-
VERNOVI CYBER LTD
Vernovi Cyber provides IT Health Check (ITHC) and penetration testing services to identify vulnerabilities, security weaknesses and attack paths across cloud, web applications, networks and infrastructure. Assessments help organisations understand risk, validate controls and prioritise remediation. The service supports government, NHS, health and social care, education and other regulated organisations.
-
COGNISYS GROUP LIMITED
CREST-accredited firm delivering external, internal, web application, and cloud assessments across Azure and AWS. Qualified UK-based personnel (OSWE,OSCP,CRTO,CRT,CPSA). Secure code reviews and host compromise simulation included. ISO 27001, ISO 9001, NIST Directive, Cyber Essentials Plus compliant. Remote delivery.
-
BRIDEWELL CONSULTING LIMITED
With business systems becoming more automated, applications are a key target for threat actors.
Focusing on business systems, Bridewell will provide assurance for the security of applications at various stages of the design and implementation lifecycle, ensuring tests are conducted to meet defined testing requirements.
-
FSP CONSULTING SERVICES LIMITED
FSP has an experienced Attack Simulation Team offering a wide range of Pen Testing services for all of your organisational needs. All simulations provide actionable recommendations, and we can help your business by providing Cyber protection services for the cloud if you cannot remediate the risk yourself
-
PA CONSULTING SERVICES LIMITED
PA Consulting (PA) provides Cyber Security services including CREST accredited Penetration Testing. IT Health Check (ITHC) services identify ways in which an organisation’s applications and network services could potentially be compromised or manipulated through malicious activities carried out by an attacker
-
BRIDEWELL CONSULTING LIMITED
Internal and external testing focused at identifying weaknesses that could be exploited by a threat.
Bridewell’s experienced team are industry certified experts in the identification and exploitation of infrastructure vulnerabilities, aiming to provide you with the visibility required to mitigate them.
-
NCC Group Security Services Limited
NCC Group has a dedicated team of Threat Intelligence specialists focused exclusively on delivering intelligence support for regulatory schemes such as CBEST, GBEST, ATTEST, TBEST, and NBEST. The team brings extensive experience working with public-sector clients and regulators to ensure that all tests are underpinned by robust, high-quality TI processes.
-
ZOONOU LIMITED
Zoonou's Cyber Security Services help public sector organisations protect web, mobile, cloud, and core IT systems. Our security audits identify vulnerabilities, misconfigurations, and risks, supporting compliance with GDS Service Standards, UK GDPR, Secure by Design principles, and NCSC guidance, while enabling informed decision-making, assurance, and IT Health Check preparation.
-
JUMPSEC LIMITED
CHECK and CREST-certified specialist assessment of operational technology, control systems and industrial networks to identify exploitable weaknesses without disrupting safety or production.
-
BRIDEWELL CONSULTING LIMITED
Using business systems via mobile applications is the ‘new norm’, however, introduces a different risk profile.
Bridewell can test your iOS and Android mobile applications to provide assurance that these are developed and deployed securely and in line with security standards.
-
ACCENTURE (UK) LIMITED
Application security assessments identify security weaknesses in applications and provide mitigation recommendations. Our methodology is aligned to industry standards such as the OWASP testing guide, supplemented by our research into application security vulnerabilities.
-
MTI TECHNOLOGY LIMITED
MTI have experienced security consultants that help shape strategy, risk regimes, policies and training to secure public services. Our teams build integrated solutions from the worlds leading security vendors. Microsoft, Cisco, CyberArk, Forcepoint, Thales, Ivanti, Palo Alto Networks, AT&T, Trend, Varonis, VMware, Forescout, Rubrik, Quest and Manage Engine.
-
DIONACH LTD
Red Teaming, Purple Teaming and Threat-Led Penetration Testing (TLPT). We deliver bespoke simulated attack exercises for government departments including GBEST and GCASE engagements. We work with threat intelligence providers to create realistic attack scenarios designed to assess the organisation's security posture and resilience to (Advanced Persistent Threat) APT attacks.
-
COGNISYS GROUP LIMITED
Comprehensive WiFi and wireless security assessments covering network architecture, encryption protocols, and access controls. Tests identify configuration weaknesses, rogue access points, and client vulnerabilities. Site survey analysis and security posture evaluation included. Delivered by CREST-accredited professionals. Reports include prioritised remediation recommendations and compliance guidance aligned with regulatory standards.
-
SECARMA LIMITED
Adversary Simulation replicates the behaviours, techniques, and objectives of real-world threat actors to show how they would operate inside your environment. Rather than focusing on isolated vulnerabilities, it evaluates how well your organisation detects, responds to, and contains malicious activity.
-
SECARMA LIMITED
Our Red Team uses a controlled and covert approach, often known only to a select group within the organisation, to mirror the tactics, techniques, and procedures (TTPs) of real threat actors. We go beyond technical vulnerabilities to challenge your processes, people, and technologies.
-
AGILITY CYBER LIMITED
We offer independent, comprehensive security assessments of the highest standard. We are UK based, experienced in the public sector and certified to industry leading standards such as holding CREST Certified Tester. We have cleared consultants up to Developed Vetting (DV) level. Engagements can be delivered both on site and remotely.
-
AMBERWOLF LIMITED
AmberWolf’s advanced offensive security services combine threat-led assessment, real-world attack simulation, and applied research to help organisations validate security controls and strengthen resilience. Services include Red and Purple Teaming, Regulatory Threat-Led Penetration Testing/TLPT, Attack Path Mapping, Security Research, Product Efficacy Testing and RFP Bake-Offs, Gold and Black Team Reviews.
-
AGILITY CYBER LIMITED
We offer independent, comprehensive security assessments of the highest standard. We are UK based, experienced in the public sector and certified to industry leading standards such as holding CREST Certified Tester. We have cleared consultants up to Developed Vetting (DV) level. Engagements can be delivered both on site and remotely.
-
Six Degrees
Our Penetration Testing services give you the information you need to enhance your protection against ransomware and other cyber-attacks. All of our Penetration Testing services are delivered by experienced, qualified ethical hackers. We provide summary reports in an easy to digest format that contain expert advice for reducing attack surface.
-
QUALITEST GROUP UK LTD
Qualitest's medical devices security testing service provides coverage at cloud infrastructure, hardware, firmware and application levels. We help to prevent sensitive data leaks, security vulnerabilities and identify to buyers a risk and vulnerabilities profile for their medical devices to avoid security breaches.
-
3B DATA SECURITY LTD
We provide physical social engineering assessments to evaluate your organisation’s resilience against real-world intrusion attempts. Using proven techniques such as tailgating, impersonation, and pretexting, we identify weaknesses in physical access controls and staff awareness. Our service delivers actionable insights to strengthen security culture and prevent unauthorised access.
-
MAPLE NETWORKS LIMITED
Maple delivers targeted security testing across public cloud platforms and container/orchestrator stacks. We assess identities, configurations, network exposure and workload posture, validate real‑world attack paths, score findings with CVSS, and provide clear remediation guidance to reduce risk and strengthen resilience across multi‑cloud and hybrid environments.
-
BRIDEWELL CONSULTING LIMITED
Bridewell's red team assessment offers a realistic, end‑to‑end simulation of cyber‑attacks designed to test people, process, and technology. Using real threat actor techniques, the assessment identifies unknown risks, evaluates detection and response capabilities, and delivers actionable insights to strengthen organisational resilience. CREST, CHECK and NCSC Services Provider
-
AGILITY CYBER LIMITED
We offer independent, comprehensive security assessments of the highest standard. We are UK based, experienced in the public sector and certified to industry leading standards such as holding CREST Certified Tester. We have cleared consultants up to Developed Vetting (DV) level. Engagements can be delivered both on site and remotely.
-
AGILITY CYBER LIMITED
We offer independent, comprehensive security assessments of the highest standard. We are UK based, experienced in the public sector and certified to industry leading standards such as holding CREST Certified Tester. We have cleared consultants up to Developed Vetting (DV) level. Engagements can be delivered both on site and remotely.
-
AGILITY CYBER LIMITED
We offer independent, comprehensive security assessments of the highest standard. We are UK based, experienced in the public sector and certified to industry leading standards such as holding CREST Certified Tester. We have cleared consultants up to Developed Vetting (DV) level. Engagements can be delivered both on site and remotely.
-
JUMPSEC LIMITED
CHECK and CREST-certified testers assess corporate and guest wireless networks to identify weak encryption, rogue access points and opportunities for unauthorised access to internal systems.
-
BRIDEWELL CONSULTING LIMITED
Formal assurance that your organisation’s external systems are protected from unauthorised access or change.
Extending the security assurance of the PSN service, an ITHC provides assurance that your systems are not providing additional risk to connected systems. Bridewell’s experts will provide testing and reporting in line with set security standards.
-
AGILITY CYBER LIMITED
We offer independent, comprehensive security assessments of the highest standard. We are UK based, experienced in the public sector and certified to industry leading standards such as holding CREST Certified Tester. We have cleared consultants up to Developed Vetting (DV) level. Engagements can be delivered both on site and remotely.