-
REPLY LIMITED
End-to-end product delivery takes a product from idea to live. Our researchers, analysts and designers will create and test the best solutions for the users. Our engineers, QA, DevOps and architecture teams will make those solution designs real. With our dedicated service management team, we can run critical services 24/7
-
PA CONSULTING SERVICES LIMITED
This service enables regulators to improve their cyber security in the cloud and implement cyber oversight for industry. We deliver cyber projects including threat intel, security architecture, detect & respond, security culture, data protection, DR, SDLC and IDAM. And provide services including penetration testing, managed security operations and incident response
-
GET SWARMS LIMITED
Get Swarms offers comprehensive Cyber Security Consultancy services, including risk assessments, penetration testing, and incident response planning. Our team of experts analyze network architecture, assess vulnerabilities, recommend security solutions, and provide training to ensure the protection of sensitive data and prevention of cyber attacks.
-
REPLY LIMITED
Turning design and research into working software requires Product Development and Service Management. Our team will build, test and release the new service using open-source and commercial technology. Working with Service Design, we quickly integrate changes. Using our DevOps expertise, we can manage hosting and operations on various platforms.
-
Instil
Instil embeds security into software delivery through design, testing, and preparedness.
-
MTI TECHNOLOGY LIMITED
MTI provides comprehensive cyber security assessment and professional services that evaluate, strengthen, and mature an organisation’s security posture. Covering identity, vulnerability, threat detection, cloud, network, governance, and penetration testing, MTI delivers expert reviews, health checks, and both strategic and tactical consultancy to reduce risk and enhance resilience.
-
PEN TEST PARTNERS LLP
Finding flaws in mobile applications can result in attackers compromising devices, sensitive and confidential customer or third-party information, and even use the devices as gateways to accessing sensitive internal corporate resources. It is increasingly important to ensure that applications used by companies are well-coded and do not ship with vulnerabilities.
-
GOACO GROUP LTD
Ensure robust security with Mobile Application Security Testing. By validating secure coding practices, it prevents attacks like unauthorised access and data leakage. Our three-stage service proactively identifies and addresses vulnerabilities, aligning mobile app security with enterprise standards to mitigate risks and safeguard sensitive data.
-
Six Degrees
Our Penetration Testing services give you the information you need to enhance your protection against ransomware and other cyber-attacks. All of our Penetration Testing services are delivered by experienced, qualified ethical hackers. We provide summary reports in an easy to digest format that contain expert advice for reducing attack surface.
-
3B DATA SECURITY LTD
We provide expert vulnerability scanning and PCI ASV services using Qualys. We identify weaknesses across internet-facing assets and internal estates, deliver risk prioritised remediation guidance, and support PCI DSS compliance. Our service enhances security posture and evidences compliance through clear, actionable reporting and remediation re testing.
-
TPXIMPACT LIMITED
TPXimpact delivers production-ready software through Private and Public Beta phases. We provide full-stack development, Secure-by-Design architecture, and CI/CD automation. We ensure GDS Service Standard compliance, WCAG 2.2 accessibility, and Service Transition planning. We focus on scalability, resilience, and technical debt management to ensure a seamless Live launch
-
INSIGHT DIRECT (UK) LTD
Comprehensive security quality assurance and rigorous testing for organisations operating in the cloud, designed to proactively identify, assess, and mitigate security risks to ensure robust protection and compliance.
-
LEARNINGMATE SOLUTIONS (UK) LIMITED
We provide a range of IT-enabled services that use niche technologies and business processes to deliver quality learning solutions in the education and corporate sectors. Combining technology and content, we offer consulting, product and application engineering, automation, application transformation, implementation, product and application support, mobility, data analytics, cloud, and DevSysOps.
-
ARCANUM INFORMATION SECURITY LIMITED
Internal Infrastructure Testing evaluates the security of internal networks, systems and services, identifying vulnerabilities that could be exploited by malicious insiders/threat actors with internal access. The assessment provides comprehensive remediation guidance to strengthen defence-in-depth and improve organisational resilience across core business systems. Testing is conducted by our NCSC-Assured CHECK team.
-
BRIDEWELL CONSULTING LIMITED
Gain insight into how capable your employees are at recognising and responding to social engineering and whether your organisation’s existing policies are effective at stopping these threats. Reveal vulnerabilities by exploiting employees' natural helpfulness, helping to identify and address security weaknesses.
-
NCC Group Security Services Limited
Container security consultancy ensures robust protection for containerised environments and orchestration platforms like Kubernetes or OpenShift. Through configuration reviews, penetration testing, and breakout assessments, we identify vulnerabilities and hardening opportunities. Delivered by expert consultants, this service safeguards cloud or on-prem clusters, supporting secure CI/CD workflows and resilient microservices and architectures.
-
Northcoders Limited t/a Counter
Northcoders (t/a Counter) provides comprehensive cyber security support by embedding specialist SOC, threat, and risk analysts within client teams. Our Cyber Security service handles information security, penetration testing, and security-by-design, offering a scalable Cyber Security "try-before-you-buy" model that alleviates threats while building long-term internal technical resilience.
-
IBM UNITED KINGDOM LIMITED
IBM provides services that can uncover critical vulnerabilities that attackers might leverage against your organisation. Our X-Force Red team uses proprietary and industry standards (CHECK, CREST, ISO) to assess applications, networks, cloud, AI, IT/OT environments and more. Our actionable recommendations allow you to take actions to improve security.
-
HITACHI SOLUTIONS EUROPE LTD
Design and build simple, accessible web portals that follow GOV.UK patterns and the Government Service Standard. We deliver user research, service design, content design and development, with Web Content Accessibility Guidelines (WCAG) 2.2 Level AA compliance. Includes security, hosting, integrations, testing and live service support.
-
BRIDEWELL CONSULTING LIMITED
Formal assurance that your organisation’s external systems are protected from unauthorised access or change.
Extending the security assurance of the PSN service, an ITHC provides assurance that your systems are not providing additional risk to connected systems. Bridewell’s experts will provide testing and reporting in line with set security standards.
-
JUMPSEC LIMITED
Security assessment of iOS and Android applications and their supporting services to identify insecure storage, transport issues, authentication flaws and business logic abuse.
-
JUMPSEC LIMITED
CHECK and CREST-certified testers assess corporate and guest wireless networks to identify weak encryption, rogue access points and opportunities for unauthorised access to internal systems.
-
JUMPSEC LIMITED
Controlled attempt to gain unauthorised physical access to offices, plants or server rooms to evaluate badge controls, visitor processes and on-site response.
-
3B DATA SECURITY LTD
We deliver advanced Red Teaming engagements that emulate real-world attack scenarios to assess your organisation’s resilience against sophisticated threats. Our holistic approach combines OSINT, phishing, internal compromise, and privilege escalation to identify weaknesses in technical controls and staff awareness. The outcome helps to strengthen detection, response, and overall security posture.
-
BRIDEWELL CONSULTING LIMITED
Bridewell Phishing Assessments follow the same process as a real-life phishing campaign to provide an accurate simulation of how your policies, procedures and people would respond to an attack.
-
JUMPSEC LIMITED
Attack simulation against cloud-hosted infrastructure and services (IaaS / PaaS) to identify exploitable configuration weaknesses, exposed services and insecure identity or key management.
-
JUMPSEC LIMITED
Assume-breach assessment of the internal corporate network. Our CHECK and CREST-certified consultants act as hostile insiders to escalate privileges, move laterally, and reach sensitive systems, highlighting the actual blast radius of a single compromise.
-
JUMPSEC LIMITED
CHECK and CREST-certified testers simulate real-world attacks against your internet-facing infrastructure to identify exploitable vulnerabilities, demonstrate business impact, and provide clear remediation guidance.
-
3B DATA SECURITY LTD
We provide expert vulnerability scanning using Nessus to identify weaknesses across networks, servers, and applications. Our service delivers detailed risk analysis, prioritised remediation guidance, and compliance assurance to help organisations strengthen security posture and protect against evolving cyber threats
-
MTI TECHNOLOGY LIMITED
MTI have experienced security consultants that help shape strategy, risk regimes, policies and training to secure public services. Our teams build integrated solutions from the worlds leading security vendors. Microsoft, Cisco, CyberArk, Forcepoint, Thales, Ivanti, Palo Alto Networks, AT&T, Trend, Varonis, VMware, Forescout, Rubrik, Quest and Manage Engine.