11:04:40Z",
  "ocid": "ocds-h6vhtk-067639",
  "buyer": {
    "id": "GB-PPON-PDPT-3135-BWWY",
    "name": "NHS England"
  },
  "tender": {
    "id": "ocds-h6vhtk-067639",
    "lots": [
      {
        "id": "1",
        "status": "planned",
        "hasRenewal": true,
        "suitability": {
          "sme": true
        },
        "contractPeriod": {
          "endDate": "2028-10-27T23:59:59+01:00",
          "startDate": "2026-10-28T00:00:00Z",
          "maxExtentDate": "2030-10-28T23:59:59Z"
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "additionalClassifications": [
          {
            "id": "72590000",
            "scheme": "CPV",
            "description": "Computer-related professional services"
          }
        ]
      }
    ],
    "title": "Penetration Testing Services 2026-2030",
    "value": {
      "amount": 6000000,
      "currency": "GBP",
      "amountGross": 7200000
    },
    "status": "planned",
    "legalBasis": {
      "id": "2023/54",
      "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents",
      "scheme": "UKPGA"
    },
    "description": "This requirement is for new procurement for the provision of Penetration testing for a 4 year call off contract (2+1+1).  The procurement route is Crown Commercial Services' Cyber Security Services 3 Dynamic Purchasing System (DPS) - Ref RM3764. Penetration testing is required throughout various programmes, systems and services across NHS England and the wider NHS.",
    "procurementMethod": "selective",
    "mainProcurementCategory": "services",
    "procurementMethodDetails": "Using pre-Procurement Act commercial tool"
  },
  "parties": [
    {
      "id": "GB-PPON-PDPT-3135-BWWY",
      "name": "NHS England",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKI45",
        "country": "GB",
        "locality": "London",
        "postalCode": "SE1 8UG",
        "countryName": "United Kingdom",
        "streetAddress": "Wellington House, 133-135 Waterloo Rd"
      },
      "details": {
        "url": "https://www.england.nhs.uk/",
        "classifications": [
          {
            "id": "publicAuthorityCentralGovernment",
            "scheme": "UK_CA_TYPE",
            "description": "Public authority - central government"
          }
        ]
      },
      "identifier": {
        "id": "PDPT-3135-BWWY",
        "scheme": "GB-PPON"
      },
      "contactPoint": {
        "email": "england.commercialqueries@nhs.net"
      }
    }
  ],
  "language": "en",
  "planning": {
    "documents": [
      {
        "id": "028400-2026",
        "url": "https://www.find-tender.service.gov.uk/Notice/028400-2026",
        "format": "text/html",
        "noticeType": "UK1",
        "description": "Pipeline notice on Find a Tender",
        "documentType": "plannedProcurementNotice",
        "datePublished": "2026-03-27T11:04:40Z"
      }
    ]
  },
  "initiationType": "tender",
  "relatedProcesses": [
    {
      "id": "framework",
      "title": "CCS - Cyber Security Services 3 - RM3764",
      "relationship": [
        "framework"
      ]
    }
  ]
}