-
NCC Group Security Services Limited
NCC Group's proactive, buildable continuous testing solution. Continuous Penetration Testing provides testing assurance for application and infrastructure security, with a dedicated agile team to provide real-time response to changes, events or discovered vulnerabilities. We offer continuous assurance for agile development teams, and advanced testing beyond attack surface discovery.
-
CREATIVE NETWORKS LIMITED
Our Penetration Testing & Ethical Hacking service identifies vulnerabilities in systems, networks, and applications through controlled, authorised testing. We provide actionable remediation recommendations, helping organisations improve security resilience and reduce the risk of breaches while supporting regulatory compliance.
-
PRICEWATERHOUSECOOPERS LLP
PwC's Ethical Hacking service provides penetration testing across as range of different technologies from Internal and external infrastructure testing to web application and red team services
-
SECARMA LIMITED
Mobile application security testing involves evaluating mobile platforms to identify and address vulnerabilities that malicious actors could exploit. Whether you're developing or updating an app, early testing helps protect sensitive data, ensure legal compliance, and avoid security missteps that can erode user trust and damage your brand.
-
SOFTSERVE SYSTEMS LTD
SoftServe’s Manual Penetration Testing Services help organisations identify security vulnerabilities in cloud-hosted systems through controlled, expert-led testing. The service focuses on simulating real-world attack scenarios to assess security weaknesses and provide actionable remediation recommendations, excluding remediation implementation or bespoke software development.
-
ZOONOU LIMITED
Our CREST-accredited Mobile Application Penetration Testing helps secure native and hybrid iOS and Android apps. Using OWASP MASVS and recognised methodologies, we simulate real-world attacks, uncover vulnerabilities, and provide actionable recommendations. Services support GDS standards, GDPR, secure-by-design principles, and IT Health Check (ITHC) preparation for informed risk management.
-
BARRIER NETWORKS LIMITED
Synack’s adversarial pentesting for point in time or continuous combines
testing by the Synack Red Team, an advanced testing platform and
integrated vulnerability operations to deliver a better pentest experience. •
On-demand for web, host, API and mobile • Blends automatic and
adversarial human analysis with the platform’s vulnerability management
-
ZOONOU LIMITED
Our Infrastructure and Network Penetration Testing services help organisations secure their core IT environments, including networks, servers, cloud infrastructure, and connected services. Using industry-recognised frameworks such as CIS Controls, NCSC guidance, and ISO 27001, we identify vulnerabilities and misconfigurations before they can be exploited, supporting assurance, compliance, and risk management.
-
3B DATA SECURITY LTD
We deliver expert external infrastructure penetration testing to uncover vulnerabilities, secure networks, and prevent cyberattacks. Our service combines real world experience, manual and automated testing, and comprehensive risk analysis. We support organisations to strengthen their external defences and maintain robust infrastructure security.
-
PRISM INFOSEC
This service provides CREST-aligned penetration testing for web applications and APIs. Experienced security specialists assess technical controls using recognised methodologies to identify vulnerabilities and weaknesses. Findings are clearly documented in a comprehensive, easy-to-understand report with prioritised recommendations to support effective remediation and risk reduction.
-
PROTOS NETWORKS LIMITED
Protos provide CREST approved internal infrastructure penetration testing and vulnerability assessment services. To help organisations assess internal networks and identify known security weaknesses or vulnerabilities which could pose risks to critical infrastructure services. Providing contextual, concise and detailed reports removing false positives and sharing clear remediation advice.
-
BRIDEWELL CONSULTING LIMITED
Assumed Breach Testing simulates a real-world attacker operating inside your environment after an initial compromise. It assesses the impact of a breached low-privilege account, identifies defensive gaps beyond traditional penetration testing, and delivers actionable insights to strengthen detection, response, and overall security resilience.
-
Google Cloud EMEA Limited
Mandiant Penetration Testing provides comprehensive security assessments that simulate real-world cyberttacks to identify vulnerabilities across applications, networks, and cloud environments. Leveraging frontline threat intelligence, Mandiant's experts evaluate your defenses, providing actionable insights and remediation strategies to strengthen your security posture and proactively mitigate risks against sophisticated digital threats.
-
IJYI LTD
IJYI provides vulnerability assessment, penetration testing and cyber security testing services to help public sector organisations identify and manage security risks. The service covers infrastructure, applications and cloud environments and provides clear findings and remediation guidance. Delivery is provided by UK-based security specialists.
-
Qi Consulting
We can provide a Cyber Security testing service to support your Cloud-based solutions using selected specialist partners who are CHECK and CREST certified. This will be configured to meet your circumstances and requirements and includes security standards compliance auditing, e-security, penetration testing (CHECK scheme standards) and systems and network auditing.
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting’s Cyber Penetration Testing solutions will establish your baseline security position and define a road map to balance your risk appetite with your desired level of security. It will also be part of an ongoing structured program of security assurance activities to enable an appropriate level of cyber-resilience.
-
CLARANET LIMITED
Claranet provides penetration testing for public sector systems to identify vulnerabilities in networks, applications, and cloud environments. Our service follows industry best practice and NCSC guidance, delivering evidence-based reports with risk ratings and remediation advice. Available under G-Cloud Lot 3 for security assurance and vulnerability management.
-
GET SWARMS LIMITED
Penetration Testing Solution offered by Get Swarms provides comprehensive assessments to bolster organisation security. By simulating real-world cyber-attacks, we uncover vulnerabilities in networks and applications, enabling proactive defense measures. Detailed reports are produced together with proposed remediations to support ongoing cyber defence strategy.
-
3B DATA SECURITY LTD
We provide expert internal infrastructure penetration testing to uncover vulnerabilities within your organisation’s network and systems. Our approach combines manual and automated testing, real-world experience, and comprehensive risk analysis to identify weaknesses before they can be exploited. We support organisations to strengthen internal defences and protect their sensitive data.
-
HUNTER HEALTHCARE RESOURCING LIMITED
Hunter Healthcare delivers penetration testing and vulnerability assessment services in the NHS and Private-sector. We identify security weaknesses, misconfigurations and cyber risks across applications, networks, cloud platforms and user environments. Our specialists provide clear remediation guidance, governance reporting and assurance to strengthen resilience, improve security posture and protect sensitive data.
-
ZENSAR TECHNOLOGIES (UK) LIMITED
AI led Vulnerability Assessment and Penetration Testing (VAPT) service identifies, prioritises and validates security weaknesses across cloud, network and application environments. Using autonomous attack simulation with expert oversight, it safely exploits real world attack paths to assess risk exposure, strengthen security posture, support compliance with security testing and assurance requirements
-
3B DATA SECURITY LTD
We provide expert web application penetration testing to uncover vulnerabilities, secure sensitive data, and prevent cyberattacks. Our approach includes comprehensive security assessments, OWASP-aligned testing, and practical risk mitigation for websites and applications. We work with organisations to strengthen defences and ensure robust, reliable application security.
-
SIERRA NEVADA CORPORATION MISSION SYSTEMS UK, LTD
NodeZero is an autonomous penetration testing service that continuously assesses your security posture by safely emulating real-world attacker tactics to identify exploitable weaknesses before an attacker can. Going beyond vulnerability scanning, it finds and prioritises security gaps across: external/internal networks, cloud services, IDAM systems and IoT devices.
-
MAPLE NETWORKS LIMITED
Maple Networks’ Penetration Testing service identifies and safely exploits security vulnerabilities across infrastructure, applications, and cloud environments. Our pen test service simulates real-world attacks, it validates the effectiveness of security controls, providing actionable insights through detailed reporting, CVSS scoring, and remediation guidance to enhance organisational resilience against cyber threats.
-
INTEGRITY360 LIMITED
Integrity360’s Penetration Testing offer a range of services to meet any compliance needs. Continuous vulnerability management plays a key role in a well-functioning cyber security strategy by covering a variety of compliance requirements and protecting the business from the risks associated with security incidents.
-
Six Degrees
Our Penetration Testing services give you the information you need to enhance your protection against ransomware and other cyber-attacks. All of our Penetration Testing services are delivered by experienced, qualified ethical hackers. We provide summary reports in an easy to digest format that contain expert advice for reducing attack surface.
-
ARCANUM INFORMATION SECURITY LIMITED
Our Bespoke/Scenario-based penetration testing service provides tailored security assessments that replicate realistic threat scenarios specific to your organisation’s environment, objectives and risk profile. By simulating targeted adversary behaviour, our consultants identify exploitable weaknesses, validate current defences, and provide actionable remediation advice to improve resilience against sophisticated and emerging cyber threats.
-
MAPLE NETWORKS LIMITED
NodeZero is an autonomous penetration testing service that continuously assesses your security posture by safely emulating real-world attacker tactics to identify exploitable weaknesses before an attacker can. Going beyond vulnerability scanning it finds and prioritises security gaps across: external/internal networks, cloud services, IDAM systems and IoT devices.
-
TECKNUOVO LTD
We provide cyber security and penetration testing services enabling your teams to protect digital services.We apply risk-based security engineering, threat modelling and accredited testing aligned to NCSC guidance, identifying vulnerabilities, strengthening controls, and ensuring your platforms remain resilient, compliant, and secure throughout delivery and live operation. .
-
ITNEXTGEN LIMITED
ITNextGen's Security Testing Services provide security test professionals and security testers who identify vulnerabilities in public sector applications, infrastructure, and networks. We conduct penetration testing, vulnerability assessments, and security code reviews ensuring government systems meet NCSC guidance, Cyber Essentials Plus, and industry security standards.