Award GB CF

Virtual Desktop Services - IT Health Check/Pentest (FY 25/26)

MINISTRY OF DEFENCE

Stage: Award

the latest stage the buyer has published
Buyer: MINISTRY OF DEFENCE
Supplier: Qinetiq limited

named in the award notice
Value: £17.2K

net · GBP
Awarded: 30 Jan 2026

the award date on the notice
End date: 30 Jun 2026

expected
Where: London, England
First published: 15 Jan 2026

last seen 15 Jan 2026

What the buyer published

Defence Digital (DD) - End User Services (EUS) has introduced runs a range of Virtual

Desktop Services (VDS) to improve collaborative working between the MoD and

Industry. Within the this is Azure Virtual Desktop (AVD), which is this focus of this

SOR. AVD consists of 3 sub services each with specific requirements. In accordance with Secure by Design (SbD), these services require an annual test by

3rd party to confirm that the security controls in place are not vulnerable from a

security perspective. The ITHC will be undertaken as part of the NCSC CHECK scheme. A completion date

must be agreed between the Authority and Supplier and completed no later than

01/06/2026.

View the original notice ↗

History of this contract

An empty stage is useful. For example, no tender stage usually means the buyer used a framework or gave the contract directly.

◌ Planning none

◌ Tender none

● Award on record

● End date 30 Jun 2026, expected

Why we call this Penetration testing

Judged against the rules we publish. How we decide.

Penetration testing A security test of a set scope, such as a pen test, IT health check or red team.

Multi-service and framework contracts A framework or call-off contract that many buyers can use.