-
PROTOS NETWORKS LIMITED
Protos provide CREST approved application penetration testing and vulnerability assessment services. To help organisations assess publicly exposed assets and identify known security weaknesses or vulnerabilities which could pose risks to critical infrastructure and application services. Providing contextual, concise and detailed reports removing false positives and sharing clear remediation advice.
-
3B DATA SECURITY LTD
We provide expert wireless penetration testing to uncover vulnerabilities in Wi-Fi networks and access points. Our approach combines manual and automated techniques with real-world threat intelligence to identify misconfigurations and security gaps, helping organisations strengthen wireless security, prevent unauthorised access, and protect sensitive data.
-
3B DATA SECURITY LTD
We provide expert API penetration testing across REST, GraphQL, SOAP, and microservices. Using manual and automated techniques combined with real-world threat intelligence, we identify authentication flaws, authorisation gaps, injection risks, and misconfigurations. We deliver actionable fixes that reduce attack surface, protect sensitive data, and strengthen your API security.
-
CYBERIS LIMITED
Cyberis offers an extensive range of technical security assessments and penetration testing services to the public and private sector, including NCSC CHECK IT Health Checks (ITHCs), to identify technical vulnerabilities and weaknesses across multiple systems and technologies, both cloud-based and traditional architectures, to mitigate the threats of data asset compromise.
-
GLOBALLOGIC CORP. UK LTD.
Comprehensive security assurance including SAST, DAST, penetration testing and container security. We secure software supply chains, harden infrastructure to CIS Benchmarks and mitigate OWASP Top 10 vulnerabilities. Delivery integrates seamlessly into DevSecOps pipelines for continuous vulnerability management and risk reduction across cloud, mobile and IoT environments.
-
FORTIS CYBER SECURITY LIMITED
Automated Penetration Testing as a Service (PTaaS) delivers fast, cost-effective, and continuous security assessments. Simulating real-world attacks, it identifies and validates vulnerabilities across internal and external networks, helping organisations strengthen security posture, maintain compliance, and reduce risk—supported by CREST accreditation and comprehensive, actionable reporting.
-
CODA SECURITY LIMITED
A range of services focused on testing, validating, and assuring the use of Azure cloud technologies. These include IT Health Checks, penetration tests, configuration audit, build review, and security review.
-
ACUITY APPLIED LIMITED
Acuity Applied Limited provides comprehensive quality assurance and testing services to support the delivery of high-quality digital services. Our specialists cover functional, non-functional (performance, load, stress, accessibility, security, penetration, and usability), automated, and exploratory testing. We also provide test architecture, strategy, planning, and management to ensure optimal outcomes.
-
CODA SECURITY LIMITED
A range of services focused on testing, validating, and assuring the use of Amazon Web Services (AWS) cloud technologies. These include IT Health Checks, penetration tests, configuration audit, build review, and security review.
-
CYBERFORT LIMITED
Cyberfort's team provide reliable independent assurance that applications, databases and associated infrastructure are protected from security threats. Using CREST and CHECK ITHC accredited methodologies we perform state of the art automated vulnerability scanning and carefully targeted manual testing to deliver an outstanding assessment across internal and external estates.
-
COGNISYS GROUP LIMITED
Cognisys conducts comprehensive web application pentests to assess security across web infrastructure and applications. Our CREST-accredited testers identify and expose vulnerabilities, test security controls, and assess weaknesses in application architecture. Testing covers the OWASP-Top-10, business logic issues, and data-handling processes. Detailed reports include exploitation impact analysis and prioritised remediation guidance.
-
BRIDEWELL CONSULTING LIMITED
Wireless penetration testing is performed to identify and exploit vulnerabilities in wireless networks, ensuring that unauthorised access, data breaches, and other security threats are mitigated to protect sensitive information.
-
D2NA
D2NA’s Security Assurance Services, aligned to our Cyber Ascend Framework, provide Penetration Testing, Red Teaming, Purple Teaming, Cyber Essentials/CE Plus, Security Health Checks, Cyber Attack Simulation. Designed for UK public‑sector needs, our accredited experts strengthen resilience, validate controls, and ensure compliance with government security and assurance standards.
-
BROOKCOURT SOLUTIONS LIMITED
Penetration testing provides in-depth investigation into security of web applications, mobile applications, infrastructure (external/internal); Server Build reviews, Wi-Fi, firewall assessments and connected/embedded devices (IOT /IC/SCADA). Red Teaming Assessments and Security Training workshops, delivered by experienced Security Consultants, simulate actions of a malicious threat actor, uncovering/classifying vulnerabilities used to exploit/damage businesses.
-
Instil
Instil provides penetration testing for APIs to identify vulnerabilities that could expose data or compromise services.
Testing focuses on authentication, authorisation, input validation, and business logic.
-
QUALITEST GROUP UK LTD
Qualitest's IoT Security Testing service provides thorough evaluations led by certified penetration testers. With meticulous attention, Qualitest's team tests and assesses your IoT ecosystem security to uncover vulnerabilities and minimise risks. IoT Security testing includes penetration, device software, firmware and hardware, data, network, API and more.
-
Resillion
Test WiFi network for security | Site sweep for rogue wireless devices | Regular sweep and test as required by PCI DSS | Wireless network configuration review and advice | Review and lockdown advice for wireless capable devices | Wireless access point penetration testing
-
COMPLETE QUALITY ENGINEERING LIMITED
CQE’s Non-Functional Testing and assurance service includes:
performance, security, penetration, compliance, compatibility, usability,
accessibility, maintenance, operational acceptance, resilience, and
disaster recovery. We provide individual Non-Functional Testing
specialists, teams, consultancy and/or managed services to deliver the
optimum 'Shift Left’ Non-Functional Testing approach.
-
NRD PARTNERS LTD
NRD Partners delivers IT Health Check penetration testing for public sector systems, identifying vulnerabilities, attack paths, and control weaknesses. Assessments align to UK Government and NCSC guidance, providing evidence-based findings and practical remediation advice to support accreditation, assurance, and informed risk-based security decisions across critical digital services and platforms.
-
ACCENTURE (UK) LIMITED
Penetration testing aims to uncover security weaknesses in IT systems based on specific needs and targeted scope. We offer a range of offensive security testing services. From traditional penetration testing focused on individual applications, networks or services, to phishing simulations and in-depth simulated attacks.
-
MONDAS CONSULTING LTD
Continuous penetration testing replaces one-off assessments with ongoing, adaptive security validation. It continuously identifies new vulnerabilities, verifies remediation, supports compliance, and reflects real operational change through continuous penetration testing. This provides stronger assurance, whilst also providing better prioritisation and reduced exposure time.
-
INCURSION CYBER SECURITY LTD
Penetration testing by a Cyber Scheme Accredited Company. Consultants hold UK Cyber Security Council professional titles. We test web applications, APIs, mobile apps, external and internal infrastructure, cloud (AWS, Azure, Microsoft 365), wireless, physical security and build configurations. Manually written reports within 5 working days, with free retesting.
-
MAPLE NETWORKS LIMITED
Maple’s PTaaS provides continuous, on‑demand penetration testing that identifies exploitable weaknesses across external, internal, cloud and identity surfaces. Pen testing as a service delivers autonomous and human‑assisted testing, exploit proof, attack‑path‑driven risk context, instant retesting, remediation guidance, and full compliance‑aligned evidence packs. All testing is performed by CREST‑certified consultants.
-
LAYER 7 LIMITED
We deliver independent IT Health Checks using CHECK and CREST-aligned methodologies to identify security weaknesses across applications, infrastructure and cloud environments. Our accredited testers assess technical vulnerabilities, configuration weaknesses and control effectiveness, providing clear, risk-based findings to support remediation and assurance decisions.
-
Resillion
Test wireless network for security | Site sweep for rogue wireless devices | Regular sweep and test as required by PCI DSS | Wireless network configuration review and advice | Review and lockdown advice for wireless capable devices | Wireless access point penetration testing
-
CYBER SECURITY ASSOCIATES LTD
CSA’s Penetration Testing as a Service provides continuous, expert‑led security testing across networks, applications, cloud and APIs. Combining automated scanning with manual validation, PTaaS delivers real‑time findings, on‑demand retesting, prioritised remediation guidance and actionable reporting, helping organisations identify vulnerabilities early, reduce risk and maintain strong, ongoing security assurance.
-
MTEST LABS LIMITED
MTEST Labs delivers manual and automated mobile application testing to CREST standards, with penetration testing through our certified cyber security consultants; providing services on all operating systems, including iOS, Android and Windows, to OWASP Top 10 standards to identify cyber security vulnerabilities and weaknesses, with solution recommendations, satisfying user needs.
-
INTEGRITY360 LIMITED
PTaaS provides a flexible and continuous approach to penetration testing requirements, particularly for organisations that have an ongoing need for assessments and identification of exposures, due to constant infrastructure changes, more rapid application development cycles, and the expansion of the attack surface.
-
ARCANUM INFORMATION SECURITY LIMITED
Arcanum is a National Cyber Security Centre (NCSC) Assured Cyber Security Consultancy in Risk Management, Audit & Review and Security Architecture. We are CHECK and CREST Accredited for Pen Testing and deliver assessments for clients of all sizes and sectors. Our testers are accredited by the UK Cyber Security Council.
-
SOFTCAT PLC
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy