Helping Altrix prepare for the demands of NHS delivery
What we delivered
As Altrix prepared for NHS procurement, our penetration and performance testing helped the team meet security expectations, identify improvements and plan for future growth.
Altrix is a healthcare technology company helping healthcare professionals find and book shifts across NHS Trusts in the UK.
Through its website and mobile app, healthcare professionals can complete pre-employment checks and, once approved, choose shifts that fit around their availability.
Preparing for NHS procurement
As Altrix grew from start-up to scale-up, the team was preparing its digital health technology (DHT) for wider use across the NHS. An important part of this was meeting NHS procurement expectations, including the Digital Technology Assessment Criteria (DTAC).
Altrix needed independent penetration testing from a CREST-accredited provider, alongside evidence that its platform could perform reliably as demand increased.
But the team also wanted to look beyond the immediate procurement requirements. With further growth planned, understanding potential security vulnerabilities and performance limitations would help it make informed decisions about the platform's development.
We engaged with Zoonou because we want to ensure that our platform is robust enough and secure enough. Ultimately that it’s fit for purpose and able to cope with the growth that we’re anticipating over the next few years.
Independent assurance without slowing the team down
We combined penetration testing with load and performance testing to give Altrix an independent view of its platform's security and performance.
Our security testing identified vulnerabilities that needed attention, while load testing helped the team understand how the platform would cope with increasing demand.
For Rob, there was another important consideration: how much time the work would take away from his team. We managed the testing with minimal demands on Altrix's internal resources, keeping communication clear and involving the team when needed.
In the build up to the testing itself, I was concerned by how much of my time it might need but actually found very little of my time was required - which is why I say unintrusive.
From testing findings to product improvements
The value of the work extended beyond the testing itself. Altrix used our findings to prioritise improvements to its product roadmap and address the weaknesses identified. This gave its developers clear actions to take forward, while helping the executive team understand the risks and make decisions about future development.
The reports played an important part in this. Rather than presenting findings that only technical specialists could interpret, we provided information that worked for both developers and non-technical decision-makers.
The work also gave Altrix independent security testing evidence relevant to its NHS procurement and DTAC preparations.
We took Zoonou’s recommendations and incorporated those into our product roadmap. We were then able to strengthen the highlighted weaknesses, so it’s given our Executive Team much more reassurance over our future.
Where Altrix is today
Altrix was acquired by HCRG Workforce Solutions in 2025. Its technology and services now form part of the wider HCRG Workforce Solutions offering.
Preparing your digital health technology for the NHS?
Talk to our Healthcare Team about NHS readiness.
More articles
Helping DHSC deliver and continuously improve public health services
Helping Blatchford build and scale its digital health QA capability
Scaling QA for healthcare data products used across the NHS