-
3B DATA SECURITY LTD
We provide expert cloud penetration testing for M365, GCP, Azure, and AWS environments. Our approach combines manual and automated techniques with real-world threat intelligence to uncover misconfigurations and vulnerabilities, helping organisations strengthen cloud security, reduce risk, and protect sensitive data across critical platforms.
-
VODAFONE LIMITED
Tailored solutions/consultancies to support security strategy. Our portfolio includes, but not limited to, Penetration & Webapp testing, Incident Response and security reviews
Features: Cyber Security Review, Incident Response Services, Spectrum Testing, Consultancy, Customer Account Security Manager, Penetration Testing.
Benefits: understand security maturity, security strategy, Incident support, Compliance and governance support
-
QUALITEST GROUP UK LTD
Blockchain and Distributed Ledger quality assurance and testing: Qualitest's certified blockchain testing quality engineers ensure seamless data flows and data privacy across nodes by verifying business processes, roles, permissions, and order of alignment in your ledger. Blockchain and Distributed Ledger test automation and continuous testing, Blockchain platform testing, security testing.
-
ARCANUM INFORMATION SECURITY LIMITED
External Infrastructure Testing assesses the security of internet-facing systems, networks and services. By identifying vulnerabilities reachable from outside the organisation, we help clients reduce exposure, strengthen boundary controls, and prevent unauthorised access attempts that could compromise business-critical operations or sensitive information. Testing is conducted by our NCSC Assured CHECK team.
-
DATA CAREERS LIMITED
Data Careers’ Testing-as-a-Service provides SDLC end-to-end software testing and quality assurance services. We deliver ISTQB qualified and DDaT aligned specialists and or teams; rapidly deployed, with BPSS, SC, DV, NPPV clearances, which augments customer teams, or provides a complete outcome-based service, meeting GDS, WCAG, TCoP, GDPR, NCSC standards.
-
SECARMA LIMITED
Objective-Led Testing is a targeted security assessment built around the specific goals an attacker would pursue — such as accessing sensitive data, escalating privileges, or bypassing a critical control. Instead of testing everything, we concentrate on the scenarios that matter most to provide concentrated and meaningful insight.
-
CHANGE SPECIALISTS LIMITED
Change Specialists provides Quality Assurance and Software Testing services to assure the quality, performance and reliability of systems and software. We support buyers by planning and executing testing activities, identifying defects and risks, and providing clear reporting to support confident deployment and operational readiness.
-
NCC Group Security Services Limited
Our Advanced Application Security Testing (AAST) service provides a more in-depth automated authenticated assessment of a web application, combining multiple web application scanners with manual validation and testing to provide a much more comprehensive assessment than a standard web app scan.
-
MOORE STEPHENS INSIGHT LIMITED
Moore Insight will ensure you have properly tested ERP systems including Finance, Procurement, HR and Payroll. We will help you develop a testing strategy and provide test scripts. We will support the execution and documentation of tests including User Acceptance Testing (UAT); and management of issues.
-
ZOONOU LIMITED
Our Web and Mobile Application Testing services help public sector teams deliver reliable, user-centric digital services across browsers, iOS, Android, and other platforms. We provide software testing and quality assurance (QA) across functional, exploratory, regression, non-functional, performance, penetration, accessibility, UAT testing, and real-device compatibility checks.
-
TRUSTACK LIMITED
Penetration Testing as a Service (PTaaS) combining automated scanning with expert-led testing. Includes biannual testing, real-time reporting dashboard, exploit path mapping, remediation guidance, and two subsequent retests.
-
Yes We Hack SAS
Continuous penetration testing service delivering proactive vulnerability management and information assurance. Provides recurring, automation-led security assessments, validated results, compliance monitoring via real-time dashboards. Supports ISO 27001 alignment, GDPR compliance, and NCSC guidance. Enables predictable costs, enhanced cyber resilience, and continuous visibility of organisational risk and security posture across government environments.
-
CAPGEMINI UK PLC
Capgemini's Red Teaming service is designed to simulate sophisticated cyber-attack scenarios to test the detection and response capability of an organisations security monitoring and operations teams. Advanced techniques are used to test physical building security, employee security awareness as well as external and internal infrastructure, applications and cloud services.
-
TALENT INTERNATIONAL (UK) LIMITED
Cloud QA & Performance Testing delivers quality engineering for cloud services. We build automated test frameworks, integrate them into CI/CD, and run load, stress, volume, soak and scalability tests with capacity planning. We provide end-to-end assurance, operational readiness, and engage third parties for accessibility and penetration testing to statutory standards.
-
MAPLE NETWORKS LIMITED
Maple performs targeted wireless penetration testing to uncover weaknesses across Wi‑Fi infrastructure, client onboarding, authentication and encryption. Our pen testing serivce validates real‑world attack paths, assess segmentation and guest networks, and provide CVSS‑scored findings with clear remediation guidance to reduce risk and strengthen secure, reliable wireless operations.
-
BRITISH TELECOMMUNICATIONS LIMITED
We provide global offensive security services, using ethical hacking to identify and remediate weaknesses across people, processes, applications, and infrastructure. Our experienced, certified consultants deliver structured penetration testing and tailored risk guidance, helping organisations strengthen security, protect their assets and reputation, and stay ahead of evolving cyber threats.
-
PHOENIX SOFTWARE LIMITED
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
SOFTCAT PLC
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy
-
CYBERLAB SECURITY LIMITED
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy.
-
CHESS ICT LIMITED
Sophos External Penetration testing Services provide expert-led security assessments that proactively reduce risk and strengthen resilience. Certified specialists simulate real attacker techniques to test networks, systems, applications and people, identify vulnerabilities, validate incident readiness, support compliance, and deliver tailored remediation guidance and strategy
-
MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED
Michael Page Consulting’s CREST Penetration Testing service provides the confidence you need that your cyber defences are appropriate and effective. Our expert penetration testers will analyse your cyber security vulnerabilities either remotely or in person, helping you strengthen your organisation against cyber-crime and reduce the risk of data breaches.
-
CLARANET LIMITED
Claranet delivers NCSC-assured CHECK penetration testing for UK public sector systems, aligned with HMG security standards. Covering asset types including web applications, networks, and employees, these services help organisations identify vulnerabilities and assess risks of data and system compromise from malware or malicious actors, strengthening resilience against evolving cyber threats.
-
CLARANET LIMITED
Claranet’s Continuous Security Testing (CST) provides ongoing vulnerability detection and validation across applications, APIs, external and internal infrastructure and endpoints.
Combining automated scanning with expert penetration testing, CST helps public sector organisations understand risk, reduce exposure windows, strengthen cyber resilience, and maintain compliance through proactive, continuous security assurance.
-
COFORGE U.K. LIMITED
Software testing is a process to ensure the software system is defect-free. It provides users with independent information about the quality of software and a risk-based assessment. It's a process to evaluate the functionality of a software application to find whether the developed software meets the designated requisite standards.
-
ARCANUM INFORMATION SECURITY LIMITED
Our Web Services / API Penetration Testing evaluates the security of APIs and backend services supporting modern and legacy applications. We assess authentication, authorisation, data exposure, rate-limiting and logic vulnerabilities, providing detailed remediation advice to ensure resilient service-to-service communication and protect sensitive data across connected systems.
-
QUALITEST GROUP UK LTD
Testing of connected devices/IoT: Hardware and firmware testing, platform testing, data and performance testing, UI/API automation, for Medical IoT devices, consumer IoT, home automation, smart meters, Highways Agency Traffic management, Ambulance and Fire management and Airwave/ESN communications. Automated end-to-end IoT testing with in-house phygital solutions and specialist IoT labs.
-
BRIDEWELL CONSULTING LIMITED
OSINT involves analysing publicly available information to identify key risks, vulnerabilities, potential data leaks, and how to address them.
Our highly certified OSINT team use the same tools and tactics as cyber attackers to simulate real attack scenarios, uncovering weaknesses as part of wider penetration testing.
-
RENAISSANCE COMPUTER SERVICES LTD
Managed penetration testing for cloud and internet-facing systems. We scope and coordinate the engagement, manage access and scheduling, and triage findings with clear remediation actions. Testing and certified assessor review are delivered by an approved specialist partner. CREST-accredited reports are delivered via our CREST-accredited partner.
-
PEN TEST PARTNERS LLP
We assess the security posture of your web applications. We identify risks and security issues providing recommendations on how to address these security issues to harden the applications to make them resilient to compromise. Highly skilled manual testing is conducted using proprietary web application OWASP top 10 methodologies.
-
IT LABS GROUP LTD
This service provides professional quality assurance and testing support for cloud-based applications. It includes test design, manual and automated testing, performance and scalability testing, infrastructure performance testing, accessibility testing, and operational readiness testing, delivered within buyer-owned cloud environments to reduce risk and improve service quality.