-
CYBERLAB SECURITY LIMITED
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
CHESS ICT LIMITED
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy
-
PHOENIX SOFTWARE LIMITED
Sophos Internal Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
Wavenet
CyberGuard delivers expert penetration testing to uncover security weaknesses in networks, applications, and infrastructure. Accredited by CREST and NCSC CHECK, our service combines rigorous assessment with actionable remediation advice, helping organisations strengthen defences, meet compliance standards, and reduce cyber risk through comprehensive, tailored testing methodologies.
-
C3IA SOLUTIONS LIMITED
C3IA’s Security Testing services identify vulnerabilities, tests security measures, and simulates real world attacks to protect critical systems. Early risk detection ensures compliance, enhances organisational resilience, and maintains operational integrity, providing robust protection for mission critical environments through methodologies including IT Health Checks, Penetration Testing, and Vulnerability Assessments.
-
BRIDEWELL CONSULTING LIMITED
Bridewell Provide a range of CREST Accredited Services for Security Operation Centre, Incident Response, Incident Exercises, Intelligence Led Penetration Testing and Red Team, Penetration Testing and Vulnerability Assessments.
-
REDROCK CONSULTING LIMITED
RedRock identify security vulnerabilities through comprehensive security assessments and penetration testing. Our certified ethical hackers test applications, infrastructure, and networks using manual and automated techniques, providing detailed findings and remediation guidance that improve security posture before attackers can exploit weaknesses.
-
QUALITEST GROUP UK LTD
Safeguard your organisation with our independent Cloud Security Testing. Our cyber-security testing suite assesses and identifies vulnerabilities covering cloud-hosted network and infrastructure solutions (including Azure, AWS, GCP, Oracle, Fujitsu, Alibaba, IBM, Tencent, OVHcloud, DigitalOcean, Linode, private/hybrid cloud), and cloud-hosted applications. Our cloud security testing services includes independent network security assessments.
-
BRICKENDON CONSULTING LIMITED
Brickendon specialises in comprehensive cybersecurity testing, including penetration testing and vulnerability assessments, enabling organisations to identify and address weaknesses in their digital infrastructure before they are exploited by malicious actors. We help organisations to mitigate risks effectively and protect what matters most in the digital age.
-
ASPIRE TECHNOLOGY SOLUTIONS LTD
Aspire provide CREST-accredited penetration testing designed to improve your organisations cybersecurity posture by identifying and addressing vulnerabilities and weaknesses in your infrastructure before malicious actors can exploit them. Our approach aligns with the Penetration Testing Execution Standard (PTES) framework, a globally recognised and respected set of guidelines for ethical hacking.
-
SECQUEST INFORMATION SECURITY LTD
At SecQuest, we are an NCSC assured CHECK provider who specialises in penetration checks, IT health checks, and security audits. We can provide cloud security audits and reviews, which can help ensure compliance to regulations, as well as ensuring your cloud services are secure against the latest threats.
-
DIGITALXRAID LTD
Mobile Application Penetration Testing assesses security from the perspective of an attacker attempting to identify weaknesses in Android and iOS applications. Testing evaluates whether vulnerabilities could allow application compromise or unauthorised access to sensitive data. Assessments are performed from both unauthenticated and authenticated perspectives,
-
3B DATA SECURITY LTD
We provide advanced threat intelligence-led penetration testing to identify emerging risks and adversary tactics targeting your organisation. By leveraging real-world threat data, we simulate realistic attack scenarios, prioritise vulnerabilities based on active threat trends, and deliver actionable insights to strengthen your security posture against evolving cyber threats.
-
CYBER SECURITY ASSOCIATES LTD
CSA Cyber’s Specialist Penetration Testing delivers deep‑dive, research‑led assessments across AI/ML, embedded devices, IoT ecosystems and Operational Technology. Senior consultants apply adversary‑style techniques to uncover vulnerabilities scanners miss, providing risk‑prioritised reporting and pragmatic remediation guidance. Engagements are tailored to complex environments, delivering high‑fidelity assurance without disrupting critical operations.
-
DIONACH LTD
Dionach are a NCSC CHECK Green Light provider of manual penetration testing services. Dionach will identify security weaknesses and vulnerabilities in the target systems, and produce a comprehensive and detailed report in line with NCSC's requirements, outlining the issues identified and practical recommendations on how to resolve them
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting provides Non-Functional tests and Functional testing in line with your requirements. Performance testing and automatic test scrips can be developed and run. On and off-site tests can be performed utilising key testing tools and techniques, in line with relevant Agile, Prince or other Methodologies.
-
Instil
Instil provides penetration testing for mobile applications on iOS and Android to identify security weaknesses in mobile-specific contexts.
Testing focuses on client-side behaviour, data storage, and backend interaction.
-
PRISM INFOSEC
A CREST & NCSC CHECK accredited provider delivering IT Health Checks (ITHC) and penetration testing for cloud services and applications. Our service covers all elements required for a comprehensive scope, fully aligned with NCSC guidance to ensure compliance and robust security assurance.
-
TRUSTMARQUE SOLUTIONS LIMITED
Delivery of a wide range of penetration and security testing services.
-
ITogether
ITogether offers penetration testing services conducted by CREST-certified professionals to assess the security of IT systems. This service simulates realistic cyber-attacks to identify vulnerabilities in network, applications, and systems, providing businesses with a clear path to enhance their cyber resilience.
-
COGNISYS GROUP LIMITED
Cognisys conducts comprehensive infrastructure pentest assessing security across networks, systems, and devices. Our CREST-accredited testers identify vulnerabilities, assess weaknesses, and report likelihood of breaches. Testing identifies default configurations, weak credentials, and exploitable settings. Detailed reports include vulnerability analysis, exploitation impact assessment, and prioritised remediation recommendations
-
CYBER SECURITY ASSOCIATES LTD
CSA Cyber’s AI/ML Penetration Testing service delivers research led security assessments across conversational AI, agentic LLM systems, model hosting, pipelines, and training data. Using manual, adversarial techniques aligned to OWASP LLM Top 10, our experts uncover AI‑specific vulnerabilities, providing clear remediation guidance to strengthen resilience across the full AI lifecycle.
-
3B DATA SECURITY LTD
We provide specialist penetration testing for IoT and SCADA/ICS environments to identify vulnerabilities that could impact safety, availability, and data integrity. Combining OSINT, configuration review, protocol analysis, and controlled exploitation, we assess embedded devices, gateways, and control networks to harden operational technology without disrupting production.
-
3B DATA SECURITY LTD
We provide expert Penetration Testing and IT Health Checks under the NCSC CHECK scheme. We identify vulnerabilities, assess security risks, and ensure compliance across networks, applications, and infrastructure to protect organisations against cyber threats and optimise IT performance.
-
CCL-FORENSICS LIMITED
CCL are accredited by NCSC (under the CHECK scheme to deliver IT Health Checks (ITHC, penetration testing, pentesting). Our certified security consultants can assess all systems including web applications, mobile applications, wireless, infrastructure and cloud services. Our tailored services help identify your unique threats and vulnerabilities.
-
MAPLE NETWORKS LIMITED
Maple conducts targeted penetration tests of external and internal infrastructure to uncover exploitable weaknesses across networks, hosts, and services. Our pen testing service verifies real‑world impact under written authorisation, score findings with CVSS, and deliver practical remediation guidance to reduce risk and strengthen operational resilience.
-
DIONACH LTD
AI penetration testing evaluates the security of AI systems/applications, simulating real-world cyber attacks to identify vulnerabilities, weaknesses and potential security risks specific to AI systems. Dionach specializes in testing systems that use machine learning (ML) and Large Language Models (LLMs), ensuring they are safe as possible from evolving cyber threats.
-
INFUSE CONSULTING LIMITED
Infuse is a specialist provider of independent security testing services.
The service provides security test professionals together with our proven OSSTMM (Open-Source Security Testing Methodology Manual). The OSSTMM is a peer-reviewed methodology for performing security and penetration tests and is the de-facto standard for security testing.
-
DEMYSTIFY SECURITY LIMITED
ITHC management services coordinating independent penetration testing to meet regulatory and assurance requirements. We manage scope, accredited testers, remediation tracking and reporting, acting as a single point of contact to ensure timely, high-quality assurance aligned with organisational risk and compliance needs.
-
CODA SECURITY LIMITED
An internal or external assessment of technical and organisational security by an NCSC CHECK accredited team. This IT Health Check activity can include penetration testing, build reviews, firewall rule audits, internal and external penetration testing, and source code review. These are dependent on the accreditation requirements and scope.