-
D2NA
D2NA’s Security Assurance Services, aligned to our Cyber Ascend Framework, provide Penetration Testing, Red Teaming, Purple Teaming, Cyber Essentials/CE Plus, Security Health Checks, Cyber Attack Simulation. Designed for UK public‑sector needs, our accredited experts strengthen resilience, validate controls, and ensure compliance with government security and assurance standards.
-
BROOKCOURT SOLUTIONS LIMITED
Penetration testing provides in-depth investigation into security of web applications, mobile applications, infrastructure (external/internal); Server Build reviews, Wi-Fi, firewall assessments and connected/embedded devices (IOT /IC/SCADA). Red Teaming Assessments and Security Training workshops, delivered by experienced Security Consultants, simulate actions of a malicious threat actor, uncovering/classifying vulnerabilities used to exploit/damage businesses.
-
Instil
Instil provides penetration testing for APIs to identify vulnerabilities that could expose data or compromise services.
Testing focuses on authentication, authorisation, input validation, and business logic.
-
QUALITEST GROUP UK LTD
Qualitest's IoT Security Testing service provides thorough evaluations led by certified penetration testers. With meticulous attention, Qualitest's team tests and assesses your IoT ecosystem security to uncover vulnerabilities and minimise risks. IoT Security testing includes penetration, device software, firmware and hardware, data, network, API and more.
-
Resillion
Test WiFi network for security | Site sweep for rogue wireless devices | Regular sweep and test as required by PCI DSS | Wireless network configuration review and advice | Review and lockdown advice for wireless capable devices | Wireless access point penetration testing
-
COMPLETE QUALITY ENGINEERING LIMITED
CQE’s Non-Functional Testing and assurance service includes:
performance, security, penetration, compliance, compatibility, usability,
accessibility, maintenance, operational acceptance, resilience, and
disaster recovery. We provide individual Non-Functional Testing
specialists, teams, consultancy and/or managed services to deliver the
optimum 'Shift Left’ Non-Functional Testing approach.
-
NRD PARTNERS LTD
NRD Partners delivers IT Health Check penetration testing for public sector systems, identifying vulnerabilities, attack paths, and control weaknesses. Assessments align to UK Government and NCSC guidance, providing evidence-based findings and practical remediation advice to support accreditation, assurance, and informed risk-based security decisions across critical digital services and platforms.
-
ACCENTURE (UK) LIMITED
Penetration testing aims to uncover security weaknesses in IT systems based on specific needs and targeted scope. We offer a range of offensive security testing services. From traditional penetration testing focused on individual applications, networks or services, to phishing simulations and in-depth simulated attacks.
-
MONDAS CONSULTING LTD
Continuous penetration testing replaces one-off assessments with ongoing, adaptive security validation. It continuously identifies new vulnerabilities, verifies remediation, supports compliance, and reflects real operational change through continuous penetration testing. This provides stronger assurance, whilst also providing better prioritisation and reduced exposure time.
-
INCURSION CYBER SECURITY LTD
Penetration testing by a Cyber Scheme Accredited Company. Consultants hold UK Cyber Security Council professional titles. We test web applications, APIs, mobile apps, external and internal infrastructure, cloud (AWS, Azure, Microsoft 365), wireless, physical security and build configurations. Manually written reports within 5 working days, with free retesting.
-
LAYER 7 LIMITED
We deliver independent IT Health Checks using CHECK and CREST-aligned methodologies to identify security weaknesses across applications, infrastructure and cloud environments. Our accredited testers assess technical vulnerabilities, configuration weaknesses and control effectiveness, providing clear, risk-based findings to support remediation and assurance decisions.
-
Resillion
Test wireless network for security | Site sweep for rogue wireless devices | Regular sweep and test as required by PCI DSS | Wireless network configuration review and advice | Review and lockdown advice for wireless capable devices | Wireless access point penetration testing
-
CYBER SECURITY ASSOCIATES LTD
CSA’s Penetration Testing as a Service provides continuous, expert‑led security testing across networks, applications, cloud and APIs. Combining automated scanning with manual validation, PTaaS delivers real‑time findings, on‑demand retesting, prioritised remediation guidance and actionable reporting, helping organisations identify vulnerabilities early, reduce risk and maintain strong, ongoing security assurance.
-
MTEST LABS LIMITED
MTEST Labs delivers manual and automated mobile application testing to CREST standards, with penetration testing through our certified cyber security consultants; providing services on all operating systems, including iOS, Android and Windows, to OWASP Top 10 standards to identify cyber security vulnerabilities and weaknesses, with solution recommendations, satisfying user needs.
-
INTEGRITY360 LIMITED
PTaaS provides a flexible and continuous approach to penetration testing requirements, particularly for organisations that have an ongoing need for assessments and identification of exposures, due to constant infrastructure changes, more rapid application development cycles, and the expansion of the attack surface.
-
ARCANUM INFORMATION SECURITY LIMITED
Arcanum is a National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy in Risk Management, Audit & Review and Security Architecture. We are CHECK and CREST Accredited for Pen Testing and deliver assessments for clients of all sizes and sectors. Our testers are accredited by the UK Cyber Security Council.
-
SOFTCAT PLC
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy
-
CYBERLAB SECURITY LIMITED
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
CHESS ICT LIMITED
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy
-
PHOENIX SOFTWARE LIMITED
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
Wavenet
CyberGuard delivers expert penetration testing to uncover security weaknesses in networks, applications, and infrastructure. Accredited by CREST and NCSC CHECK, our service combines rigorous assessment with actionable remediation advice, helping organisations strengthen defences, meet compliance standards, and reduce cyber risk through comprehensive, tailored testing methodologies.
-
C3IA SOLUTIONS LIMITED
C3IA’s Security Testing services identify vulnerabilities, tests security measures, and simulates real world attacks to protect critical systems. Early risk detection ensures compliance, enhances organisational resilience, and maintains operational integrity, providing robust protection for mission critical environments through methodologies including IT Health Checks, Penetration Testing, and Vulnerability Assessments.
-
BRIDEWELL CONSULTING LIMITED
Bridewell Provide a range of CREST Accredited Services for Security Operation Centre, Incident Response, Incident Exercises, Intelligence Led Penetration Testing and Red Team, Penetration Testing and Vulnerability Assessments.
-
REDROCK CONSULTING LIMITED
RedRock identify security vulnerabilities through comprehensive security assessments and penetration testing. Our certified ethical hackers test applications, infrastructure, and networks using manual and automated techniques, providing detailed findings and remediation guidance that improve security posture before attackers can exploit weaknesses.
-
QUALITEST GROUP UK LTD
Safeguard your organisation with our independent Cloud Security Testing. Our cyber-security testing suite assesses and identifies vulnerabilities covering cloud-hosted network and infrastructure solutions (including Azure, AWS, GCP, Oracle, Fujitsu, Alibaba, IBM, Tencent, OVHcloud, DigitalOcean, Linode, private/hybrid cloud), and cloud-hosted applications. Our cloud security testing services includes independent network security assessments.
-
BRICKENDON CONSULTING LIMITED
Brickendon specialises in comprehensive cybersecurity testing, including penetration testing and vulnerability assessments, enabling organisations to identify and address weaknesses in their digital infrastructure before they are exploited by malicious actors. We help organisations to mitigate risks effectively and protect what matters most in the digital age.
-
ASPIRE TECHNOLOGY SOLUTIONS LTD
Aspire provide CREST-accredited penetration testing designed to improve your organisations cybersecurity posture by identifying and addressing vulnerabilities and weaknesses in your infrastructure before malicious actors can exploit them. Our approach aligns with the Penetration Testing Execution Standard (PTES) framework, a globally recognised and respected set of guidelines for ethical hacking.
-
SECQUEST INFORMATION SECURITY LTD
At SecQuest, we are an NCSC assured CHECK provider who specialises in penetration checks, IT health checks, and security audits. We can provide cloud security audits and reviews, which can help ensure compliance to regulations, as well as ensuring your cloud services are secure against the latest threats.
-
DIGITALXRAID LTD
Mobile Application Penetration Testing assesses security from the perspective of an attacker attempting to identify weaknesses in Android and iOS applications. Testing evaluates whether vulnerabilities could allow application compromise or unauthorised access to sensitive data. Assessments are performed from both unauthenticated and authenticated perspectives,
-
3B DATA SECURITY LTD
We provide advanced threat intelligence-led penetration testing to identify emerging risks and adversary tactics targeting your organisation. By leveraging real-world threat data, we simulate realistic attack scenarios, prioritise vulnerabilities based on active threat trends, and deliver actionable insights to strengthen your security posture against evolving cyber threats.