-
BECHTLE LIMITED
Penetration tests go beyond basic vulnerability scans by simulating real-world attacks on your systems. By actively exploiting weaknesses, they reveal flaws automated tools can miss, helping you understand exactly how an attacker could gain access or disrupt your operations.
These insights help to prioritise security investments and fix serious risks.
-
CODA SECURITY LIMITED
A range of technical assurance, vulnerability assessment, and penetration testing services tailored towards the secure handling of Police data and systems. This includes targeted assessments against legacy PNC services, PDS services, and pre-production or in-service LECP and NIAM approved Police services.
-
Resillion
An IT Health Check (ITHC) penetration test of applications, infrastructure and networks to support codes of connections (PSN, NHS etc..) and HMG and MOD accreditations for OFFICIAL, SECRET and TOP SECRET systems and networks.
-
SAFE HARBOUR SECURITY LTD
Safe Harbour Security delivers end-to-end penetration testing combining technical rigour with actionable insights. Using automated tools and expert manual techniques, we assess networks, systems, applications, APIs, and cloud environments. We identify vulnerabilities, evaluate controls, prioritise risks, and provide clear remediation guidance to strengthen security and reduce breach likelihood.
-
TESTINGXPERTS LIMITED
TestingXperts delivers comprehensive IoT testing services across devices, firmware, networks, platforms, and integrations. Tx validates functionality, performance, security, and interoperability using structured QA processes, domain expertise, and automation accelerators, enabling enterprises to deploy reliable, scalable, and secure connected ecosystems across diverse environments.
-
2T SECURITY LTD
Evolve delivers on-demand specialist security capabilities that augment your teams, build security capabilities into your business, and maximise security budgets delivering greater coverage and improved security posture of your business. This removes the need to hire additional employees, enabling your existing team to focus their time on strategic security activities.
-
ARCANUM INFORMATION SECURITY LIMITED
Our Operational Technology (OT) Penetration Testing evaluates the security of industrial control systems, OT networks and associated technologies such as PLCs, SCADA and DCS. Using specialised methodologies, we safely identify vulnerabilities that could impact operational continuity, safety or regulatory compliance, supporting resilience across industrial and critical-infrastructure environments.
-
TESTINGXPERTS LIMITED
TestingXperts provides comprehensive testing services throughout ERP program lifecycles, spanning rollout, upgrades, maintenance, and production support. With deep subject matter expertise in leading ERP QA packages and top-tier QA processes, frameworks, and accelerators, we assist clients in achieving their ERP objectives.
-
3B DATA SECURITY LTD
We provide PCI segmentation testing to validate that your Cardholder Data Environment (CDE) is properly isolated from non-PCI systems. Our service ensures compliance with PCI DSS requirements by identifying segmentation flaws, testing firewall rules, and verifying that network controls effectively prevent unauthorised access to sensitive data.
-
NIXINFINITY - AI LTD
Providing support to test the solutions developed across the sector. The principle followed is to assure quality assurance in any functionally and/or non-functionally solutions. This includes performing manual, automated or a combination of both.
-
MASTEK (UK) LTD.
This service includes the planning, development and operation of techniques and tools to support high-quality testing techniques for cloud systems and services including guerrilla testing, accessibility testing, lab-based user testing, remote usability/summative testing (quantitative), same day user testing (online qualitative), load and performance testing, vulnerability and penetration testing.
-
REPLY LIMITED
Safeguard your digital assets with our comprehensive penetration testing services. Our team of CREST-approved and CREST-certified ethical hackers simulates real-world attacks, identify security weaknesses before they become exploited. Gain actionable insights, prioritise remediation efforts, and achieve true security confidence.
-
ARCANUM INFORMATION SECURITY LIMITED
Our CNI Penetration Testing service delivers specialised assessments for CNI organisations, evaluating security across IT, OT and converged environments. Using threat-aligned techniques, we identify vulnerabilities that could impact essential services, providing actionable remediation advice that enhances resilience, supports regulatory obligations and strengthens protection against sophisticated threat actors targeting critical systems.
-
EVALIAN LIMITED
Consultancy and professional services to improve your cyber security posture, reduce cyber risk, meet cyber compliance requirements, meet data protection obligations, certify to ISO 27001 and ISO 22301, and identify technical vulnerabilities through CREST accredited penetration testing.
-
GLOBAL INITIATIVE LIMITED
Testing, validation, and assurance for cloud and software systems in regulated environments. We combine automated testing and deployment pipelines with risk based validation, security hardening, and audit ready evidence. We support operational readiness, clinical safety aligned assurance activities, and preparation for inspections and compliance submissions, within governance and regulatory responsibilities.
-
Advania
Advania’s Managed Assurance Service delivers continuous compliance and risk oversight. We combine advanced monitoring, governance frameworks, and expert analysis to ensure security, regulatory alignment, and operational resilience. Our proactive approach identifies gaps early, mitigates risks, and provides actionable insights, giving organisations confidence in their compliance posture and business continuity.
-
PGI - PROTECTION GROUP INTERNATIONAL LTD.
PGI offer full, CREST and CHECK approved penetration testing. Expertise covers wide range including web applications, infrastructure and mobile platforms ensuring thorough testing and a strong commitment to safeguarding your digital assets. PGI’s IT Health Check ITHC support PSN Compliance and provide in-depth technical assessments to identify and address vulnerabilities.
-
JUMPSEC LIMITED
Manual, scenario-led security testing of web applications by CREST-certified testers to uncover access control flaws, injection issues, logic abuse and data exposure that automated scanners miss.
-
GET SWARMS LIMITED
Penetration Testing Solution offered by Get Swarms provides comprehensive assessments to bolster organisation security. By simulating real-world cyber-attacks, we uncover vulnerabilities in networks and applications, enabling proactive defense measures. Detailed reports are produced together with proposed remediations to support ongoing cyber defence strategy.
-
CYPRO CONSULTING LTD
Understand what direction your business needs to head in for cyber security, what should be prioritised and importantly, de-prioritised. Establish a baseline current state, a desired target state and a risk remediation roadmap that achieves both your risk management and commercial goals.
-
CAPGEMINI UK PLC
Capgemini provide CREST and Cyber Scheme certified Infrastructure and Application experts delivering penetration tests using CHECK and CREST methodologies. Refined to identify weaknesses and vulnerabilities found in infrastructure, web and mobile applications, cloud environments and external or remote-access solutions. Our tailored services help identify threats and vulnerabilities to your systems.
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Our Michael Page Consulting Cloud Testing service provides a flexible range of full end to end testing services. Whether required on or off-site we combine industry expertise to ensure we achieved the highest quality service against your test strategy.
-
FORFEND INFORMATION SECURITY LTD
Forfend Information Security offer a full suite of security testing services. Our offensive security team are NCSC CHECK and CREST accredited with additional highly sought-after individual qualifications such as OSCP (Offensive Security Certified Professional) certification.
-
QUALITEST GROUP UK LTD
Our digital solutions quality assurance and testing (QAT) service assures all components, delivering optimal user experience, value and business outcomes across digital solutions. Supporting GDS, DDaT, Agile and DevOps digital development methodologies covering functionality, security and vulnerabilities, usability, accessibility, and performance testing across multiple platforms, operating systems, browsers and devices.
-
Harvey Nash Limited
CISO as a Service including security advisory, leadership and consultancy services, security architecture, cyber assurance, SIEM and SOC solutions, penetration testing, access management, GRC and data protection/GDPR
-
QUANTA TRAINING LIMITED
Quanta Training Limited will provide public sector organisations with learning solutions and consultancy designed to strengthen security QA and testing in cloud environments. Our highly accredited facilitators will provide engaging, learner-focused support that will help you identify weaknesses, test security controls, and ensure the confidentiality, integrity, and availability of data.
-
HYPER TALENT SOLUTIONS LTD
Hyper Talent Solutions Ltd offers comprehensive Vulnerability Assessment and Penetration Testing (VAPT) services. Our expert team assesses your systems, identifies vulnerabilities, and conducts simulated attacks. With detailed reports and remediation recommendations, we fortify your defenses, ensuring resilience against cyber threats. Trust us to safeguard your assets with proactive security measures
-
INDUCTIVE SOLUTIONS LTD
The Red Team Assessment service provides a controlled simulation of real-world attack techniques to test an organisation’s ability to prevent, detect, and respond to targeted threats. The service assesses both logical (cyber) and physical security controls, reflecting how modern attackers combine digital and physical methods to achieve their objectives.
-
ARCANUM INFORMATION SECURITY LIMITED
CREST Accredited Pen Testing led by a UK CSC Chartered Professional, conducting assessments for clients of all sizes and sectors. This service provides high-assurance testing conducted by certified professionals using recognised methodologies, enabling organisations to identify and remediate vulnerabilities, meet assurance obligations, and strengthen their overall resilience against cyber threats.
-
COGNISYS GROUP LIMITED
CREST-accredited firm delivering external, internal, web application, and cloud assessments across Azure and AWS. Qualified UK-based personnel (OSWE,OSCP,CRTO,CRT,CPSA). Secure code reviews and host compromise simulation included. ISO 27001, ISO 9001, NIST Directive, Cyber Essentials Plus compliant. Remote delivery.