Skip to content
CREST ACCREDITED

NHS DTAC Penetration Testing Support

CREST-certified penetration testing scoped and reported to satisfy NHS DTAC (Digital Technology Assessment Criteria) and DSPT evidence requirements for digital health suppliers — one engagement, one report, both boxes ticked.

Trusted by digital health suppliers

CREST-certified testing mapped to DTAC and DSPT

Our penetration testing for digital health suppliers covers the application, API and data-handling layers a DTAC and NHS DSPT review expects to see evidenced, with findings framed the way an NHS procurement team and MDR notified body are used to reading them.

CREST CERTIFIED EXCELLENCE

Our penetration testers are CREST certified, ensuring the highest standards of professional testing methodologies and ethical practices.

right-arrow

DTAC CLINICAL SAFETY MAPPING

Findings are linked directly to DTAC's clinical safety and cyber security criteria, so your submission evidence is ready to go, not reverse-engineered after the fact.

right-arrow

MANAGEMENT-GRADE REPORTING

Detailed reports with clear risk ratings, evidence and actionable remediation guidance tailored for technical and executive audiences.

right-arrow

ONE REPORT, TWO REQUIREMENTS

A single engagement produces evidence structured for both your NHS DTAC submission and your NHS DSPT assertions, so you're not paying for or scheduling separate tests.

right-arrow

Meeting NHS DTAC and DSPT Requirements Through Penetration Testing

NHS DTAC (Digital Technology Assessment Criteria) requires digital health suppliers to evidence independent security testing before their product can be adopted across the NHS. Our penetration testing is scoped specifically to satisfy DTAC's clinical safety and cyber security criteria alongside NHS DSPT assertions, so one engagement produces evidence for both.

CREST-CERTIFIED, NHS-FLUENT

We test the application layer, APIs, data storage and transmission, and authentication controls that DTAC assessors and NHS trust procurement teams expect to see covered, reporting in the language they're used to reading.

EVIDENCE THAT HOLDS UP

Findings are structured so they can be dropped straight into your DTAC submission and your DSPT self-assessment, with remediation guidance and a free retest of critical and high findings once fixed.

how-it-work
BOOK A CALL
DTAC PEN-TESTING

How It Works

right-arrow

BOOK A CALL

It’s important that we have some time to understand your product, your DTAC submission timeline and your DSPT status so we can advise you accordingly.
right-arrow

PLANNING PROCESS

Our expert team carefully plans the penetration testing process to identify vulnerabilities. We’ll book an initial call to understand your system and agree the scope against DTAC and DSPT requirements.
right-arrow

EXECUTION PHASE

We execute comprehensive penetration tests to exploit vulnerabilities and assess their impact, aligning to the standards discussed in the scope.
right-arrow

REPORTING + RECOMMENDATIONS

We provide detailed reports and recommendations through our platform, structured so they drop straight into your DTAC submission and DSPT evidence. A follow-up session walks through the findings in clear, practical terms.
right-arrow

CONTINUOUS IMPROVEMENT

We help you keep DTAC and DSPT evidence current, with annual retesting so your submission and self-assessment never fall out of date.
BOOK A CALL

Get DTAC-Ready With Confidence

CREST-certified penetration testing scoped for NHS DTAC submission and DSPT evidence requirements — one report, audit-ready for both.

Services

WE HAVE A VARIETY OF SERVICES SPECIFIC TO ENSURING THE SECURITY OF YOUR MEDICAL DEVICES.

Does NHS DTAC require CREST-certified penetration testing specifically? minus-icon

DTAC doesn't mandate a named accreditation by itself, but its clinical safety and cyber security criteria expect independently verified testing evidence — and NHS trusts procuring digital health tools increasingly ask for CREST-certified reports as the default standard of proof, so using a CREST-accredited tester avoids evidence being challenged during review.

Can one penetration test cover both NHS DTAC and NHS DSPT? plus-icon
What does a DTAC-focused penetration test cover? plus-icon
How long does a DTAC penetration test take? plus-icon

Our Expertise, Your Advantage

At Periculo, we are a team of dedicated cybersecurity specialists with deep expertise in the unique challenges of the defence and digital health sectors.