-
Intertek NTA
NTA Monitor's Application Security Assessment is a penetration (pen) test to ensure an application (e.g. transactional website, mobile application, internal CMS, cloud-based solution) is securely configured, thus preventing an attacker from gaining access or a user being exposed to confidential or sensitive data, another user’s account or the backend database.
-
BRIDEWELL CONSULTING LIMITED
Many organisations trust cloud providers to ensure appropriate cloud security, vulnerability management and data protection. However, this can lead to security teams underestimating the importance of their role during the implementation phase and result in environments that contain vulnerabilities or misconfigurations.
-
3B DATA SECURITY LTD
We provide comprehensive Active Directory (AD) security reviews to identify misconfigurations, privilege escalation paths, and weaknesses that attackers exploit. Our service assesses domain controllers, group policies, and authentication mechanisms, delivering actionable recommendations to harden AD environments and reduce the risk of compromise.
-
CODA SECURITY LIMITED
A broad range of activities intended to determine the degree to which an organisation, system, or information asset is exposed to potential compromise, the impact of such a compromise, and the likelihood of it occurring, through primarily technical means. This supports risk management by providing objective risk information.
-
SAPPHIRE TECHNOLOGIES LIMITED
Our advanced Attack Simulation services cover Red Teaming (Threat Led Penetration Testing / Adversary Emulation) and Purple Teaming. These services provide a range of testing strategies to assess your organisation’s ability to prevent, detect and respond to an advanced cyber-attack.
-
MTI TECHNOLOGY LIMITED
MTI helps public sector organisations understand evolving cyber threats and assess associated risks. We design, implement, and operate technical security controls across monitoring, detection, endpoint, network, vulnerability assessment and analytics technologies. Our managed and co-managed services enhance threat detection, incident response, and resilience, enabling an effective, risk-aligned security posture.
-
CODA SECURITY LIMITED
A wide range of disciplines primarily focused on providing a secure software development lifecycle (SDLC). It’s not possible to produce an exhaustive list of the disciplines covered, however, multiple services are included among those that we can offer to support our clients in addressing their own secure SDLC requirements.
-
SOPRA STERIA LIMITED
Highly experienced consultants to support or fulfil the role of CISO/Security Lead with the option of additional support from suitably qualified security specialists including Security Architects and Penetration Testers. The service can be performed over a set period or taken from a pool of days as needed.
-
ZOONOU LIMITED
Zoonou's Cyber Security Services help public sector organisations protect web, mobile, cloud, and core IT systems. Our security audits identify vulnerabilities, misconfigurations, and risks, supporting compliance with GDS Service Standards, UK GDPR, Secure by Design principles, and NCSC guidance, while enabling informed decision-making, assurance, and IT Health Check preparation.
-
NCC Group Security Services Limited
NCC Group has a dedicated team of Threat Intelligence specialists focused exclusively on delivering intelligence support for regulatory schemes such as CBEST, GBEST, ATTEST, TBEST, and NBEST. The team brings extensive experience working with public-sector clients and regulators to ensure that all tests are underpinned by robust, high-quality TI processes.
-
SECURE NEXUS LTD
Secure Nexus Penetration Testing helps organisations identify and remediate security vulnerabilities across web, cloud, and mobile environments. Using CREST-accredited testers, real-world attack simulation, and actionable reporting, the service reduces cyber risk, strengthens resilience, and supports regulatory compliance.
-
CLERKSWELL LIMITED
ClerksWell can provide a comprehensive Umbraco security review including full code analysis and vulnerability testing, with a prioritised action plan to strengthen your setup and reduce risk.
-
ARCA CONSULTING LTD
ARCA helps your digital technology teams adopt cloud-native ways of working and best practice application development. We bring deep expertise in implementing DevOps, driving rapid realisable business value, and building enduring agile delivery capabilities. Enabling you to deliver automated CI/CD pipelines, cloud orchestration, resilience, operational management and culture change.
-
JUMPSEC LIMITED
Hands-on assessment of hardware, firmware and physical interfaces to identify opportunities for tampering, data extraction or unauthorised control.
-
Resillion
A PSN IT Health Check (ITHC) penetration test of applications, infrastructure and networks to support codes of connections (PSN, NHS etc..) and HMG and MOD accreditations for OFFICIAL, SECRET and TOP SECRET systems and networks.
-
BRITISH TELECOMMUNICATIONS LIMITED
BT offers a range of Cyber Security Advisory services to assess your security posture and identify the threats relevant to you, build strategies and roadmaps to guide your security and digital transformation, select solutions that match your needs and put your defences to the test using our offensive security team.
-
EQUAL EXPERTS UK LIMITED
Expert support to build a DevSecOps capability within an organisation. We ensure security is built in from inception and throughout development into production and decommissioning of cloud-based services. Incorporating security into agile working practices using lightweight, pragmatic approaches suitable for continuous delivery. Our approach empowers teams and reduces risk.
-
AIRE LOGIC LIMITED
Security Services provide cloud security strategy, design, risk management and assurance. Services include governance and Zero Trust operating models, threat modelling and remediation planning, secure cloud and API design, incident response and triage, security audits and compliance assessments, and CI/CD-integrated security testing aligned to NCSC guidance.
-
BRIDEWELL CONSULTING LIMITED
A prime opportunity for introducing accidental vulnerabilities, source code reviews provide assurance that solutions are being built securely.
Bridewell’s technical consultants are experienced in software development and coding and will review your applications source code to ensure it is being developed securely and conforms to coding standards.
-
ARCANUM INFORMATION SECURITY LIMITED
Secure by Design (SbD) is a pan-Defence drive to support organisations in building cyber security into system and capability designs from the outset. We have been involved in the development of SbD since the Beta phase and can help your organisation adhere to SbD principles and processes.
-
PA CONSULTING SERVICES LIMITED
PA Consulting (PA) provides Cyber Security services including CREST accredited Penetration Testing. IT Health Check (ITHC) services identify ways in which an organisation’s applications and network services could potentially be compromised or manipulated through malicious activities carried out by an attacker
-
Resillion
An NSCS Assured CHECK IT Health Check (ITHC) penetration test of applications, infrastructure and networks to support codes of connections (PSN, NHS etc..) and HMG and MOD accreditations for OFFICIAL, SECRET and TOP SECRET systems and networks.
-
REDCENTRIC SOLUTIONS LIMITED
Redcentric Cyber Security services delivers a wide range of cyber security professional services from strategy to implementation. Aligned to the NIST Cyber Security Framework, our qualified cyber industry professionals provide support in overcoming cyber security challenges around governance, InfoSec compliance, security testing, vulnerability management, BC,DR, data breach and Incident Response.
-
3B DATA SECURITY LTD
We deliver targeted phishing simulations to assess organisational resilience against social engineering attacks. Using open-source intelligence (OSINT), we craft realistic campaigns that mimic trusted services, measure user responses, and provide actionable insights. Post exercise, we can offer engaging awareness training to reduce risk and build a security focused culture.
-
Reversec
Application Security Assurance is designed to assess digital applications against “known” vulnerability types (such as those recorded in the OWASP Top 10) to identify exploitable vulnerabilities which could be leveraged by a malicious actor. This level of assessment goes beyond signature-based scanning activities providing increased assurance and resilience to attack.
-
GOACO GROUP LTD
Following a Private Beta phase of an iterative delivery using UCD approaches, we provide the processes and tools to maintain the service in Public Beta and Live for cost-effective BAU activities with Live Service management. Incorporating continuous improvement (CI/CD) processes supporting the service in a sustainable way, maintaining 24/7 uptime.
-
NCC Group Security Services Limited
NCC Group's AI Security Testing services combine AI/ML expertise with industry-leading penetration testing to identify vulnerabilities, misalignments, and risks in AI-driven environments. We assess models, infrastructure, and process against frameworks like MITRE ATLAS and OWASP AI Top 10, delivering actionable recommendations to strengthen resilience, compliance and responsible AI practices.
-
ROSEBUD CLOUD SOLUTIONS LTD
Rosebud’s Cloud Support: Security Services help public sector organisations strengthen cloud security posture through strategic planning, risk management, and secure design. Covering incident response, audit services, and QA testing, the service ensures resilient, compliant cloud environments aligned with UK standards—protecting sensitive data and enabling confident digital transformation.
-
ITogether
Keepnet Labs focuses on cyber security, particularly human factors, using advanced technology and behavioural insights to enhance digital security across organisations. It provides comprehensive solutions for managing human-related security risks with tools like phishing simulators and incident response platforms, aiming to foster a proactive and resilient security culture.
-
CODA SECURITY LIMITED
A range of services focused on providing assurance of operational technology and industrial control system components. This includes governance auditing, targeting assessment and testing of OT and ICS components, review of segregation and application of Purdue model principles, and assessment of reference architecture patterns.