Our CHECK-approved IT Health Check (ITHC) service simulates real-world attacks on your infrastructure and applications — helping you identify exploitable vulnerabilities before they become incidents. Delivered by highly qualified, security-cleared penetration testers, this high-assurance service satisfies formal compliance requirements and supports resilient, risk-informed system delivery

  • Simulates adversary behaviour using CHECK methodology (the UK government’s approved penetration testing scheme)
  • Satisfies mandated requirements (e.g. Public Services Network – PSN, National Cyber Security Centre – NCSC)
  • Clear, actionable findings presented in a non-alarmist tone
  • Security Check (SC) and Developed Vetting (DV)-cleared experts with CREST (Council for Registered Ethical Security Testers) and Cyber Scheme credentials
  • Available on-site or remotely
  • Trusted by government and national infrastructure clients for over 20 years

See how ITHC links into our Cyber Security Testing

See also
See what attackers see — and fix it first

QinetiQ’s CHECK ITHC service goes beyond a compliance tick-box exercise. As one of the UK’s founding CHECK providers, we’ve shaped the practice of penetration testing in high-assurance environments for more than two decades. Our experts hold the highest security clearances and qualifications, combining technical precision with a pragmatic reporting style.

What sets us apart is not only the quality of our testing but the clarity of our advice. Our reports are designed for action — enabling programme leaders, system owners and boards to prioritise risks and move forward with confidence.

Whether you need to satisfy a formal mandate, assure a critical rollout or benchmark resilience, QinetiQ provides the assurance that decision-makers can rely on.

What to expect
  • CHECK- and CREST-qualified testers with SC/DV clearance
  • Constructive, business-focused reporting — no jargon, no alarmism
  • Trusted heritage: 20+ years of supporting government and CNI
  • Options to extend: Many clients use ITHC as a springboard into deeper resilience testing —from red teaming to risk modelling and remediation support.

Built for assurance. Delivered with clarity. Trusted at scale.

Contact us
Talk to our experts about your resilience challenges.