-
PRISM INFOSEC
This service provides CREST-aligned penetration testing for web applications and APIs. Experienced security specialists assess technical controls using recognised methodologies to identify vulnerabilities and weaknesses. Findings are clearly documented in a comprehensive, easy-to-understand report with prioritised recommendations to support effective remediation and risk reduction.
-
PROTOS NETWORKS LIMITED
Protos provide CREST approved internal infrastructure penetration testing and vulnerability assessment services. To help organisations assess internal networks and identify known security weaknesses or vulnerabilities which could pose risks to critical infrastructure services. Providing contextual, concise and detailed reports removing false positives and sharing clear remediation advice.
-
BRIDEWELL CONSULTING LIMITED
Assumed Breach Testing simulates a real-world attacker operating inside your environment after an initial compromise. It assesses the impact of a breached low-privilege account, identifies defensive gaps beyond traditional penetration testing, and delivers actionable insights to strengthen detection, response, and overall security resilience.
-
Google Cloud EMEA Limited
Mandiant Penetration Testing provides comprehensive security assessments that simulate real-world cyberttacks to identify vulnerabilities across applications, networks, and cloud environments. Leveraging frontline threat intelligence, Mandiant's experts evaluate your defenses, providing actionable insights and remediation strategies to strengthen your security posture and proactively mitigate risks against sophisticated digital threats.
-
IJYI LTD
IJYI provides vulnerability assessment, penetration testing and cyber security testing services to help public sector organisations identify and manage security risks. The service covers infrastructure, applications and cloud environments and provides clear findings and remediation guidance. Delivery is provided by UK-based security specialists.
-
Qi Consulting
We can provide a Cyber Security testing service to support your Cloud-based solutions using selected specialist partners who are CHECK and CREST certified. This will be configured to meet your circumstances and requirements and includes security standards compliance auditing, e-security, penetration testing (CHECK scheme standards) and systems and network auditing.
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting’s Cyber Penetration Testing solutions will establish your baseline security position and define a road map to balance your risk appetite with your desired level of security. It will also be part of an ongoing structured program of security assurance activities to enable an appropriate level of cyber-resilience.
-
CLARANET LIMITED
Claranet provides penetration testing for public sector systems to identify vulnerabilities in networks, applications, and cloud environments. Our service follows industry best practice and NCSC guidance, delivering evidence-based reports with risk ratings and remediation advice. Available under G-Cloud Lot 3 for security assurance and vulnerability management.
-
3B DATA SECURITY LTD
We provide expert internal infrastructure penetration testing to uncover vulnerabilities within your organisation’s network and systems. Our approach combines manual and automated testing, real-world experience, and comprehensive risk analysis to identify weaknesses before they can be exploited. We support organisations to strengthen internal defences and protect their sensitive data.
-
HUNTER HEALTHCARE RESOURCING LIMITED
Hunter Healthcare delivers penetration testing and vulnerability assessment services in the NHS and Private-sector. We identify security weaknesses, misconfigurations and cyber risks across applications, networks, cloud platforms and user environments. Our specialists provide clear remediation guidance, governance reporting and assurance to strengthen resilience, improve security posture and protect sensitive data.
-
ZENSAR TECHNOLOGIES (UK) LIMITED
AI led Vulnerability Assessment and Penetration Testing (VAPT) service identifies, prioritises and validates security weaknesses across cloud, network and application environments. Using autonomous attack simulation with expert oversight, it safely exploits real world attack paths to assess risk exposure, strengthen security posture, support compliance with security testing and assurance requirements
-
3B DATA SECURITY LTD
We provide expert web application penetration testing to uncover vulnerabilities, secure sensitive data, and prevent cyberattacks. Our approach includes comprehensive security assessments, OWASP-aligned testing, and practical risk mitigation for websites and applications. We work with organisations to strengthen defences and ensure robust, reliable application security.
-
MAPLE NETWORKS LIMITED
Maple Networks’ Penetration Testing service identifies and safely exploits security vulnerabilities across infrastructure, applications, and cloud environments. Our pen test service simulates real-world attacks, it validates the effectiveness of security controls, providing actionable insights through detailed reporting, CVSS scoring, and remediation guidance to enhance organisational resilience against cyber threats.
-
INTEGRITY360 LIMITED
Integrity360’s Penetration Testing offer a range of services to meet any compliance needs. Continuous vulnerability management plays a key role in a well-functioning cyber security strategy by covering a variety of compliance requirements and protecting the business from the risks associated with security incidents.
-
Six Degrees
Our Penetration Testing services give you the information you need to enhance your protection against ransomware and other cyber-attacks. All of our Penetration Testing services are delivered by experienced, qualified ethical hackers. We provide summary reports in an easy to digest format that contain expert advice for reducing attack surface.
-
ARCANUM INFORMATION SECURITY LIMITED
Our Bespoke/Scenario-based penetration testing service provides tailored security assessments that replicate realistic threat scenarios specific to your organisation’s environment, objectives and risk profile. By simulating targeted adversary behaviour, our consultants identify exploitable weaknesses, validate current defences, and provide actionable remediation advice to improve resilience against sophisticated and emerging cyber threats.
-
TECKNUOVO LTD
We provide cyber security and penetration testing services enabling your teams to protect digital services.We apply risk-based security engineering, threat modelling and accredited testing aligned to NCSC guidance, identifying vulnerabilities, strengthening controls, and ensuring your platforms remain resilient, compliant, and secure throughout delivery and live operation. .
-
ITNEXTGEN LIMITED
ITNextGen's Security Testing Services provide security test professionals and security testers who identify vulnerabilities in public sector applications, infrastructure, and networks. We conduct penetration testing, vulnerability assessments, and security code reviews ensuring government systems meet NCSC guidance, Cyber Essentials Plus, and industry security standards.
-
PROTOS NETWORKS LIMITED
Protos provide CREST approved application penetration testing and vulnerability assessment services. To help organisations assess publicly exposed assets and identify known security weaknesses or vulnerabilities which could pose risks to critical infrastructure and application services. Providing contextual, concise and detailed reports removing false positives and sharing clear remediation advice.
-
3B DATA SECURITY LTD
We provide expert wireless penetration testing to uncover vulnerabilities in Wi-Fi networks and access points. Our approach combines manual and automated techniques with real-world threat intelligence to identify misconfigurations and security gaps, helping organisations strengthen wireless security, prevent unauthorised access, and protect sensitive data.
-
3B DATA SECURITY LTD
We provide expert API penetration testing across REST, GraphQL, SOAP, and microservices. Using manual and automated techniques combined with real-world threat intelligence, we identify authentication flaws, authorisation gaps, injection risks, and misconfigurations. We deliver actionable fixes that reduce attack surface, protect sensitive data, and strengthen your API security.
-
CYBERIS LIMITED
Cyberis offers an extensive range of technical security assessments and penetration testing services to the public and private sector, including NCSC CHECK IT Health Checks (ITHCs), to identify technical vulnerabilities and weaknesses across multiple systems and technologies, both cloud-based and traditional architectures, to mitigate the threats of data asset compromise.
-
GLOBALLOGIC CORP. UK LTD.
Comprehensive security assurance including SAST, DAST, penetration testing and container security. We secure software supply chains, harden infrastructure to CIS Benchmarks and mitigate OWASP Top 10 vulnerabilities. Delivery integrates seamlessly into DevSecOps pipelines for continuous vulnerability management and risk reduction across cloud, mobile and IoT environments.
-
FORTIS CYBER SECURITY LIMITED
Automated Penetration Testing as a Service (PTaaS) delivers fast, cost-effective, and continuous security assessments. Simulating real-world attacks, it identifies and validates vulnerabilities across internal and external networks, helping organisations strengthen security posture, maintain compliance, and reduce risk—supported by CREST accreditation and comprehensive, actionable reporting.
-
CODA SECURITY LIMITED
A range of services focused on testing, validating, and assuring the use of Azure cloud technologies. These include IT Health Checks, penetration tests, configuration audit, build review, and security review.
-
ACUITY APPLIED LIMITED
Acuity Applied Limited provides comprehensive quality assurance and testing services to support the delivery of high-quality digital services. Our specialists cover functional, non-functional (performance, load, stress, accessibility, security, penetration, and usability), automated, and exploratory testing. We also provide test architecture, strategy, planning, and management to ensure optimal outcomes.
-
CODA SECURITY LIMITED
A range of services focused on testing, validating, and assuring the use of Amazon Web Services (AWS) cloud technologies. These include IT Health Checks, penetration tests, configuration audit, build review, and security review.
-
CYBERFORT LIMITED
Cyberfort's team provide reliable independent assurance that applications, databases and associated infrastructure are protected from security threats. Using CREST and CHECK ITHC accredited methodologies we perform state of the art automated vulnerability scanning and carefully targeted manual testing to deliver an outstanding assessment across internal and external estates.
-
COGNISYS GROUP LIMITED
Cognisys conducts comprehensive web application pentests to assess security across web infrastructure and applications. Our CREST-accredited testers identify and expose vulnerabilities, test security controls, and assess weaknesses in application architecture. Testing covers the OWASP-Top-10, business logic issues, and data-handling processes. Detailed reports include exploitation impact analysis and prioritised remediation guidance.
-
BRIDEWELL CONSULTING LIMITED
Wireless penetration testing is performed to identify and exploit vulnerabilities in wireless networks, ensuring that unauthorised access, data breaches, and other security threats are mitigated to protect sensitive information.