-
MAPLE NETWORKS LIMITED
Maple’s PTaaS provides continuous, on‑demand penetration testing that identifies exploitable weaknesses across external, internal, cloud and identity surfaces. Pen testing as a service delivers autonomous and human‑assisted testing, exploit proof, attack‑path‑driven risk context, instant retesting, remediation guidance, and full compliance‑aligned evidence packs. All testing is performed by CREST‑certified consultants.
-
MTEST LABS LIMITED
MTEST Labs delivers manual and automated mobile application testing to CREST standards, with penetration testing through our certified cyber security consultants; providing services on all operating systems, including iOS, Android and Windows, to OWASP Top 10 standards to identify cyber security vulnerabilities and weaknesses, with solution recommendations, satisfying user needs.
-
ARCANUM INFORMATION SECURITY LIMITED
Arcanum is a National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy in Risk Management, Audit & Review and Security Architecture. We are CHECK and CREST Accredited for Pen Testing and deliver assessments for clients of all sizes and sectors. Our testers are accredited by the UK Cyber Security Council.
-
QUALITEST GROUP UK LTD
Safeguard your organisation with our independent Cloud Security Testing. Our cyber-security testing suite assesses and identifies vulnerabilities covering cloud-hosted network and infrastructure solutions (including Azure, AWS, GCP, Oracle, Fujitsu, Alibaba, IBM, Tencent, OVHcloud, DigitalOcean, Linode, private/hybrid cloud), and cloud-hosted applications. Our cloud security testing services includes independent network security assessments.
-
ITogether
ITogether offers penetration testing services conducted by CREST-certified professionals to assess the security of IT systems. This service simulates realistic cyber-attacks to identify vulnerabilities in network, applications, and systems, providing businesses with a clear path to enhance their cyber resilience.
-
FORTIS CYBER SECURITY LIMITED
The aim of a Cloud Security Review is to identify potential security gaps or weaknesses within the cloud environment that could be exploited by threat actors and develop recommendations for mitigating these risks. This proactive approach helps organisations ensure that their cloud deployments are secure, compliant, and resilient against cyber-attacks.
-
SECARMA LIMITED
Objective-Led Testing is a targeted security assessment built around the specific goals an attacker would pursue — such as accessing sensitive data, escalating privileges, or bypassing a critical control. Instead of testing everything, we concentrate on the scenarios that matter most to provide concentrated and meaningful insight.
-
CCL-FORENSICS LIMITED
CCL are accredited by NCSC (under the CHECK scheme to deliver IT Health Checks (ITHC, penetration testing, pentesting). Our certified security consultants can assess all systems including web applications, mobile applications, wireless, infrastructure and cloud services. Our tailored services help identify your unique threats and vulnerabilities.
-
C3IA SOLUTIONS LIMITED
C3IA’s Security Testing services identify vulnerabilities, tests security measures, and simulates real world attacks to protect critical systems. Early risk detection ensures compliance, enhances organisational resilience, and maintains operational integrity, providing robust protection for mission critical environments through methodologies including IT Health Checks, Penetration Testing, and Vulnerability Assessments.
-
BRIDEWELL CONSULTING LIMITED
Many modern application frameworks are secure as standard, they can easily be misconfigured or fall behind the latest updates which leaves room for exploitation by bad actors. Bridewell follow the OWASP Testing Methodology expanded through the team’s experience of web application testing. CREST, CHECK and NCSC Assured Services Provider
-
3B DATA SECURITY LTD
We provide expert Penetration Testing and IT Health Checks under the NCSC CHECK scheme. We identify vulnerabilities, assess security risks, and ensure compliance across networks, applications, and infrastructure to protect organisations against cyber threats and optimise IT performance.
-
3B DATA SECURITY LTD
We provide specialist penetration testing for IoT and SCADA/ICS environments to identify vulnerabilities that could impact safety, availability, and data integrity. Combining OSINT, configuration review, protocol analysis, and controlled exploitation, we assess embedded devices, gateways, and control networks to harden operational technology without disrupting production.
-
PENTEST CYBER LTD
Full range of pro-tools OSWE CSTL level penetration testing ITHC, Cyber Essentials Plus and IASME Cyber Assurance L1 and 2 services to CREST and other industry standards.
-
PA CONSULTING SERVICES LIMITED
PA provides Cyber Security services including CREST accredited Penetration Testing. We can review the configuration of cloud-provisioned elements against recommended security standards as well as best practices to provide assurance over the security of the environment and its resources. Assessments can be conducted across AWS, Azure and Google Platforms
-
Nortal UK
Comprehensive system assurance meeting all requirements of the NCSC CHECK IT Health Check (ITHC). Fully managed, fixed price CHECK assessments across SaaS, PaaS and IaaS hosted locally or within Microsoft Azure, Amazon Web Services (AWS) and on VMWare based and open-source virtualisation platforms.
-
CYBERFORT LIMITED
Comprehensive system assurance meeting all requirements of the NCSC CHECK IT Health Check (ITHC). Fully managed, fixed price CHECK assessments across SaaS, PaaS and IaaS hosted locally or within Microsoft Azure, Amazon Web Services (AWS) and on VMWare based and open-source virtualisation platforms.
-
RENAISSANCE COMPUTER SERVICES LTD
Managed penetration testing for cloud and internet-facing systems. We scope and coordinate the engagement, manage access and scheduling, and triage findings with clear remediation actions. Testing and certified assessor review are delivered by an approved specialist partner. CREST-accredited reports are delivered via our CREST-accredited partner.
-
3B DATA SECURITY LTD
We provide expert firewall rule base and configuration penetration testing across Cisco, Palo Alto, Fortinet, Check Point, AWS, and Azure. Our manual and automated analysis identifies overly permissive rules, shadowed policies, segmentation gaps, weak NAT, and logging issues. Providing actionable hardening guidance to reduce attack surface and improve detection.
-
JUMPSEC LIMITED
Government-standard security testing under NCSC CHECK, led by a CHECK Team Leader with CREST consultants. ITHC aligned to HMG/GovAssure/PSN across external, internal, applications, cloud, and builds. Produces auditable evidence, prioritised remediation, and optional retest.
-
3B DATA SECURITY LTD
We provide expert cloud penetration testing for M365, GCP, Azure, and AWS environments. Our approach combines manual and automated techniques with real-world threat intelligence to uncover misconfigurations and vulnerabilities, helping organisations strengthen cloud security, reduce risk, and protect sensitive data across critical platforms.
-
BRIDEWELL CONSULTING LIMITED
OSINT involves analysing publicly available information to identify key risks, vulnerabilities, potential data leaks, and how to address them.
Our highly certified OSINT team use the same tools and tactics as cyber attackers to simulate real attack scenarios, uncovering weaknesses as part of wider penetration testing.
-
CAPGEMINI UK PLC
Capgemini’s testers provide CREST and Cyber Scheme certified infrastructure and application experts and deliver penetration testing using CHECK and CREST methodologies. Refined to identify weaknesses and vulnerabilities found in internal infrastructure, web and mobile applications, cloud environments and external or remote-access solutions. Our tailored services help identify threats and vulnerabilities.
-
DATA CAREERS LIMITED
Data Careers’ Testing-as-a-Service provides SDLC end-to-end software testing and quality assurance services. We deliver ISTQB qualified and DDaT aligned specialists and or teams; rapidly deployed, with BPSS, SC, DV, NPPV clearances, which augments customer teams, or provides a complete outcome-based service, meeting GDS, WCAG, TCoP, GDPR, NCSC standards.
-
CLARANET LIMITED
Claranet delivers NCSC-assured CHECK penetration testing for UK public sector systems, aligned with HMG security standards. Covering asset types including web applications, networks, and employees, these services help organisations identify vulnerabilities and assess risks of data and system compromise from malware or malicious actors, strengthening resilience against evolving cyber threats.
-
MAPLE NETWORKS LIMITED
Maple performs targeted wireless penetration testing to uncover weaknesses across Wi‑Fi infrastructure, client onboarding, authentication and encryption. Our pen testing serivce validates real‑world attack paths, assess segmentation and guest networks, and provide CVSS‑scored findings with clear remediation guidance to reduce risk and strengthen secure, reliable wireless operations.
-
SECARMA LIMITED
Our API testing assessment service is designed to identify and remediate security flaws before they can be exploited, giving you confidence in your API's resilience. Combining manual testing with industry-leading tools and methodologies, our assessments go beyond automated scans to uncover logic flaws, complex vulnerabilities, and business-specific risks.
-
ZOONOU LIMITED
Our Web and Mobile Application Testing services help public sector teams deliver reliable, user-centric digital services across browsers, iOS, Android, and other platforms. We provide software testing and quality assurance (QA) across functional, exploratory, regression, non-functional, performance, penetration, accessibility, UAT testing, and real-device compatibility checks.
-
Resillion
Red Team - Open source research is carried out to determine your public footprint, and to uncover any leakage of information that attackers could leverage in a targeted attack, followed by a real world scenario test is conducted.
-
Resillion
Purple Team - Open source research is carried out to determine your public footprint, and to uncover any leakage of information that attackers could leverage in a targeted attack, followed by a real world scenario test is conducted.
-
3B DATA SECURITY LTD
We provide PCI segmentation testing to validate that your Cardholder Data Environment (CDE) is properly isolated from non-PCI systems. Our service ensures compliance with PCI DSS requirements by identifying segmentation flaws, testing firewall rules, and verifying that network controls effectively prevent unauthorised access to sensitive data.