-
DIGI2AL LIMITED
Digi2al offers vulnerability and penetration testing services, conducting penetration tests against infrastructure and applications. Infrastructure assessment and vulnerability scanning, network device configuration review, application testing. External penetration testing, internal penetration testing, probing of public facing entities and scanning of the firewall for exploits. Clear pen test reporting with actionable insights.
-
CAMBRIDGE CYBER ADVISERS LIMITED
The Penetration Testing service provides a structured, end to end evaluation of an organisation’s technical security posture. The assessment simulates attacker behaviour to identify vulnerabilities, misconfigurations, and weaknesses that could be exploited to gain unauthorised access, disrupt operations, or compromise sensitive data.
-
EKCO CLOUD AND SECURITY LIMITED
Ekco's Security Testing team helps clients identify vulnerabilities in cloud applications, infrastructure, and networks, enabling proactive remediation against threats. We offer tailored security testing services delivered by certified experts to match your specific needs and risk appetite.
-
JISC SERVICES LIMITED
A CREST-accredited penetration testing service focused on education and research sectors. We identify vulnerabilities, help assess risks, and recommend mitigation to protect against relevant threats. Our experienced and certified in-house cyber security experts conduct tests across numerous areas, including network infrastructure, applications, social engineering, build image review, and Active Directory.
-
MAPLE NETWORKS LIMITED
Maple’s AI Penetration Testing provides continuous, on‑demand penetration testing that identifies exploitable weaknesses across external, internal, cloud and identity surfaces. Our pen testing delivers autonomous and human‑assisted testing, exploit proof, attack‑path‑driven risk context, instant retesting, remediation guidance, and full compliance‑aligned evidence packs. All testing is performed by CREST‑certified consultants.
-
MAPLE NETWORKS LIMITED
Maple’s Autonomous Penetration Testing provides continuous, on‑demand penetration testing that identifies exploitable weaknesses across external, internal, cloud and identity surfaces. Our pen testing delivers autonomous and human‑assisted testing, exploit proof, attack‑path‑driven risk context, instant retesting, remediation guidance, and full compliance‑aligned evidence packs. All testing is performed by CREST‑certified consultants.
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting’s Cyber Penetration Testing solutions will establish your baseline security position and define a road map to balance your risk appetite with your desired level of security. It will also be part of an ongoing structured program of security assurance activities to enable an appropriate level of cyber-resilience.
-
PA CONSULTING SERVICES LIMITED
PA Consulting provides Cyber Security services including CREST accredited Penetration Testing. Our experience enables us to provide assurance of critical systems, including cloud (AWS, Azure, GCP) and hybrid environments. We can assess endpoints, build and configuration, firewall rules, switches, infrastructure, Active Directory, embedded devices, mobile and binary applications
-
PRISM INFOSEC
Our ITHC penetration testing services are NCSC CHECK & CREST-Approved and delivered by our team of experienced penetration testers and application security experts who follow formal methodologies to assess an application’s security controls for vulnerabilities and weaknesses and deliver a comprehensive, yet easy to decipher report.
-
Six Degrees
Our Penetration Testing services give you the information you need to enhance your protection against ransomware and other cyber-attacks. All of our Penetration Testing services are delivered by experienced, qualified ethical hackers. We provide summary reports in an easy to digest format that contain expert advice for reducing attack surface.
-
3B DATA SECURITY LTD
We deliver expert external infrastructure penetration testing to uncover vulnerabilities, secure networks, and prevent cyberattacks. Our service combines real world experience, manual and automated testing, and comprehensive risk analysis. We support organisations to strengthen their external defences and maintain robust infrastructure security.
-
ZOONOU LIMITED
Our Infrastructure and Network Penetration Testing services help organisations secure their core IT environments, including networks, servers, cloud infrastructure, and connected services. Using industry-recognised frameworks such as CIS Controls, NCSC guidance, and ISO 27001, we identify vulnerabilities and misconfigurations before they can be exploited, supporting assurance, compliance, and risk management.
-
ARCANUM INFORMATION SECURITY LIMITED
CREST Accredited Pen Testing led by a UK CSC Chartered Professional, conducting assessments for clients of all sizes and sectors. This service provides high-assurance testing conducted by certified professionals using recognised methodologies, enabling organisations to identify and remediate vulnerabilities, meet assurance obligations, and strengthen their overall resilience against cyber threats.
-
FORFEND INFORMATION SECURITY LTD
Forfend Information Security offer a full suite of security testing services. Our offensive security team are NCSC CHECK and CREST accredited with additional highly sought-after individual qualifications such as OSCP (Offensive Security Certified Professional) certification.
-
3B DATA SECURITY LTD
We provide expert internal infrastructure penetration testing to uncover vulnerabilities within your organisation’s network and systems. Our approach combines manual and automated testing, real-world experience, and comprehensive risk analysis to identify weaknesses before they can be exploited. We support organisations to strengthen internal defences and protect their sensitive data.
-
3B DATA SECURITY LTD
We provide expert web application penetration testing to uncover vulnerabilities, secure sensitive data, and prevent cyberattacks. Our approach includes comprehensive security assessments, OWASP-aligned testing, and practical risk mitigation for websites and applications. We work with organisations to strengthen defences and ensure robust, reliable application security.
-
SECQUEST INFORMATION SECURITY LTD
At SecQuest, we are an NCSC assured CHECK provider who specialises in penetration checks, IT health checks, and security audits. We can provide cloud security audits and reviews, which can help ensure compliance to regulations, as well as ensuring your cloud services are secure against the latest threats.
-
TRUSTMARQUE SOLUTIONS LIMITED
Delivery of a wide range of penetration and security testing services.
-
Wavenet
CyberGuard's cyber security portfolio delivers end-to-end security: vulnerability management, penetration testing, threat-led and social engineering testing, managed EDR/XDR/SIEM/NDR, incident response, dark web monitoring, cloud security posture management, Cyber Essentials, framework and regulatory compliance, advisory and consultancy services, security awareness training, and 24/7 CREST-accredited SOC for proactive detection, monitoring, and remediation.
-
JUMPSEC LIMITED
Manual, scenario-led security testing of web applications by CREST-certified testers to uncover access control flaws, injection issues, logic abuse and data exposure that automated scanners miss.
-
CLARANET LIMITED
Claranet provides penetration testing for public sector systems to identify vulnerabilities in networks, applications, and cloud environments. Our service follows industry best practice and NCSC guidance, delivering evidence-based reports with risk ratings and remediation advice. Available under G-Cloud Lot 3 for security assurance and vulnerability management.
-
3B DATA SECURITY LTD
We provide expert wireless penetration testing to uncover vulnerabilities in Wi-Fi networks and access points. Our approach combines manual and automated techniques with real-world threat intelligence to identify misconfigurations and security gaps, helping organisations strengthen wireless security, prevent unauthorised access, and protect sensitive data.
-
3B DATA SECURITY LTD
We provide expert API penetration testing across REST, GraphQL, SOAP, and microservices. Using manual and automated techniques combined with real-world threat intelligence, we identify authentication flaws, authorisation gaps, injection risks, and misconfigurations. We deliver actionable fixes that reduce attack surface, protect sensitive data, and strengthen your API security.
-
SAPPHIRE TECHNOLOGIES LIMITED
Sapphire provides CREST-certified project penetration testing assessments for customers requiring standalone testing. Assessments of a customer’s vulnerabilities align with recognised industry standards.
Testing is undertaken using custom toolkits and well-established commercial tools to provide a unique and thorough assessment which is not possible using automated vulnerability scanners.
-
BRIDEWELL CONSULTING LIMITED
Wireless penetration testing is performed to identify and exploit vulnerabilities in wireless networks, ensuring that unauthorised access, data breaches, and other security threats are mitigated to protect sensitive information.
-
ARCANUM INFORMATION SECURITY LIMITED
Our Bespoke/Scenario-based penetration testing service provides tailored security assessments that replicate realistic threat scenarios specific to your organisation’s environment, objectives and risk profile. By simulating targeted adversary behaviour, our consultants identify exploitable weaknesses, validate current defences, and provide actionable remediation advice to improve resilience against sophisticated and emerging cyber threats.
-
CYBERIS LIMITED
Cyberis offers an extensive range of technical security assessments and penetration testing services to the public and private sector, including NCSC CHECK IT Health Checks (ITHCs), to identify technical vulnerabilities and weaknesses across multiple systems and technologies, both cloud-based and traditional architectures, to mitigate the threats of data asset compromise.
-
LAYER 7 LIMITED
We deliver independent IT Health Checks using CHECK and CREST-aligned methodologies to identify security weaknesses across applications, infrastructure and cloud environments. Our accredited testers assess technical vulnerabilities, configuration weaknesses and control effectiveness, providing clear, risk-based findings to support remediation and assurance decisions.
-
Stone Technologies Limited Trading as Converge Technology Solutions
Good security practice involves regular testing of your IT infrastructure for vulnerabilities and exploitable weaknesses. Penetration Testing, also referred to as Pen Testing or ethical hacking, is an authorised attack on a network, web/mobile application, or a Wi-Fi network to find security vulnerabilities that an attacker could exploit.
-
DEMYSTIFY SECURITY LIMITED
ITHC management services coordinating independent penetration testing to meet regulatory and assurance requirements. We manage scope, accredited testers, remediation tracking and reporting, acting as a single point of contact to ensure timely, high-quality assurance aligned with organisational risk and compliance needs.