-
SECARMA LIMITED
Adversary Simulation replicates the behaviours, techniques, and objectives of real-world threat actors to show how they would operate inside your environment. Rather than focusing on isolated vulnerabilities, it evaluates how well your organisation detects, responds to, and contains malicious activity.
-
SECARMA LIMITED
Our Red Team uses a controlled and covert approach, often known only to a select group within the organisation, to mirror the tactics, techniques, and procedures (TTPs) of real threat actors. We go beyond technical vulnerabilities to challenge your processes, people, and technologies.
-
COGNISYS GROUP LIMITED
Cognisys provides comprehensive API pentest to assess weaknesses in application programming interfaces and enable system integration. Our CREST-accredited testers identify vulnerabilities in API implementations, configurations, and authentication. Assessments evaluate threat exposure, breach likelihood, and impact on data security. Detailed reports include prioritised remediation and mitigation guidance supporting secure API deployment
-
ZOONOU LIMITED
Zoonou provides quality assurance (QA) for public sector teams covering accessibility, cyber security, software testing, automation, AI assurance, and system migrations and integrations. Our services ensure secure, reliable, and inclusive digital services that meet operational, GDPR, WCAG, PSBAR, and GDS Service assessments while reducing risk, improving quality, and accelerating delivery.
-
PROCTOR AND STEVENSON LIMITED
We provide end-to-end security services for Wordpress, covering strategy, risk management, secure design, incident response, audit support and security testing. Our approach embeds security into delivery and operations, reducing risk, supporting compliance, and ensuring services remain resilient, auditable and secure throughout their lifecycle.
-
PROCTOR AND STEVENSON LIMITED
We provide end-to-end Webflow security services covering strategy, risk management, secure design, incident response, audit support and security testing. Our approach embeds security into delivery and operations, reducing risk, supporting compliance, and ensuring services remain resilient, auditable and secure throughout their lifecycle.
-
PROCTOR AND STEVENSON LIMITED
We provide end-to-end Drupal security services covering strategy, risk management, secure design, incident response, audit support and security testing. Our approach embeds security into delivery and operations, reducing risk, supporting compliance, and ensuring services remain resilient, auditable and secure throughout their lifecycle.
-
ISHELP.CO.UK LIMITED
Provides independent, risk-based testing to identify vulnerabilities, assess exploitability, and validate the effectiveness of security controls across Defence and Government IT environments.
Tailored to the buyer’s operational context, system criticality, and risk appetite, ranging from baseline compliance assessments through to advanced, threat-informed testing to provide repeatable, evidence-rich, assurance focused outputs.
-
GOACO GROUP LTD
Software development life cycle (SSDLC) includes planning, design, build, release, maintenance and updates, replacement and retirement. Secure SDLC builds on this, incorporating security in all stages of the software development lifecycle. We implement SSDLC when transitioning to DevSecOps, applying best-practices alongside functional aspects of development and securing the development environment.
-
Intertek NTA
NTA Monitor's Application Security Assessment is a penetration (pen) test to ensure an application (e.g. transactional website, mobile application, internal CMS, cloud-based solution) is securely configured, thus preventing an attacker from gaining access or a user being exposed to confidential or sensitive data, another user’s account or the backend database.
-
BRIDEWELL CONSULTING LIMITED
Many organisations trust cloud providers to ensure appropriate cloud security, vulnerability management and data protection. However, this can lead to security teams underestimating the importance of their role during the implementation phase and result in environments that contain vulnerabilities or misconfigurations.
-
3B DATA SECURITY LTD
We provide comprehensive Active Directory (AD) security reviews to identify misconfigurations, privilege escalation paths, and weaknesses that attackers exploit. Our service assesses domain controllers, group policies, and authentication mechanisms, delivering actionable recommendations to harden AD environments and reduce the risk of compromise.
-
CODA SECURITY LIMITED
A broad range of activities intended to determine the degree to which an organisation, system, or information asset is exposed to potential compromise, the impact of such a compromise, and the likelihood of it occurring, through primarily technical means. This supports risk management by providing objective risk information.
-
SAPPHIRE TECHNOLOGIES LIMITED
Our advanced Attack Simulation services cover Red Teaming (Threat Led Penetration Testing / Adversary Emulation) and Purple Teaming. These services provide a range of testing strategies to assess your organisation’s ability to prevent, detect and respond to an advanced cyber-attack.
-
MTI TECHNOLOGY LIMITED
MTI helps public sector organisations understand evolving cyber threats and assess associated risks. We design, implement, and operate technical security controls across monitoring, detection, endpoint, network, vulnerability assessment and analytics technologies. Our managed and co-managed services enhance threat detection, incident response, and resilience, enabling an effective, risk-aligned security posture.
-
CODA SECURITY LIMITED
A wide range of disciplines primarily focused on providing a secure software development lifecycle (SDLC). It’s not possible to produce an exhaustive list of the disciplines covered, however, multiple services are included among those that we can offer to support our clients in addressing their own secure SDLC requirements.
-
SOPRA STERIA LIMITED
Highly experienced consultants to support or fulfil the role of CISO/Security Lead with the option of additional support from suitably qualified security specialists including Security Architects and Penetration Testers. The service can be performed over a set period or taken from a pool of days as needed.
-
ZOONOU LIMITED
Zoonou's Cyber Security Services help public sector organisations protect web, mobile, cloud, and core IT systems. Our security audits identify vulnerabilities, misconfigurations, and risks, supporting compliance with GDS Service Standards, UK GDPR, Secure by Design principles, and NCSC guidance, while enabling informed decision-making, assurance, and IT Health Check preparation.
-
NCC Group Security Services Limited
NCC Group has a dedicated team of Threat Intelligence specialists focused exclusively on delivering intelligence support for regulatory schemes such as CBEST, GBEST, ATTEST, TBEST, and NBEST. The team brings extensive experience working with public-sector clients and regulators to ensure that all tests are underpinned by robust, high-quality TI processes.
-
CLERKSWELL LIMITED
ClerksWell can provide a comprehensive Umbraco security review including full code analysis and vulnerability testing, with a prioritised action plan to strengthen your setup and reduce risk.
-
ARCA CONSULTING LTD
ARCA helps your digital technology teams adopt cloud-native ways of working and best practice application development. We bring deep expertise in implementing DevOps, driving rapid realisable business value, and building enduring agile delivery capabilities. Enabling you to deliver automated CI/CD pipelines, cloud orchestration, resilience, operational management and culture change.
-
JUMPSEC LIMITED
Hands-on assessment of hardware, firmware and physical interfaces to identify opportunities for tampering, data extraction or unauthorised control.
-
Resillion
A PSN IT Health Check (ITHC) penetration test of applications, infrastructure and networks to support codes of connections (PSN, NHS etc..) and HMG and MOD accreditations for OFFICIAL, SECRET and TOP SECRET systems and networks.
-
BRITISH TELECOMMUNICATIONS LIMITED
BT offers a range of Cyber Security Advisory services to assess your security posture and identify the threats relevant to you, build strategies and roadmaps to guide your security and digital transformation, select solutions that match your needs and put your defences to the test using our offensive security team.
-
EQUAL EXPERTS UK LIMITED
Expert support to build a DevSecOps capability within an organisation. We ensure security is built in from inception and throughout development into production and decommissioning of cloud-based services. Incorporating security into agile working practices using lightweight, pragmatic approaches suitable for continuous delivery. Our approach empowers teams and reduces risk.
-
AIRE LOGIC LIMITED
Security Services provide cloud security strategy, design, risk management and assurance. Services include governance and Zero Trust operating models, threat modelling and remediation planning, secure cloud and API design, incident response and triage, security audits and compliance assessments, and CI/CD-integrated security testing aligned to NCSC guidance.
-
BRIDEWELL CONSULTING LIMITED
A prime opportunity for introducing accidental vulnerabilities, source code reviews provide assurance that solutions are being built securely.
Bridewell’s technical consultants are experienced in software development and coding and will review your applications source code to ensure it is being developed securely and conforms to coding standards.
-
ARCANUM INFORMATION SECURITY LIMITED
Secure by Design (SbD) is a pan-Defence drive to support organisations in building cyber security into system and capability designs from the outset. We have been involved in the development of SbD since the Beta phase and can help your organisation adhere to SbD principles and processes.
-
PA CONSULTING SERVICES LIMITED
PA Consulting (PA) provides Cyber Security services including CREST accredited Penetration Testing. IT Health Check (ITHC) services identify ways in which an organisation’s applications and network services could potentially be compromised or manipulated through malicious activities carried out by an attacker
-
Resillion
An NSCS Assured CHECK IT Health Check (ITHC) penetration test of applications, infrastructure and networks to support codes of connections (PSN, NHS etc..) and HMG and MOD accreditations for OFFICIAL, SECRET and TOP SECRET systems and networks.