-
SECARMA LIMITED
From misconfigured storage to insecure identity roles, cloud environments are often exposed unexpectedly. Our Cloud Penetration Testing service goes beyond tools to simulate how attackers might breach your defences, before they actually do. The result: stronger protection, informed teams, and peace of mind that your cloud assets are covered.
-
SECON CYBER SECURITY LTD
Secon's Penetration Testing service, is designed to help identify security vulnerabilities and weaknesses within the IT environment. The testing is undertaken by an expert team, of CREST certified testers, who will manage the entire process end to end. The service focuses on reports and recommendations to help improve cyber resilience.
-
PRISM INFOSEC
This service provides CREST-aligned penetration testing for web applications and APIs. Experienced security specialists assess technical controls using recognised methodologies to identify vulnerabilities and weaknesses. Findings are clearly documented in a comprehensive, easy-to-understand report with prioritised recommendations to support effective remediation and risk reduction.
-
UST GLOBAL PRIVATE LIMITED
Vulnerability Assessment and Penetration Testing (VAPT) is a security process used to identify, analyze, and validate weaknesses in systems, networks, and applications. It combines automated scanning with manual attack simulations to reveal real‑world risks. VAPT helps organizations strengthen defenses, ensure compliance, and proactively prevent cyberattacks by addressing discovered vulnerabilities.
-
BRIDEWELL CONSULTING LIMITED
Assumed Breach Testing simulates a real-world attacker operating inside your environment after an initial compromise. It assesses the impact of a breached low-privilege account, identifies defensive gaps beyond traditional penetration testing, and delivers actionable insights to strengthen detection, response, and overall security resilience.
-
M8 SOLUTIONS LIMITED
Penetration testing identifies real-world security weaknesses before they are exploited. Trusted by the NHS, M8 Solutions delivers offensive CREST-accredited penetration testing that validates controls, strengthens resilience, and supports compliance. We provide safe, NHS-aware testing with minimal disruption, delivering clear, actionable insight that enables confident technical remediation and assured board-level decision-making.
-
INTAFORENSICS LTD
Penetration testing services assess the security of external and internal networks, applications, web applications, APIs, mobile devices, wireless networks, and PCI environments. Testing identifies exploitable vulnerabilities, validates security controls, and supports risk reduction, compliance, and remediation prioritisation through controlled, ethical testing activities.
-
CYBER SECURITY ASSOCIATES LTD
CSA delivers controlled, expert‑led penetration testing to identify and validate vulnerabilities across networks, applications, cloud services and infrastructure. Using real‑world attack techniques and industry frameworks, we assess exploitation risk and provide clear, prioritised remediation guidance to help organisations strengthen security controls and reduce the likelihood of successful cyber attacks.
-
AMBERWOLF LIMITED
Penetration Testing & Security Assessment Services: assess your environment and security controls by conducting realistic, scenario-based penetration testing using advanced attacker tools, techniques, and procedures (TTPs). Full life-cycle penetration testing service management, ensuring compliance with regulatory and industry standards, including artificial intelligence (AI) scenario testing. CREST, CBEST and GBEST accredited.
-
EVALIAN LIMITED
Consultancy and professional services to improve your cyber security posture, reduce cyber risk, meet cyber compliance requirements, meet data protection obligations, certify to ISO 27001 and ISO 22301, and identify technical vulnerabilities through CREST accredited penetration testing.
-
PROTOS NETWORKS LIMITED
Protos provide CREST approved application penetration testing and vulnerability assessment services. To help organisations assess publicly exposed assets and identify known security weaknesses or vulnerabilities which could pose risks to critical infrastructure and application services. Providing contextual, concise and detailed reports removing false positives and sharing clear remediation advice.
-
ACCENTURE (UK) LIMITED
Penetration testing aims to uncover security weaknesses in IT systems based on specific needs and targeted scope. We offer a range of offensive security testing services. From traditional penetration testing focused on individual applications, networks or services, to phishing simulations and in-depth simulated attacks.
-
DIGITALXRAID LTD
DigitalXRAID provides CHECK approved ITHC Web Penetration Testing of infrastructure and web applications. Our CHECK accredited penetration testing specialists are highly experienced professionals. We help organisations understand cyber risk, security vulnerabilities and the business impact if exploited.
-
DIGITALXRAID LTD
DigitalXRAID provides CHECK approved ITHC Infrastructure Penetration Testing of internal and external infrastructure. Our CHECK accredited penetration testing specialists are highly experienced professionals. We help organisations understand cyber risk, security vulnerabilities and the business impact if exploited.
-
3B DATA SECURITY LTD
We provide expert mobile application penetration testing to identify security vulnerabilities in iOS and Android apps. Our testing combines manual and automated techniques with real-world threat intelligence to uncover flaws in code, APIs, and data handling, helping organisations protect users, data, and brand reputation.
-
CAPGEMINI UK PLC
Capgemini provide CREST and Cyber Scheme certified Infrastructure and Application experts delivering penetration tests using CHECK and CREST methodologies. Refined to identify weaknesses and vulnerabilities found in infrastructure, web and mobile applications, cloud environments and external or remote-access solutions. Our tailored services help identify threats and vulnerabilities to your systems.
-
CYBERLAB SECURITY LIMITED
CREST approved vulnerability assessment (VA's) for internal or external networks.
Similar to penetration tests, (mainly automated) and provides a high-level view of risks over a larger network area, in a shorter timeframe.
We also provide fully automated monthly external VA’s as an interim scan between your manual penetration testing.
-
COGNISYS GROUP LIMITED
Cognisys conducts comprehensive web application pentests to assess security across web infrastructure and applications. Our CREST-accredited testers identify and expose vulnerabilities, test security controls, and assess weaknesses in application architecture. Testing covers the OWASP-Top-10, business logic issues, and data-handling processes. Detailed reports include exploitation impact analysis and prioritised remediation guidance.
-
CYBERLAB SECURITY LIMITED
CyberLab provides specialised penetration testing for UAV and UGV systems, assessing drone platforms, communications, and ground‑control infrastructure. We uncover vulnerabilities across firmware, sensors, wireless links, controllers, cloud integrations, and telemetry. Our testing identifies risks including unauthorised access, data manipulation, signal interference, and full device compromise to strengthen overall drone security.
-
CYBERFORT LIMITED
Cyberfort's team provide reliable independent assurance that applications, databases and associated infrastructure are protected from security threats. Using CREST and CHECK ITHC accredited methodologies we perform state of the art automated vulnerability scanning and carefully targeted manual testing to deliver an outstanding assessment across internal and external estates.
-
CYBER SECURITY SPECIALISTS LIMITED
The Cyber Security Specialists Penetration Testing service is CREST-accredited over a decade of experience in scoping and providing Penetration Testing to Clients of all different shapes and sizes from start-ups and Digital Agencies to multinationals and Public Sector Organisations.
-
SECARMA LIMITED
Wireless Penetration Testing simulates real-world attacks to assess your wireless infrastructure against these threats. We help organisations uncover and remediate wireless vulnerabilities before they’re exploited, supporting compliance, protecting sensitive systems, and keeping business operations running securely. Our testing ensures your wireless footprint doesn’t become a backdoor for attackers.
-
COGNISYS GROUP LIMITED
Cognisys conducts comprehensive infrastructure pentest assessing security across networks, systems, and devices. Our CREST-accredited testers identify vulnerabilities, assess weaknesses, and report likelihood of breaches. Testing identifies default configurations, weak credentials, and exploitable settings. Detailed reports include vulnerability analysis, exploitation impact assessment, and prioritised remediation recommendations
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting’s CREST Penetration Testing service provides the confidence you need that your cyber defences are appropriate and effective. Our expert penetration testers will analyse your cyber security vulnerabilities either remotely or in person, helping you strengthen your organisation against cyber-crime and reduce the risk of data breaches.
-
SECARMA LIMITED
Mobile application security testing involves evaluating mobile platforms to identify and address vulnerabilities that malicious actors could exploit. Whether you're developing or updating an app, early testing helps protect sensitive data, ensure legal compliance, and avoid security missteps that can erode user trust and damage your brand.
-
Wavenet
CyberGuard delivers expert penetration testing to uncover security weaknesses in networks, applications, and infrastructure. Accredited by CREST and NCSC CHECK, our service combines rigorous assessment with actionable remediation advice, helping organisations strengthen defences, meet compliance standards, and reduce cyber risk through comprehensive, tailored testing methodologies.
-
ASPIRE TECHNOLOGY SOLUTIONS LTD
Aspire provide CREST-accredited penetration testing designed to improve your organisations cybersecurity posture by identifying and addressing vulnerabilities and weaknesses in your infrastructure before malicious actors can exploit them. Our approach aligns with the Penetration Testing Execution Standard (PTES) framework, a globally recognised and respected set of guidelines for ethical hacking.
-
MAPLE NETWORKS LIMITED
Maple performs manual, risk‑led web application penetration testing to uncover exploitable vulnerabilities before attackers do. For pen testing we test authentication, authorisation, input handling and business logic, provide CVSS‑scored findings with evidence, and deliver clear remediation guidance to reduce risk and improve release confidence
-
PRISM INFOSEC
This service delivers NCSC CHECK and CREST-aligned infrastructure penetration testing to identify exposed hosts, services, and vulnerabilities across network environments. Combining automated scanning with expert analysis, we provide clear, actionable assurance to support risk reduction, regulatory compliance, and informed security decision-making.
-
PRISM INFOSEC
A CREST & NCSC CHECK accredited provider delivering IT Health Checks (ITHC) and penetration testing for cloud services and applications. Our service covers all elements required for a comprehensive scope, fully aligned with NCSC guidance to ensure compliance and robust security assurance.