-
PRISM INFOSEC
This service delivers NCSC CHECK and CREST-aligned infrastructure penetration testing to identify exposed hosts, services, and vulnerabilities across network environments. Combining automated scanning with expert analysis, we provide clear, actionable assurance to support risk reduction, regulatory compliance, and informed security decision-making.
-
CODA SECURITY LIMITED
A range of services focused on the delivery of through-life technical assurance of Government systems. This includes integration with service reviews, DevSecOps service design and support, CI/CD pipeline reviews, development of threat models and test cases, and the provision of targeted vulnerability research and penetration testing activities.
-
ARCANUM INFORMATION SECURITY LIMITED
Arcanum is an NCSC Assured ‘Green Light’ Service Provider of CHECK Penetration Testing and ITHCs. We provide comprehensive penetration testing that follows the methodology and meets the standards of the NCSC CHECK scheme.
-
DIGITALXRAID LTD
DigitalXRAID provides PCI DSS Penetration Testing of infrastructure and web applications. Our penetration testing specialists are highly experienced professionals. We help organisations understand cyber risk, security vulnerabilities and the business impact if exploited.
-
GET SWARMS LIMITED
Our Swarms provide Functional and non-functional testing, including performance testing and test automation. Our testing process ensures the software system is defect-free. It provides users with independent information about the quality of software and a risk-based assessment. It's a process to evaluate the functionality of a software application.
-
Instil
Instil conducts internal and external penetration testing to assess network security from both inside and outside organisational boundaries.
Testing simulates realistic attacker behaviour to identify weaknesses in infrastructure and access controls.
-
TESTINGXPERTS LIMITED
TestingXperts provides specialised Blockchain testing services across design, development, integration, and operations. Tx validates smart contracts, consensus mechanisms, nodes, and transactions using structured QA processes, security-led testing, and automation accelerators, enabling enterprises to deploy scalable, secure, compliant, and trustworthy decentralized platforms with confidence.
-
3B DATA SECURITY LTD
We provide expert firewall rule base and configuration penetration testing across Cisco, Palo Alto, Fortinet, Check Point, AWS, and Azure. Our manual and automated analysis identifies overly permissive rules, shadowed policies, segmentation gaps, weak NAT, and logging issues. Providing actionable hardening guidance to reduce attack surface and improve detection.
-
TESTINGXPERTS LIMITED
TestingXperts provides Managed Cybersecurity Testing and Monitoring through continuous vulnerability scanning, penetration testing, security monitoring, and incident readiness. Using Tx-Secure (Wazuh-based), SIEM, and threat intelligence, we deliver 24x7 coverage, rapid detection, and proactive mitigation. Our managed model ensures ongoing protection aligned with MITRE ATT&CK and compliance frameworks.
-
PENTEST CYBER LTD
Full range of pro-tools OSWE CSTL level penetration testing ITHC, Cyber Essentials Plus and IASME Cyber Assurance L1 and 2 services to CREST and other industry standards.
-
PRISM INFOSEC
Our ITHC penetration testing services are NCSC CHECK & CREST-Approved and delivered by our team of experienced penetration testers and application security experts who follow formal methodologies to assess an application’s security controls for vulnerabilities and weaknesses and deliver a comprehensive, yet easy to decipher report.
-
CYBER SECURITY SPECIALISTS LIMITED
The Cyber Security Specialists Penetration Testing service is CREST-accredited over a decade of experience in scoping and providing Penetration Testing to Clients of all different shapes and sizes from start-ups and Digital Agencies to multinationals and Public Sector Organisations.
-
SAPPHIRE TECHNOLOGIES LIMITED
Sapphire provides CREST-certified project penetration testing assessments for customers requiring standalone testing. Assessments of a customer’s vulnerabilities align with recognised industry standards.
Testing is undertaken using custom toolkits and well-established commercial tools to provide a unique and thorough assessment which is not possible using automated vulnerability scanners.
-
DBAAS LTD
We provide expert testing design and consulting services to help organisations achieve high‑quality software delivery. Our team defines effective test strategies, creates structured test plans, and offers guidance on best practices. We ensure robust validation, improved performance, and reliable outcomes through tailored testing frameworks aligned with business and technical requirements.
-
ESYNERGY SOLUTIONS LIMITED
We provide end-to-end quality assurance frameworks that ensure complete test coverage and support automated testing. We deliver functional testing, integration testing, penetration testing, security testing, and code coverage, all integrated into modern CI/CD pipelines. We minimise manual intervention, reduce defects, and deliver high-quality, reliable services that adhere to GDS standards.
-
QUALITEST GROUP UK LTD
Non-Functional Testing (NFT), engineering and assurance including: performance, security, penetration, compliance, compatibility, usability, accessibility, operational acceptance, resilience, monitoring, alerting, fail-over and disaster recovery testing. Services include Test Consultants and architects, testing teams, and managed services to implement tailored strategies and 'Shift-Left’ Non-Functional Testing (NFT) approaches aligned to your delivery methodology.
-
3B DATA SECURITY LTD
We provide expert cloud penetration testing for M365, GCP, Azure, and AWS environments. Our approach combines manual and automated techniques with real-world threat intelligence to uncover misconfigurations and vulnerabilities, helping organisations strengthen cloud security, reduce risk, and protect sensitive data across critical platforms.
-
VODAFONE LIMITED
Tailored solutions/consultancies to support security strategy. Our portfolio includes, but not limited to, Penetration & Webapp testing, Incident Response and security reviews
Features: Cyber Security Review, Incident Response Services, Spectrum Testing, Consultancy, Customer Account Security Manager, Penetration Testing.
Benefits: understand security maturity, security strategy, Incident support, Compliance and governance support
-
QUALITEST GROUP UK LTD
Blockchain and Distributed Ledger quality assurance and testing: Qualitest's certified blockchain testing quality engineers ensure seamless data flows and data privacy across nodes by verifying business processes, roles, permissions, and order of alignment in your ledger. Blockchain and Distributed Ledger test automation and continuous testing, Blockchain platform testing, security testing.
-
ARCANUM INFORMATION SECURITY LIMITED
External Infrastructure Testing assesses the security of internet-facing systems, networks and services. By identifying vulnerabilities reachable from outside the organisation, we help clients reduce exposure, strengthen boundary controls, and prevent unauthorised access attempts that could compromise business-critical operations or sensitive information. Testing is conducted by our NCSC Assured CHECK team.
-
DATA CAREERS LIMITED
Data Careers’ Testing-as-a-Service provides SDLC end-to-end software testing and quality assurance services. We deliver ISTQB qualified and DDaT aligned specialists and or teams; rapidly deployed, with BPSS, SC, DV, NPPV clearances, which augments customer teams, or provides a complete outcome-based service, meeting GDS, WCAG, TCoP, GDPR, NCSC standards.
-
SECARMA LIMITED
Objective-Led Testing is a targeted security assessment built around the specific goals an attacker would pursue — such as accessing sensitive data, escalating privileges, or bypassing a critical control. Instead of testing everything, we concentrate on the scenarios that matter most to provide concentrated and meaningful insight.
-
CHANGE SPECIALISTS LIMITED
Change Specialists provides Quality Assurance and Software Testing services to assure the quality, performance and reliability of systems and software. We support buyers by planning and executing testing activities, identifying defects and risks, and providing clear reporting to support confident deployment and operational readiness.
-
NCC Group Security Services Limited
Our Advanced Application Security Testing (AAST) service provides a more in-depth automated authenticated assessment of a web application, combining multiple web application scanners with manual validation and testing to provide a much more comprehensive assessment than a standard web app scan.
-
MOORE STEPHENS INSIGHT LIMITED
Moore Insight will ensure you have properly tested ERP systems including Finance, Procurement, HR and Payroll. We will help you develop a testing strategy and provide test scripts. We will support the execution and documentation of tests including User Acceptance Testing (UAT); and management of issues.
-
ZOONOU LIMITED
Our Web and Mobile Application Testing services help public sector teams deliver reliable, user-centric digital services across browsers, iOS, Android, and other platforms. We provide software testing and quality assurance (QA) across functional, exploratory, regression, non-functional, performance, penetration, accessibility, UAT testing, and real-device compatibility checks.
-
TRUSTACK LIMITED
Penetration Testing as a Service (PTaaS) combining automated scanning with expert-led testing. Includes biannual testing, real-time reporting dashboard, exploit path mapping, remediation guidance, and two subsequent retests.
-
CAPGEMINI UK PLC
Capgemini's Red Teaming service is designed to simulate sophisticated cyber-attack scenarios to test the detection and response capability of an organisations security monitoring and operations teams. Advanced techniques are used to test physical building security, employee security awareness as well as external and internal infrastructure, applications and cloud services.
-
TALENT INTERNATIONAL (UK) LIMITED
Cloud QA & Performance Testing delivers quality engineering for cloud services. We build automated test frameworks, integrate them into CI/CD, and run load, stress, volume, soak and scalability tests with capacity planning. We provide end-to-end assurance, operational readiness, and engage third parties for accessibility and penetration testing to statutory standards.
-
MAPLE NETWORKS LIMITED
Maple performs targeted wireless penetration testing to uncover weaknesses across Wi‑Fi infrastructure, client onboarding, authentication and encryption. Our pen testing serivce validates real‑world attack paths, assess segmentation and guest networks, and provide CVSS‑scored findings with clear remediation guidance to reduce risk and strengthen secure, reliable wireless operations.