-
BRITISH TELECOMMUNICATIONS LIMITED
We provide global offensive security services, using ethical hacking to identify and remediate weaknesses across people, processes, applications, and infrastructure. Our experienced, certified consultants deliver structured penetration testing and tailored risk guidance, helping organisations strengthen security, protect their assets and reputation, and stay ahead of evolving cyber threats.
-
PHOENIX SOFTWARE LIMITED
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
SOFTCAT PLC
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy
-
CYBERLAB SECURITY LIMITED
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
CHESS ICT LIMITED
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting’s CREST Penetration Testing service provides the confidence you need that your cyber defences are appropriate and effective. Our expert penetration testers will analyse your cyber security vulnerabilities either remotely or in person, helping you strengthen your organisation against cyber-crime and reduce the risk of data breaches.
-
CLARANET LIMITED
Claranet delivers NCSC-assured CHECK penetration testing for UK public sector systems, aligned with HMG security standards. Covering asset types including web applications, networks, and employees, these services help organisations identify vulnerabilities and assess risks of data and system compromise from malware or malicious actors, strengthening resilience against evolving cyber threats.
-
CLARANET LIMITED
Claranet’s Continuous Security Testing (CST) provides ongoing vulnerability detection and validation across applications, APIs, external and internal infrastructure and endpoints.
Combining automated scanning with expert penetration testing, CST helps public sector organisations understand risk, reduce exposure windows, strengthen cyber resilience, and maintain compliance through proactive, continuous security assurance.
-
COFORGE U.K. LIMITED
Software testing is a process to ensure the software system is defect-free. It provides users with independent information about the quality of software and a risk-based assessment. It's a process to evaluate the functionality of a software application to find whether the developed software meets the designated requisite standards.
-
ARCANUM INFORMATION SECURITY LIMITED
Our Web Services / API Penetration Testing evaluates the security of APIs and backend services supporting modern and legacy applications. We assess authentication, authorisation, data exposure, rate-limiting and logic vulnerabilities, providing detailed remediation advice to ensure resilient service-to-service communication and protect sensitive data across connected systems.
-
QUALITEST GROUP UK LTD
Testing of connected devices/IoT: Hardware and firmware testing, platform testing, data and performance testing, UI/API automation, for Medical IoT devices, consumer IoT, home automation, smart meters, Highways Agency Traffic management, Ambulance and Fire management and Airwave/ESN communications. Automated end-to-end IoT testing with in-house phygital solutions and specialist IoT labs.
-
BRIDEWELL CONSULTING LIMITED
OSINT involves analysing publicly available information to identify key risks, vulnerabilities, potential data leaks, and how to address them.
Our highly certified OSINT team use the same tools and tactics as cyber attackers to simulate real attack scenarios, uncovering weaknesses as part of wider penetration testing.
-
RENAISSANCE COMPUTER SERVICES LTD
Managed penetration testing for cloud and internet-facing systems. We scope and coordinate the engagement, manage access and scheduling, and triage findings with clear remediation actions. Testing and certified assessor review are delivered by an approved specialist partner. CREST-accredited reports are delivered via our CREST-accredited partner.
-
PEN TEST PARTNERS LLP
We assess the security posture of your web applications. We identify risks and security issues providing recommendations on how to address these security issues to harden the applications to make them resilient to compromise. Highly skilled manual testing is conducted using proprietary web application OWASP top 10 methodologies.
-
IT LABS GROUP LTD
This service provides professional quality assurance and testing support for cloud-based applications. It includes test design, manual and automated testing, performance and scalability testing, infrastructure performance testing, accessibility testing, and operational readiness testing, delivered within buyer-owned cloud environments to reduce risk and improve service quality.
-
BECHTLE LIMITED
Penetration tests go beyond basic vulnerability scans by simulating real-world attacks on your systems. By actively exploiting weaknesses, they reveal flaws automated tools can miss, helping you understand exactly how an attacker could gain access or disrupt your operations.
These insights help to prioritise security investments and fix serious risks.
-
CODA SECURITY LIMITED
A range of technical assurance, vulnerability assessment, and penetration testing services tailored towards the secure handling of Police data and systems. This includes targeted assessments against legacy PNC services, PDS services, and pre-production or in-service LECP and NIAM approved Police services.
-
Resillion
An IT Health Check (ITHC) penetration test of applications, infrastructure and networks to support codes of connections (PSN, NHS etc..) and HMG and MOD accreditations for OFFICIAL, SECRET and TOP SECRET systems and networks.
-
SAFE HARBOUR SECURITY LTD
Safe Harbour Security delivers end-to-end penetration testing combining technical rigour with actionable insights. Using automated tools and expert manual techniques, we assess networks, systems, applications, APIs, and cloud environments. We identify vulnerabilities, evaluate controls, prioritise risks, and provide clear remediation guidance to strengthen security and reduce breach likelihood.
-
TESTINGXPERTS LIMITED
TestingXperts delivers comprehensive IoT testing services across devices, firmware, networks, platforms, and integrations. Tx validates functionality, performance, security, and interoperability using structured QA processes, domain expertise, and automation accelerators, enabling enterprises to deploy reliable, scalable, and secure connected ecosystems across diverse environments.
-
2T SECURITY LTD
Evolve delivers on-demand specialist security capabilities that augment your teams, build security capabilities into your business, and maximise security budgets delivering greater coverage and improved security posture of your business. This removes the need to hire additional employees, enabling your existing team to focus their time on strategic security activities.
-
ARCANUM INFORMATION SECURITY LIMITED
Our Operational Technology (OT) Penetration Testing evaluates the security of industrial control systems, OT networks and associated technologies such as PLCs, SCADA and DCS. Using specialised methodologies, we safely identify vulnerabilities that could impact operational continuity, safety or regulatory compliance, supporting resilience across industrial and critical-infrastructure environments.
-
TESTINGXPERTS LIMITED
TestingXperts provides comprehensive testing services throughout ERP program lifecycles, spanning rollout, upgrades, maintenance, and production support. With deep subject matter expertise in leading ERP QA packages and top-tier QA processes, frameworks, and accelerators, we assist clients in achieving their ERP objectives.
-
3B DATA SECURITY LTD
We provide PCI segmentation testing to validate that your Cardholder Data Environment (CDE) is properly isolated from non-PCI systems. Our service ensures compliance with PCI DSS requirements by identifying segmentation flaws, testing firewall rules, and verifying that network controls effectively prevent unauthorised access to sensitive data.
-
NIXINFINITY - AI LTD
Providing support to test the solutions developed across the sector. The principle followed is to assure quality assurance in any functionally and/or non-functionally solutions. This includes performing manual, automated or a combination of both.
-
MASTEK (UK) LTD.
This service includes the planning, development and operation of techniques and tools to support high-quality testing techniques for cloud systems and services including guerrilla testing, accessibility testing, lab-based user testing, remote usability/summative testing (quantitative), same day user testing (online qualitative), load and performance testing, vulnerability and penetration testing.
-
REPLY LIMITED
Safeguard your digital assets with our comprehensive penetration testing services. Our team of CREST-approved and CREST-certified ethical hackers simulates real-world attacks, identify security weaknesses before they become exploited. Gain actionable insights, prioritise remediation efforts, and achieve true security confidence.
-
ARCANUM INFORMATION SECURITY LIMITED
Our CNI Penetration Testing service delivers specialised assessments for CNI organisations, evaluating security across IT, OT and converged environments. Using threat-aligned techniques, we identify vulnerabilities that could impact essential services, providing actionable remediation advice that enhances resilience, supports regulatory obligations and strengthens protection against sophisticated threat actors targeting critical systems.
-
EVALIAN LIMITED
Consultancy and professional services to improve your cyber security posture, reduce cyber risk, meet cyber compliance requirements, meet data protection obligations, certify to ISO 27001 and ISO 22301, and identify technical vulnerabilities through CREST accredited penetration testing.
-
GLOBAL INITIATIVE LIMITED
Testing, validation, and assurance for cloud and software systems in regulated environments. We combine automated testing and deployment pipelines with risk based validation, security hardening, and audit ready evidence. We support operational readiness, clinical safety aligned assurance activities, and preparation for inspections and compliance submissions, within governance and regulatory responsibilities.