Skip to main content

Help us improve the Digital Marketplace - send your feedback

Reversec

Application Security Assurance

Application Security Assurance is designed to assess digital applications against “known” vulnerability types (such as those recorded in the OWASP Top 10) to identify exploitable vulnerabilities which could be leveraged by a malicious actor. This level of assessment goes beyond signature-based scanning activities providing increased assurance and resilience to attack.

Features

  • Penetration testing of internal and external applications
  • Ensures that users are only able to perform intended actions
  • Ensures that attacker ability to abuse compromise accounts is limited
  • Accurately simulates capable threat actor groups and sophisticated techniques
  • Uses Reversec’s consultancy expertise in responding to real-world cyber incidents

Benefits

  • Replicates advanced attacker Tactics, Techniques and Procedures (TTPs)
  • Applies pragmatic, goal-focused approaches, ensuring testing time is utilised optimally
  • Identifies vulnerabilities with reference to impact
  • Incorporates broader business awareness to ascertain broader implications of compromise
  • Identifies root-cause to generate wider improvements

Pricing

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pr@reversec.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

4 0 7 9 4 4 1 3 1 6 3 7 2 5 9

Contact

Reversec Oliver Field
Telephone: 07880 488357
Email: pr@reversec.com

About the service

Service categories
  • Cloud Support Services
    • Security Services
      • Security strategy
        • Security strategy
      • Security risk management
        • Security risk management
      • Security design
        • Security design
      • Security quality assurance (QA) and testing
        • Security quality assurance (QA) and testing

Service scope

Service constraints
This service evaluates the security of web, mobile, and API‑based applications to identify vulnerabilities, misconfigurations, and design weaknesses. It covers threat modelling, secure design review, SBOM/dependency analysis, SAST/DAST, API and authentication/authorisation assessment, configuration and secrets checks, and CI/CD pipeline review. Manual penetration testing is added where needed to validate findings and illustrate exploit paths. Deliverables include a risk‑prioritised report, developer‑focused remediation guidance, an assurance statement for governance, and a retest window. The service aligns with recognised good practice (e.g., OWASP ASVS/Top 10, MASVS) and can be delivered as a one‑off or recurring assurance integrated with release cycles.

User support

Email or online ticketing support
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Support levels
Our services are project based and tailored to our clients requirements.

Supplier type

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Security Clearance (SC)

Pricing

Discount for educational organisations
No

Cyber security roles

Cyber security audit and assurance
Role level UK Rate Offshore Rate
Lead cyber security audit and assurance £1,600.00 £1,600.00
Principal cyber security audit and assurance £1,600.00 £1,600.00
Cyber security testing
Role level UK Rate Offshore Rate
Associate cyber security testing £1,600.00 £1,600.00
Lead cyber security penetration testing £1,600.00 £1,600.00
Principal cyber security testing £1,600.00 £1,600.00

Standards and certifications

ISO/IEC 27001 certification
Yes
ISO/IEC 27001 accredited by
DNV
ISO/IEC 27001 accreditation date
Saturday 5 July 2025
What the ISO/IEC 27001 doesn’t cover
Our US Office.
ISO 28000:2022 certification
No
ISO 9001 certification
No
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber Essentials Certificate Number
Aa8dcb5c-9595-4c21-bccd-385969e8146a
Cyber essentials plus
Yes
Cyber Essentials Plus Certificate Number
A10b047a-addb-4af4-ae9d-fa918a6c7fda
Other security certifications
Yes
Any other security certifications
  • National Cyber Security Centre - CHECK Penetration Testing
  • CREST STAR-FS - Intelligence led Penetration Testing
  • CREST RED TEAMING - Intelligence led Penetration Testing
  • CREST SECURITY TESTING - Penetration Testing

Social value

Mission: Kick start economic growth

To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
  • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pr@reversec.com. Tell them what format you need. It will help if you say what assistive technology you use.