Our CHECK-approved IT Health Check (ITHC) service simulates real-world attacks on your infrastructure and applications — helping you identify exploitable vulnerabilities before they become incidents. Delivered by highly qualified, security-cleared penetration testers, this high-assurance service satisfies formal compliance requirements and supports resilient, risk-informed system delivery

  • Simulates adversary behaviour using CHECK methodology (the UK government’s approved penetration testing scheme)
  • Satisfies mandated requirements (e.g. Public Services Network – PSN, National Cyber Security Centre – NCSC)
  • Clear, actionable findings presented in a non-alarmist tone
  • Security Check (SC) and Developed Vetting (DV)-cleared experts with CREST (Council for Registered Ethical Security Testers) and Cyber Scheme credentials
  • Available on-site or remotely
  • Trusted by government and national infrastructure clients for over 20 years

See how ITHC links into our Cyber Security Testing

See also
See what attackers see — and fix it first

QinetiQ’s CHECK ITHC service goes beyond a compliance tick-box exercise. As one of the UK’s founding CHECK providers, we’ve shaped the practice of penetration testing in high-assurance environments for more than two decades. Our experts hold the highest security clearances and qualifications, combining technical precision with a pragmatic reporting style.

What sets us apart is not only the quality of our testing but the clarity of our advice. Our reports are designed for action — enabling programme leaders, system owners and boards to prioritise risks and move forward with confidence.

Whether you need to satisfy a formal mandate, assure a critical rollout or benchmark resilience, QinetiQ provides the assurance that decision-makers can rely on.

What to expect
  • CHECK- and CREST-qualified testers with SC/DV clearance
  • Constructive, business-focused reporting — no jargon, no alarmism
  • Trusted heritage: 20+ years of supporting government and CNI
  • Options to extend: Many clients use ITHC as a springboard into deeper resilience testing —from red teaming to risk modelling and remediation support.

Built for assurance. Delivered with clarity. Trusted at scale.