-
CAPGEMINI UK PLC
Chief Information Security Office, Enterprise Security and Architecture teams must ensure that cyber and data security are assessed for all new initiatives, projects and acquisitions. Our ISO 27001:2022 compliant Cybersecurity Architecture Assurance Service and team of experts help to standardise, augment and accelerate your secure digitalisation and cloud transformation programmes.
-
GET SWARMS LIMITED
Get Swarms offers consultancy for SIAM Integration Testing and Quality Assurance services by providing expert guidance on ensuring seamless integration of all service providers, robust testing of interfaces, and assurance of service quality. Our team evaluates technical components to address any potential issues and optimize performance.
-
DECILLION DIGITAL LIMITED
Decillion Digital delivers end‑to‑end Business Intelligence solutions using QlikSense, QlikView, and Microsoft BI. We provide complete technical and analytical support from design to implementation. Our expertise includes microservices development, AWS and Azure cloud architecture, and modernising legacy platforms into advanced BI environments that transform data into actionable insights.
-
ROCK KITCHEN HARRIS LIMITED
We provide independent WordPress CMS audits to assess security, performance, accessibility, and maintainability. We review code, themes, plugins, hosting configuration, and governance practices, delivering clear, prioritised recommendations that reduce risk, improve resilience, and support informed decisions on remediation, migration, or ongoing management.
-
BIP CONSULTING UK LIMITED
BIP supports MoJ, CJS and HMCTS transformation programmes. For example, HMCTS Store & Bench is the in-court cloud-based solution for Magistrates providing access to court papers and sentencing guidelines via secure mobile devices and Crown Court Digital Case System provides a single digital solution for the Judiciary, Prosecution and Defence.
-
NIMBUS DIGITAL & TECHNOLOGY INNOVATIONS LTD
Nimbus provides Cloud TechOps Support Services to design, implement, and manage resilient platforms and infrastructure. Our ITIL-certified engineers use automation, observability, and Infrastructure as Code to ensure secure, scalable operations. Embedding DevSecOps and SRE, we deliver proactive monitoring and ITSM-aligned support for high-performance, compliant hybrid and multi-cloud environments.
-
ARCANUM INFORMATION SECURITY LIMITED
Cyber Security and Resilience Bill Readiness Consultancy prepares organisations for forthcoming UK obligations. We assess current controls, map gaps to Bill expectations and related frameworks (CAF, GovAssure, NIS), and create a prioritised roadmap with implementation guidance and evidence packs. Outcomes strengthen governance, resilience, reporting readiness and regulator confidence significantly.
-
NCC Group Security Services Limited
NCC Group’s Web Service Assessments provide comprehensive audits of web service security (APIs), finding common vulnerabilities such as message replay attacks, XML complexity attacks and transport security weaknesses. Our consultants provide assurance by identifying vulnerabilities that may be exploited to compromise either the server-side application or the application’s ordinary users.
-
DIGITAL MODUS SOFTWARE SOLUTIONS LTD
We apply GDS-aligned, user-centred methodologies to understand stakeholder needs and service constraints. Through user research and service mapping, we identify pain points in current processes to implement new or improve existing Salesforce implementations. We deliver evidence-based recommendations and a validated backlog, ensuring your digital transformation is accessible, sustainable, and outcome-focused.
-
STHREE PARTNERSHIP LLP
Our AWS Project Services empower public sector organizations with secure, scalable AWS cloud infrastructure and expert operational management. They ensure compliance, cost optimization, and continuous monitoring, enabling agencies to deliver reliable, citizen-focused digital AWS services efficiently.
Sectors: Healthcare/NHS, Local/Central Government, Defence, Education, Bluelight, Transport, Combined Authorities, Devolved Administrations.
-
NCC Group Security Services Limited
NCC Group's proactive, buildable continuous testing solution. Continuous Penetration Testing provides testing assurance for application and infrastructure security, with a dedicated agile team to provide real-time response to changes, events or discovered vulnerabilities. We offer continuous assurance for agile development teams, and advanced testing beyond attack surface discovery.
-
BIP CONSULTING UK LIMITED
BIP provides planning and delivery client-side consultancy and assurance for end-to-end Cloud-enabled Finance, Purchasing, and Human Resources transformation using SQEP. Covers strategic programmes, roadmaps, Proof of Concept, pilots, implementation, transition and operational enhancement projects, architecture, partners, suppliers, and business improvements including design patterns, best practice, benchmarks, organisational readiness, change management.
-
QUALITEST GROUP UK LTD
Qualitest offers a service to define the scope of test automation and estimate the required automation scripting effort based on the chosen application technology, complexity of functional flows, automation tooling and script reusability. Substantiated estimates and POCs increase scripting delivery plans accuracy, and increase Return on Investment (ROI) calculation reliability.
-
QUALITEST GROUP UK LTD
Qualitest provides DORA (DevOps Research and Assessment) services, including employing robust improvement metrics and reports to enhance software development practices. Leveraging technical metrics like deployment frequency, lead-time, change failure rate, and mean time to recover, Qualitest's DORA services optimise workflows, fostering continuous delivery, reliability, and agility in software development pipelines.
-
CyberOne
CyberOne’s Cyber Incident Response delivers rapid triage, containment and recovery, powered by a 24x7 Global SOC. CREST and NCSC-accredited to minimise downtime and restore operations. Post-incident reviews harden controls and accelerate resilience, integrating with Microsoft Security-powered MXDR Managed Services for continuous protection and assurance.
-
Qodea
Design and build of secure, user-centred portals enabling independent citizen transactions and account management. We deliver WCAG 2.2 AA compliant platforms that simplify complex processes and integrate with back-office systems. Our approach follows Government Service Standards to reduce administrative burden and provide 24/7 digital access to public services.
-
APACHE IX LIMITED
Our Cloud Migration Strategy Development, Implementation, and Assurance service can help you develop new strategy, or we can review and audit your performance against your existing strategy. Our clients include MOD, Defence Digital, Dstl, and Other Government Departments across the ICT, Cyber, Defence Intelligence (DI), Multi-Int, GEOINT, and ISR domains.
-
GRANICUS-FIRMSTEP LIMITED
GXG is Granicus’ digital agency focused on customer experience & digital communications, providing human-centered strategies, data-driven insights and hands-on consultancy services. GXG team offers expert guidance and support for digital initiatives to improve outcomes for individuals, communities, and society and make a positive difference to our customers’ customers.
-
APACHE IX LIMITED
Our flexible client-side support service helps you develop agile business cases and ease through the approvals process, enabling you to spend on new capabilities and continue programmes. Our clients include MOD, Defence Digital, Dstl, and Other Government Departments across the ICT, Cyber, Defence Intelligence (DI), Multi-Int, GeoInt, and ISR domains.
-
TMC3 LIMITED
Intelligent knowledge systems using Generative AI and Retrieval-Augmented Generation (RAG). We design secure, source-grounded solutions connecting LLMs to your verified document repositories. Aligned with Government Data Ethics, our RAG systems provide accurate, auditable, and cited answers, reducing search time while improving staff productivity and evidence-based decision-making across the public sector.
-
TMC3 LIMITED
Design and build of secure, user-centred portals enabling independent citizen transactions and account management. We deliver WCAG 2.2 AA compliant platforms that simplify complex processes and integrate with back-office systems. Our approach follows Government Service Standards to reduce administrative burden and provide 24/7 digital access to public services.
-
FUJITSU SERVICES LIMITED
Fujitsu Reachback as a Service (RaaS) provides secure out of the box archiving of data in accordance with public sector data retention guidelines and enables comprehensive reporting across live and historical data.
RaaS is an evergreen managed service that will reduce the time, cost and risk of your cloud migration.
-
COMET BUSINESS GLOBAL SOLUTIONS LTD
Cyber Essentials Certified DPO service led by a Fellow of Information Privacy (FIP). SC Cleared with experience advising NHS Test and Trace through formal ICO audits. We provide RoPA, DPIAs, and ICO liaison, ensuring total accountability for high-profile, large-scale digital programmes under intense regulatory scrutiny.
-
VALCON GROUP UK LIMITED
Our Data Strategy service evaluates your existing approach providing practical, tailored recommendations across people, process and technology to deliver AI-ready data. We support vision, principles, standards, OKR/KPI, and use case definition and collaboratively develop a prioritised roadmap to value realisation, aligning with UK regulations, Government standards and best practice.
-
GRANICUS-FIRMSTEP LIMITED
GXG is Granicus’ digital agency focused on customer experience & digital communications, providing human-centered strategies, data-driven insights and hands-on consultancy services. GXG team offers expert guidance and support for digital initiatives to improve outcomes for individuals, communities, and society and make a positive difference to our customers’ customers.
-
ROCK KITCHEN HARRIS LIMITED
RKH provides independent Wagtail CMS audits focusing on security, performance, and GDS compliance. We evaluate codebase health and architecture to identify technical debt and vulnerabilities. Our prioritised roadmaps ensure services are resilient, WCAG 2.2 accessible, and built for long-term stability.
-
CACI LIMITED
Our Landing Zone Accelerator service, powered by Jezero, deploys a license-free, enterprise-ready AWS Landing Zone Accelerator-based platform, meeting national security and global compliance standards, deployed within a day. Our certified professionals automate provisioning and DevOps, including cost management, security, identity, governance, and policies. Modular architecture ensures swift customisation and deployment.
-
NTT DATA UK LIMITED
Our Governance, Risk, and Compliance (GRC) services offer comprehensive expertise in designing customised frameworks, conducting risk assessments, and ensuring regulatory adherence. With a focus on aligning GRC strategies with organisational objectives, we provide tailored solutions to mitigate risks and optimise compliance efforts effectively.
-
SOPRA STERIA LIMITED
Sopra Steria helps organisations adopt Oracle AI capabilities that enable smarter decisions, enhanced productivity and better business outcomes. We embed AI assistance, automation and data insights solutions into Oracle Cloud applications, AI Services, Data and Analytics, including 26ai, guiding clients through best practices and governance and adoption.
-
SECURECLOUD+ LIMITED
Our Cloud Support Managed Service provides secure, scalable hosting for UK Public Sector workloads at SECRET/SUKEO/FVEY levels. Using ITIL best practices, it delivers full lifecycle management with orchestration, automation, and telemetry. Hosted at FSC (List-X) datacentres or on-premise, it ensures compliance, resilience, and continuous improvement.