| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Security architect | £1,250.00 | |
| Lead security architect | £1,550.00 | |
| Principal security architect | £1,750.00 |
JUMPSEC LIMITED
API Penetration Testing
Security testing of web and mobile APIs to identify authentication weaknesses, broken authorisation, injection points and data exposure across REST, GraphQL and similar interfaces.
Features
- Manual testing of REST, GraphQL, other APIs
- Focus on auth, tokens, authorisation logic.
- Abuse test rate limits, mass assignment, data exposure.
- Review error handling and debug output.
- Map sensitive data flows between services.
- Review OAuth, JWT, key management practice.
- Provide exploit replay steps and evidence.
- Supply remediation advice aligned to your frameworks.
Benefits
- Protect sensitive data moving system-to-system.
- Prevent silent leakage through permissive endpoints.
- Reduce fraud and automated abuse risk.
- Give engineers clear secure API expectations.
- Support safer supplier and partner integration.
- Build trust in public or partner APIs.
- Meet compliance for regulated data in transit.
- Ask: can outsiders query data they should never see?
Pricing
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bids@jumpsec.com.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 15
Service ID
1 1 6 0 2 6 8 1 9 0 0 0 3 5 8
Contact
JUMPSEC LIMITED
Andy Roberts
Telephone: 0333 939 8080
Email: bids@jumpsec.com
About the service
- Service categories
-
Cloud Support Services
Security Services
- Security risk management
- Security design
- Security audit services
- Security quality assurance (QA) and testing
Service scope
- Service constraints
-
We require test credentials, API documentation and stable test endpoints.
Unauthorised mass data extraction from live production is out of scope.
Source code changes and secure SDLC uplift are separate services.
User support
- Email or online ticketing support
- Yes
- Support response times
-
Typical Response time is less than 1 hour during Normal Business Hours.
Consultants are aligned on a project-by-project basis with direct access to the client.
Direct contact with the consultant can be made by phone or the preferred communication/messaging channel.
Delivery Management / Project Co-ordination reachable by email /phone/messaging - see Service Description. - User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
-
Typical Response time is less than 1 hour during Normal Business Hours.
Consultants are aligned on a project-by-project basis with direct access to the client.
Direct contact with the consultant can be made by phone or the preferred communication/messaging channel.
Delivery Management / Project Co-ordination reachable by email /phone/messaging - see Service Description.
Supplier type
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Security Clearance (SC)
Pricing
- Discount for educational organisations
- No
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security audit and assurance | £1,150.00 | |
| Principal cyber security audit and assurance | £1,650.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security governance and risk manager | £1,150.00 | |
| Lead cyber security governance and risk manager | £1,450.00 | |
| Principal cyber security governance and risk manager | £1,650.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber incident response | £1,400.00 | |
| Lead cyber security incident response | £1,500.00 | |
| Principal cyber security incident response | £2,450.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security vulnerability management | £1,150.00 | |
| Lead cyber security vulnerability management | £1,300.00 | |
| Principal cyber security vulnerability management | £1,650.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security digital forensics | £1,400.00 | |
| Lead cyber security digital forensics | £1,500.00 | |
| Principal cyber security digital forensics | £2,450.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security testing | £1,150.00 | |
| Lead cyber security penetration testing | £1,450.00 | |
| Principal cyber security testing | £1,750.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security secure systems architecture and design | £1,250.00 | |
| Lead cyber security secure systems architecture and design | £1,550.00 | |
| Principal cyber security secure systems architecture and design | £1,750.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate delivery manager | £500.00 | |
| Delivery manager | £700.00 | |
| Senior delivery manager | £900.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Programme delivery manager | £800.00 |
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- ISO/IEC 27001 accredited by
- British Assessment Bureau
- ISO/IEC 27001 accreditation date
- Wednesday 11 June 2025
- What the ISO/IEC 27001 doesn’t cover
- N/a
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- ISO 9001 certification accredited by
- British Assessment Bureau
- ISO 9001 accreditation date
- Wednesday 11 June 2025
- What the ISO 9001 doesn’t cover
- N/a
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber Essentials Certificate Number
- Ff15ec0d-1d5e-4e13-8bbd-dc59148e1893
- Cyber essentials plus
- Yes
- Cyber Essentials Plus Certificate Number
- 59682a3d-b7a2-486a-805a-26c964e7c1b6
- Other security certifications
- Yes
- Any other security certifications
- CREST Membership
Social value
- Mission: Kick start economic growth
-
To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Mission: Break down barriers to opportunity
-
By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bids@jumpsec.com.
Tell them what format you need. It will help if you say what assistive technology you use.