-
PA CONSULTING SERVICES LIMITED
PA Consulting provides Cyber Security services including CREST accredited Penetration Testing. Our experience enables us to provide assurance of critical systems, including cloud (AWS, Azure, GCP) and hybrid environments. We can assess endpoints, build and configuration, firewall rules, switches, infrastructure, Active Directory, embedded devices, mobile and binary applications
-
CYBERFORT LIMITED
Our consultants attempt to breach security of internal and external networks and attempt to gain access to resources and sensitive information through a broad evaluation of the systems in place. Tests are conducted primarily as an outsider or via internal compromised network connection to attempt access.
-
Nortal UK
Our consultants attempt to breach security of internal and external networks and attempt to gain access to resources and sensitive information through a broad evaluation of the systems in place. Tests are conducted primarily as an outsider or via internal compromised network connection to attempt access.
-
SAPPHIRE TECHNOLOGIES LIMITED
Threat-Led Penetration Testing (TLPT), also known as Red Team Testing is an enhanced and controlled security test to attempt to compromise the cyber resilience of a system or network by simulating the tactics, techniques and procedures of real-life threat actors. Our TLPT assess critical attack pathways to understand security posture.
-
Stone Technologies Limited Trading as Converge Technology Solutions
Good security practice involves regular testing of your IT infrastructure for vulnerabilities and exploitable weaknesses. Penetration Testing, also referred to as Pen Testing or ethical hacking, is an authorised attack on a network, web/mobile application, or a Wi-Fi network to find security vulnerabilities that an attacker could exploit.
-
Nortal UK
Comprehensive system assurance meeting all requirements of the NCSC CHECK IT Health Check (ITHC). Fully managed, fixed price CHECK assessments across SaaS, PaaS and IaaS hosted locally or within Microsoft Azure, Amazon Web Services (AWS) and on VMWare based and open-source virtualisation platforms.
-
CYBERFORT LIMITED
Comprehensive system assurance meeting all requirements of the NCSC CHECK IT Health Check (ITHC). Fully managed, fixed price CHECK assessments across SaaS, PaaS and IaaS hosted locally or within Microsoft Azure, Amazon Web Services (AWS) and on VMWare based and open-source virtualisation platforms.
-
DELL CORPORATION LIMITED
Dell Technologies Security Services delivers end-to-end advisory, implementation, and managed protection across multicloud—covering identity, endpoints, data, apps, and infrastructure—leveraging Dell security and partners. Offerings include assessments, cloud security build-out, and operations: MDR, vulnerability management, penetration testing, and incident recovery retainers to harden posture, reduce risk, and accelerate outcomes.
-
PRISM INFOSEC
This service delivers structured penetration testing for mobile applications and supporting APIs or infrastructure. Experienced security specialists follow recognised methodologies to identify vulnerabilities and weaknesses. Findings are presented in a clear, comprehensive report with prioritised recommendations to support effective remediation and improved mobile application security.
-
FOREGENIX LTD
Services tailored to test your defences and detect weaknesses before attackers do, delivering effective security bleeding-edge techniques, methodologies & effective development and implementation of a range of Adversarial and Assurance services
-
ACCENTURE (UK) LIMITED
A full lifecycle service to provide functional and non-functional testing of multi-channel products and services (web, mobile, app, TV, wearable devices) in B2B or B2C environments. Our services include full stack testing (unit, story, integration, performance, penetration, acceptance), introduction of improved tools/techniques, software designed for testing and improved collaboration/knowledge sharing.
-
ACCENTURE (UK) LIMITED
A full lifecycle service to provide functional and non-functional testing of multi-channel products and services (web, mobile, app, TV, wearable devices) in B2B or B2C environments. Our services include full stack testing (unit, story, integration, performance, penetration, acceptance), introduction of improved tools/techniques, software designed for testing and improved collaboration/knowledge sharing.
-
NORTHDOOR PLC
Penetration Testing as a Service / Vulnerability Management: Delivers continuous, automated testing to uncover and prioritise vulnerabilities across your IT environment. Expert-led remediation guidance helps you fix weaknesses quickly, keeping your systems secure between formal assessments. Leverages solutions from Edgescan; Cybertec Security; Jump-Sec and Pentiq
-
PRISM INFOSEC
This service delivers NCSC CHECK and CREST-aligned infrastructure penetration testing to identify exposed hosts, services, and vulnerabilities across network environments. Combining automated scanning with expert analysis, we provide clear, actionable assurance to support risk reduction, regulatory compliance, and informed security decision-making.
-
CODA SECURITY LIMITED
A range of services focused on the delivery of through-life technical assurance of Government systems. This includes integration with service reviews, DevSecOps service design and support, CI/CD pipeline reviews, development of threat models and test cases, and the provision of targeted vulnerability research and penetration testing activities.
-
ARCANUM INFORMATION SECURITY LIMITED
Arcanum is an NCSC Assured ‘Green Light’ Service Provider of CHECK Penetration Testing and ITHCs. We provide comprehensive penetration testing that follows the methodology and meets the standards of the NCSC CHECK scheme.
-
DIGITALXRAID LTD
DigitalXRAID provides PCI DSS Penetration Testing of infrastructure and web applications. Our penetration testing specialists are highly experienced professionals. We help organisations understand cyber risk, security vulnerabilities and the business impact if exploited.
-
GET SWARMS LIMITED
Our Swarms provide Functional and non-functional testing, including performance testing and test automation. Our testing process ensures the software system is defect-free. It provides users with independent information about the quality of software and a risk-based assessment. It's a process to evaluate the functionality of a software application.
-
Instil
Instil conducts internal and external penetration testing to assess network security from both inside and outside organisational boundaries.
Testing simulates realistic attacker behaviour to identify weaknesses in infrastructure and access controls.
-
TESTINGXPERTS LIMITED
TestingXperts provides specialised Blockchain testing services across design, development, integration, and operations. Tx validates smart contracts, consensus mechanisms, nodes, and transactions using structured QA processes, security-led testing, and automation accelerators, enabling enterprises to deploy scalable, secure, compliant, and trustworthy decentralized platforms with confidence.
-
3B DATA SECURITY LTD
We provide expert firewall rule base and configuration penetration testing across Cisco, Palo Alto, Fortinet, Check Point, AWS, and Azure. Our manual and automated analysis identifies overly permissive rules, shadowed policies, segmentation gaps, weak NAT, and logging issues. Providing actionable hardening guidance to reduce attack surface and improve detection.
-
TESTINGXPERTS LIMITED
TestingXperts provides Managed Cybersecurity Testing and Monitoring through continuous vulnerability scanning, penetration testing, security monitoring, and incident readiness. Using Tx-Secure (Wazuh-based), SIEM, and threat intelligence, we deliver 24x7 coverage, rapid detection, and proactive mitigation. Our managed model ensures ongoing protection aligned with MITRE ATT&CK and compliance frameworks.
-
PENTEST CYBER LTD
Full range of pro-tools OSWE CSTL level penetration testing ITHC, Cyber Essentials Plus and IASME Cyber Assurance L1 and 2 services to CREST and other industry standards.
-
PRISM INFOSEC
Our ITHC penetration testing services are NCSC CHECK & CREST-Approved and delivered by our team of experienced penetration testers and application security experts who follow formal methodologies to assess an application’s security controls for vulnerabilities and weaknesses and deliver a comprehensive, yet easy to decipher report.
-
CYBER SECURITY SPECIALISTS LIMITED
The Cyber Security Specialists Penetration Testing service is CREST-accredited over a decade of experience in scoping and providing Penetration Testing to Clients of all different shapes and sizes from start-ups and Digital Agencies to multinationals and Public Sector Organisations.
-
SAPPHIRE TECHNOLOGIES LIMITED
Sapphire provides CREST-certified project penetration testing assessments for customers requiring standalone testing. Assessments of a customer’s vulnerabilities align with recognised industry standards.
Testing is undertaken using custom toolkits and well-established commercial tools to provide a unique and thorough assessment which is not possible using automated vulnerability scanners.
-
Yes We Hack SAS
Crowdsourced penetration testing through a managed Bug Bounty service connecting UK public sector organisations with vetted ethical hackers to surface and evaluate critical vulnerabilities. The platform enables continuous testing, outcome-based rewards, provides in-house triage and complies with government-backed security standards, including ISO 27001 and GDPR.
-
DBAAS LTD
We provide expert testing design and consulting services to help organisations achieve high‑quality software delivery. Our team defines effective test strategies, creates structured test plans, and offers guidance on best practices. We ensure robust validation, improved performance, and reliable outcomes through tailored testing frameworks aligned with business and technical requirements.
-
ESYNERGY SOLUTIONS LIMITED
We provide end-to-end quality assurance frameworks that ensure complete test coverage and support automated testing. We deliver functional testing, integration testing, penetration testing, security testing, and code coverage, all integrated into modern CI/CD pipelines. We minimise manual intervention, reduce defects, and deliver high-quality, reliable services that adhere to GDS standards.
-
QUALITEST GROUP UK LTD
Non-Functional Testing (NFT), engineering and assurance including: performance, security, penetration, compliance, compatibility, usability, accessibility, operational acceptance, resilience, monitoring, alerting, fail-over and disaster recovery testing. Services include Test Consultants and architects, testing teams, and managed services to implement tailored strategies and 'Shift-Left’ Non-Functional Testing (NFT) approaches aligned to your delivery methodology.