-
CYBER SECURITY ASSOCIATES LTD
CSA Cyber’s Specialist Penetration Testing delivers deep‑dive, research‑led assessments across AI/ML, embedded devices, IoT ecosystems and Operational Technology. Senior consultants apply adversary‑style techniques to uncover vulnerabilities scanners miss, providing risk‑prioritised reporting and pragmatic remediation guidance. Engagements are tailored to complex environments, delivering high‑fidelity assurance without disrupting critical operations.
-
DIONACH LTD
Dionach are a NCSC CHECK Green Light provider of manual penetration testing services. Dionach will identify security weaknesses and vulnerabilities in the target systems, and produce a comprehensive and detailed report in line with NCSC's requirements, outlining the issues identified and practical recommendations on how to resolve them
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting provides Non-Functional tests and Functional testing in line with your requirements. Performance testing and automatic test scrips can be developed and run. On and off-site tests can be performed utilising key testing tools and techniques, in line with relevant Agile, Prince or other Methodologies.
-
Instil
Instil provides penetration testing for mobile applications on iOS and Android to identify security weaknesses in mobile-specific contexts.
Testing focuses on client-side behaviour, data storage, and backend interaction.
-
PRISM INFOSEC
A CREST & NCSC CHECK accredited provider delivering IT Health Checks (ITHC) and penetration testing for cloud services and applications. Our service covers all elements required for a comprehensive scope, fully aligned with NCSC guidance to ensure compliance and robust security assurance.
-
TRUSTMARQUE SOLUTIONS LIMITED
Delivery of a wide range of penetration and security testing services.
-
ITogether
ITogether offers penetration testing services conducted by CREST-certified professionals to assess the security of IT systems. This service simulates realistic cyber-attacks to identify vulnerabilities in network, applications, and systems, providing businesses with a clear path to enhance their cyber resilience.
-
COGNISYS GROUP LIMITED
Cognisys conducts comprehensive infrastructure pentest assessing security across networks, systems, and devices. Our CREST-accredited testers identify vulnerabilities, assess weaknesses, and report likelihood of breaches. Testing identifies default configurations, weak credentials, and exploitable settings. Detailed reports include vulnerability analysis, exploitation impact assessment, and prioritised remediation recommendations
-
CYBER SECURITY ASSOCIATES LTD
CSA Cyber’s AI/ML Penetration Testing service delivers research led security assessments across conversational AI, agentic LLM systems, model hosting, pipelines, and training data. Using manual, adversarial techniques aligned to OWASP LLM Top 10, our experts uncover AI‑specific vulnerabilities, providing clear remediation guidance to strengthen resilience across the full AI lifecycle.
-
3B DATA SECURITY LTD
We provide specialist penetration testing for IoT and SCADA/ICS environments to identify vulnerabilities that could impact safety, availability, and data integrity. Combining OSINT, configuration review, protocol analysis, and controlled exploitation, we assess embedded devices, gateways, and control networks to harden operational technology without disrupting production.
-
3B DATA SECURITY LTD
We provide expert Penetration Testing and IT Health Checks under the NCSC CHECK scheme. We identify vulnerabilities, assess security risks, and ensure compliance across networks, applications, and infrastructure to protect organisations against cyber threats and optimise IT performance.
-
CCL-FORENSICS LIMITED
CCL are accredited by NCSC (under the CHECK scheme to deliver IT Health Checks (ITHC, penetration testing, pentesting). Our certified security consultants can assess all systems including web applications, mobile applications, wireless, infrastructure and cloud services. Our tailored services help identify your unique threats and vulnerabilities.
-
MAPLE NETWORKS LIMITED
Maple conducts targeted penetration tests of external and internal infrastructure to uncover exploitable weaknesses across networks, hosts, and services. Our pen testing service verifies real‑world impact under written authorisation, score findings with CVSS, and deliver practical remediation guidance to reduce risk and strengthen operational resilience.
-
DIONACH LTD
AI penetration testing evaluates the security of AI systems/applications, simulating real-world cyber attacks to identify vulnerabilities, weaknesses and potential security risks specific to AI systems. Dionach specializes in testing systems that use machine learning (ML) and Large Language Models (LLMs), ensuring they are safe as possible from evolving cyber threats.
-
INFUSE CONSULTING LIMITED
Infuse is a specialist provider of independent security testing services.
The service provides security test professionals together with our proven OSSTMM (Open-Source Security Testing Methodology Manual). The OSSTMM is a peer-reviewed methodology for performing security and penetration tests and is the de-facto standard for security testing.
-
DEMYSTIFY SECURITY LIMITED
ITHC management services coordinating independent penetration testing to meet regulatory and assurance requirements. We manage scope, accredited testers, remediation tracking and reporting, acting as a single point of contact to ensure timely, high-quality assurance aligned with organisational risk and compliance needs.
-
CODA SECURITY LIMITED
An internal or external assessment of technical and organisational security by an NCSC CHECK accredited team. This IT Health Check activity can include penetration testing, build reviews, firewall rule audits, internal and external penetration testing, and source code review. These are dependent on the accreditation requirements and scope.
-
PA CONSULTING SERVICES LIMITED
PA Consulting provides Cyber Security services including CREST accredited Penetration Testing. Our experience enables us to provide assurance of critical systems, including cloud (AWS, Azure, GCP) and hybrid environments. We can assess endpoints, build and configuration, firewall rules, switches, infrastructure, Active Directory, embedded devices, mobile and binary applications
-
CYBERFORT LIMITED
Our consultants attempt to breach security of internal and external networks and attempt to gain access to resources and sensitive information through a broad evaluation of the systems in place. Tests are conducted primarily as an outsider or via internal compromised network connection to attempt access.
-
Nortal UK
Our consultants attempt to breach security of internal and external networks and attempt to gain access to resources and sensitive information through a broad evaluation of the systems in place. Tests are conducted primarily as an outsider or via internal compromised network connection to attempt access.
-
SAPPHIRE TECHNOLOGIES LIMITED
Threat-Led Penetration Testing (TLPT), also known as Red Team Testing is an enhanced and controlled security test to attempt to compromise the cyber resilience of a system or network by simulating the tactics, techniques and procedures of real-life threat actors. Our TLPT assess critical attack pathways to understand security posture.
-
Stone Technologies Limited Trading as Converge Technology Solutions
Good security practice involves regular testing of your IT infrastructure for vulnerabilities and exploitable weaknesses. Penetration Testing, also referred to as Pen Testing or ethical hacking, is an authorised attack on a network, web/mobile application, or a Wi-Fi network to find security vulnerabilities that an attacker could exploit.
-
Nortal UK
Comprehensive system assurance meeting all requirements of the NCSC CHECK IT Health Check (ITHC). Fully managed, fixed price CHECK assessments across SaaS, PaaS and IaaS hosted locally or within Microsoft Azure, Amazon Web Services (AWS) and on VMWare based and open-source virtualisation platforms.
-
CYBERFORT LIMITED
Comprehensive system assurance meeting all requirements of the NCSC CHECK IT Health Check (ITHC). Fully managed, fixed price CHECK assessments across SaaS, PaaS and IaaS hosted locally or within Microsoft Azure, Amazon Web Services (AWS) and on VMWare based and open-source virtualisation platforms.
-
DELL CORPORATION LIMITED
Dell Technologies Security Services delivers end-to-end advisory, implementation, and managed protection across multicloud—covering identity, endpoints, data, apps, and infrastructure—leveraging Dell security and partners. Offerings include assessments, cloud security build-out, and operations: MDR, vulnerability management, penetration testing, and incident recovery retainers to harden posture, reduce risk, and accelerate outcomes.
-
PRISM INFOSEC
This service delivers structured penetration testing for mobile applications and supporting APIs or infrastructure. Experienced security specialists follow recognised methodologies to identify vulnerabilities and weaknesses. Findings are presented in a clear, comprehensive report with prioritised recommendations to support effective remediation and improved mobile application security.
-
FOREGENIX LTD
Services tailored to test your defences and detect weaknesses before attackers do, delivering effective security bleeding-edge techniques, methodologies & effective development and implementation of a range of Adversarial and Assurance services
-
ACCENTURE (UK) LIMITED
A full lifecycle service to provide functional and non-functional testing of multi-channel products and services (web, mobile, app, TV, wearable devices) in B2B or B2C environments. Our services include full stack testing (unit, story, integration, performance, penetration, acceptance), introduction of improved tools/techniques, software designed for testing and improved collaboration/knowledge sharing.
-
ACCENTURE (UK) LIMITED
A full lifecycle service to provide functional and non-functional testing of multi-channel products and services (web, mobile, app, TV, wearable devices) in B2B or B2C environments. Our services include full stack testing (unit, story, integration, performance, penetration, acceptance), introduction of improved tools/techniques, software designed for testing and improved collaboration/knowledge sharing.
-
NORTHDOOR PLC
Penetration Testing as a Service / Vulnerability Management: Delivers continuous, automated testing to uncover and prioritise vulnerabilities across your IT environment. Expert-led remediation guidance helps you fix weaknesses quickly, keeping your systems secure between formal assessments. Leverages solutions from Edgescan; Cybertec Security; Jump-Sec and Pentiq