-
MAPLE NETWORKS LIMITED
Maple delivers CREST‑certified penetration testing to identify and safely validate vulnerabilities across applications, infrastructure and cloud. For pen testing we combine manual expertise with automated tooling, provide CVSS‑scored findings, and deliver clear remediation guidance to reduce risk and improve resilience across hybrid, multi‑cloud and on‑premises environments.
-
PROTOS NETWORKS LIMITED
Protos provide CREST approved external infrastructure penetration testing and vulnerability assessment services. To help organisations assess publicly exposed assets and identify known security weaknesses or vulnerabilities which could pose risks to critical infrastructure and application services.
Providing contextual, concise and detailed reports removing false positives and sharing clear remediation advice.
-
Instil
Instil delivers penetration testing for cloud-hosted applications to assess security posture within public cloud environments.
Testing considers application behaviour, cloud configuration, and exposure risks.
-
CYBERLAB SECURITY LIMITED
CyberLab offer Red Teaming and Attack Simulation testing. Red Teaming is scenario-based penetration testing which aids organisations in gaining a clear understanding of the threats they face.
-
ARCANUM INFORMATION SECURITY LIMITED
Arcanum is an NCSC Assured Green Light CHECK provider delivering IT Health Checks (ITHCs) and Pen Testing. Our highly qualified CHECK Team Leaders and CHECK Team Members deliver penetration testing aligned with NCSC CHECK standards.
-
WULUF LTD
We use proven scanning tools and techniques to assess servers, networks, and cloud environments for known vulnerabilities and misconfigurations, we also offer a comprehensive penetration testing capability that complements or acts independently from the monthly vulnerability scanning service.
-
Instil
Instil provides penetration testing for web applications to identify security vulnerabilities and weaknesses that could be exploited in real-world attacks. Testing focuses on application logic, authentication, access control, and data handling.
-
CYBER SECURITY DEFENCE CONSULTANTS LIMITED
NCSC-aligned IT Health Check and penetration testing services for UK government and public sector organisations. We identify vulnerabilities across networks, applications, and infrastructure through external and internal assessments, OWASP web application testing, mobile device testing, and configuration reviews. Comprehensive reporting with prioritised remediation guidance to strengthen your overall security posture.
-
HYPER TALENT SOLUTIONS LTD
Hyper Talent Solutions Ltd specializes in Penetration Testing services customized for government departments. We meticulously assess software and network infrastructures to identify vulnerabilities and potential security threats. With advanced tools and expert testers, we deliver high-quality outcomes, ensuring robust defenses and minimizing security risks for reliable Penetration Testing solutions.
-
SECON CYBER SECURITY LTD
Secon's Penetration Testing service, is designed to help identify security vulnerabilities and weaknesses within the IT environment. The testing is undertaken by an expert team, of CREST certified testers, who will manage the entire process end to end. The service focuses on reports and recommendations to help improve cyber resilience.
-
CAMBRIDGE CYBER ADVISERS LIMITED
The Penetration Testing service provides a structured, end to end evaluation of an organisation’s technical security posture. The assessment simulates attacker behaviour to identify vulnerabilities, misconfigurations, and weaknesses that could be exploited to gain unauthorised access, disrupt operations, or compromise sensitive data.
-
CCL-FORENSICS LIMITED
Our penetration testing services fully align with NCSC requirements, including CHECK and CREST accreditation. Delivered by highly qualified, security-cleared practitioners, our proven methodology follows industry standards. We are trusted as a critical line of defence for central and local government and critical national infrastructure systems.
-
JISC SERVICES LIMITED
A CREST-accredited penetration testing service focused on education and research sectors. We identify vulnerabilities, help assess risks, and recommend mitigation to protect against relevant threats. Our experienced and certified in-house cyber security experts conduct tests across numerous areas, including network infrastructure, applications, social engineering, build image review, and Active Directory.
-
EKCO CLOUD AND SECURITY LIMITED
Ekco's Security Testing team helps clients identify vulnerabilities in cloud applications, infrastructure, and networks, enabling proactive remediation against threats. We offer tailored security testing services delivered by certified experts to match your specific needs and risk appetite.
-
ARCANUM INFORMATION SECURITY LIMITED
Delivering CREST, CyberScheme and CHECK-aligned penetration testing across applications, infrastructure and cloud environments led by a UK CSC Chartered Professional. This service provides high-assurance testing conducted by certified professionals using recognised methodologies, enabling organisations to identify and remediate vulnerabilities, meet assurance obligations, and strengthen their overall resilience against cyber threats.
-
DIGI2AL LIMITED
Digi2al offers vulnerability and penetration testing services, conducting penetration tests against infrastructure and applications. Infrastructure assessment and vulnerability scanning, network device configuration review, application testing. External penetration testing, internal penetration testing, probing of public facing entities and scanning of the firewall for exploits. Clear pen test reporting with actionable insights.
-
KPMG LLP
KPMG offer a full range of tailored penetration testing services including vulnerability assessments, infrastructure and web application testing. We provide an independent, objective security assessment for your systems, highlighting risks from external and internal threats. These assessments allow technical risks to be identified enabling mitigating controls to be implemented.
-
CYBERLAB SECURITY LIMITED
CyberLab provides specialised penetration testing for UAV and UGV systems, assessing drone platforms, communications, and ground‑control infrastructure. We uncover vulnerabilities across firmware, sensors, wireless links, controllers, cloud integrations, and telemetry. Our testing identifies risks including unauthorised access, data manipulation, signal interference, and full device compromise to strengthen overall drone security.
-
SECARMA LIMITED
Wireless Penetration Testing simulates real-world attacks to assess your wireless infrastructure against these threats. We help organisations uncover and remediate wireless vulnerabilities before they’re exploited, supporting compliance, protecting sensitive systems, and keeping business operations running securely. Our testing ensures your wireless footprint doesn’t become a backdoor for attackers.
-
COMPUTING INFORMATION SYSTEMS LIMITED
Proactive security assurance replacing static assessments with continuous validation. We provide up to 12 scheduled penetration tests annually, ensuring infrastructure resilience against evolving threats. This recurring approach enables rapid vulnerability identification, real-time control validation, and ongoing risk assessment for a robust, always-on security posture
-
M8 SOLUTIONS LIMITED
Penetration testing identifies real-world security weaknesses before they are exploited. Trusted by the NHS, M8 Solutions delivers offensive CREST-accredited penetration testing that validates controls, strengthens resilience, and supports compliance. We provide safe, NHS-aware testing with minimal disruption, delivering clear, actionable insight that enables confident technical remediation and assured board-level decision-making.
-
NCC Group Security Services Limited
NCC Group's proactive, buildable continuous testing solution. Continuous Penetration Testing provides testing assurance for application and infrastructure security, with a dedicated agile team to provide real-time response to changes, events or discovered vulnerabilities. We offer continuous assurance for agile development teams, and advanced testing beyond attack surface discovery.
-
CREATIVE NETWORKS LIMITED
Our Penetration Testing & Ethical Hacking service identifies vulnerabilities in systems, networks, and applications through controlled, authorised testing. We provide actionable remediation recommendations, helping organisations improve security resilience and reduce the risk of breaches while supporting regulatory compliance.
-
PRICEWATERHOUSECOOPERS LLP
PwC's Ethical Hacking service provides penetration testing across as range of different technologies from Internal and external infrastructure testing to web application and red team services
-
SECARMA LIMITED
Mobile application security testing involves evaluating mobile platforms to identify and address vulnerabilities that malicious actors could exploit. Whether you're developing or updating an app, early testing helps protect sensitive data, ensure legal compliance, and avoid security missteps that can erode user trust and damage your brand.
-
SOFTSERVE SYSTEMS LTD
SoftServe’s Manual Penetration Testing Services help organisations identify security vulnerabilities in cloud-hosted systems through controlled, expert-led testing. The service focuses on simulating real-world attack scenarios to assess security weaknesses and provide actionable remediation recommendations, excluding remediation implementation or bespoke software development.
-
ZOONOU LIMITED
Our CREST-accredited Mobile Application Penetration Testing helps secure native and hybrid iOS and Android apps. Using OWASP MASVS and recognised methodologies, we simulate real-world attacks, uncover vulnerabilities, and provide actionable recommendations. Services support GDS standards, GDPR, secure-by-design principles, and IT Health Check (ITHC) preparation for informed risk management.
-
BARRIER NETWORKS LIMITED
Synack’s adversarial pentesting for point in time or continuous combines
testing by the Synack Red Team, an advanced testing platform and
integrated vulnerability operations to deliver a better pentest experience. •
On-demand for web, host, API and mobile • Blends automatic and
adversarial human analysis with the platform’s vulnerability management
-
ZOONOU LIMITED
Our Infrastructure and Network Penetration Testing services help organisations secure their core IT environments, including networks, servers, cloud infrastructure, and connected services. Using industry-recognised frameworks such as CIS Controls, NCSC guidance, and ISO 27001, we identify vulnerabilities and misconfigurations before they can be exploited, supporting assurance, compliance, and risk management.
-
3B DATA SECURITY LTD
We deliver expert external infrastructure penetration testing to uncover vulnerabilities, secure networks, and prevent cyberattacks. Our service combines real world experience, manual and automated testing, and comprehensive risk analysis. We support organisations to strengthen their external defences and maintain robust infrastructure security.