Skip to main content

Help us improve the Digital Marketplace - send your feedback

CLARANET LIMITED

CREST OVS OWASP Application Testing

Claranet delivers CREST-accredited OVS OWASP Application Security Testing to identify vulnerabilities in web and mobile applications. Our service follows OWASP Top 10 and industry best practice, providing detailed reports with CVSS scoring and remediation guidance. Available under G-Cloud Lot 3 for security assurance and vulnerability management.

Features

  • CREST OVS testing for OWASP application assessments
  • Testing aligned with OWASP Top 10 and industry standards
  • Covers web, mobile, and API application environments
  • Reports include CVSS scoring and prioritised remediation guidance
  • Results delivered via secure portal with ITSM integration
  • Evidence-based vulnerability identification and exploitation verification
  • Integration with IT Health Check requirements
  • UK-based delivery with security-cleared personnel
  • Flexible engagement models and transparent pricing
  • Suitable for NHS, local authorities, universities, and central government

Benefits

  • Improves resilience against application-layer cyber threats
  • Supports compliance with NCSC and OWASP security standards
  • Reduces risk of data compromise through proactive vulnerability discovery
  • Enables informed remediation planning with clear evidence
  • Strengthens resilience for critical public sector applications
  • Facilitates accreditation and IT Health Check compliance
  • Enhances governance by mapping risks to UK frameworks
  • Provides independent assurance for audits and certifications
  • Supports continuous improvement of application security posture
  • Aligns with secure digital transformation objectives

Pricing

  • Education pricing available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Uk-bidteam@claranet.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

6 6 1 9 1 5 5 9 5 3 2 4 5 0 0

Contact

CLARANET LIMITED Claranet UK Bid Team
Telephone: 020 7685 8000
Email: Uk-bidteam@claranet.com

About your service

Service categories

Cloud Support Services

Security Services

  • Security audit services
  • Security quality assurance (QA) and testing

Service scope

Service constraints
Testing is subject to agreed scope and formal rules of engagement.
Customer must provide system access, test windows, and relevant documentation.
Service excludes remediation activities but includes detailed guidance.
Testing cannot proceed without signed authorisation and risk acceptance.
Availability may depend on resource scheduling and clearance requirements for sensitive environments.

User support

Email or online ticketing support
Yes
Support response times
Standard response within one business day for queries.
Critical issues during testing addressed immediately.
Support available via email and phone during UK business hours.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Support levels
Dedicated engagement manager for project coordination.
Lead tester oversees delivery.
Post-test support includes clarification of findings and remediation advice.
Optional follow-up testing available under separate call-off.
For complex or multi-phase projects, an optional Technical Account Manager can be provided at additional cost.
Support is included in the service price; enhanced support packages (e.g. out-of-hours or accelerated reporting) are available on request and priced individually.

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Developed Vetting (DV)

Pricing

Discount for educational organisations
Yes

Architecture roles

Business architect
Role level UK Rate Offshore Rate
Trainee business architect £650.00
Associate business architect £810.00
Business architect £975.00
Lead business architect £1,050.00
Data architect
Role level UK Rate Offshore Rate
Data architect £1,250.00
Senior data architect £1,450.00
Chief data architect £1,550.00
Enterprise architect
Role level UK Rate Offshore Rate
Enterprise architect £975.00
Senior enterprise architect £1,040.00
Lead enterprise architect £1,105.00
Principal enterprise architect £1,300.00
Network architect
Role level UK Rate Offshore Rate
Associate network architect £650.00
Network architect £780.00
Lead network architect £1,070.00
Security architect
Role level UK Rate Offshore Rate
Security architect £900.00
Lead security architect £1,040.00
Principal security architect £1,300.00
Solution architect
Role level UK Rate Offshore Rate
Associate solution architect £800.00
Solution architect £1,040.00
Senior solution architect £1,170.00
Lead solution architect £1,300.00
Principal solution architect £1,600.00
Technical architect
Role level UK Rate Offshore Rate
Associate technical architect £800.00
Technical architect £1,040.00
Senior technical architect £1,170.00
Lead technical architect £1,300.00
Principal technical architect £1,600.00

Chief digital and data roles

Chief data officer
Role level UK Rate Offshore Rate
Chief data officer £1,400.00
Chief information security officer
Role level UK Rate Offshore Rate
Chief information security officer £1,400.00
Chief technology officer
Role level UK Rate Offshore Rate
Chief technology officer £1,400.00

Cyber security roles

Cyber security audit and assurance
Role level UK Rate Offshore Rate
Lead cyber security audit and assurance £900.00
Principal cyber security audit and assurance £1,300.00
Cyber security governance and risk management
Role level UK Rate Offshore Rate
Associate cyber security governance and risk manager £700.00
Lead cyber security governance and risk manager £1,000.00
Principal cyber security governance and risk manager £1,300.00
Cyber security monitoring
Role level UK Rate Offshore Rate
Associate cyber security monitoring £700.00
Lead cyber security monitoring £1,000.00
Principal cyber security monitoring £1,300.00
Cyber security vulnerability management
Role level UK Rate Offshore Rate
Associate cyber security vulnerability management £700.00
Lead cyber security vulnerability management £1,000.00
Principal cyber security vulnerability management £1,300.00
Cyber security testing
Role level UK Rate Offshore Rate
Associate cyber security testing £800.00
Lead cyber security penetration testing £1,000.00
Principal cyber security testing £1,300.00
Cyber security secure design
Role level UK Rate Offshore Rate
Associate cyber security secure systems architecture and design £600.00
Lead cyber security secure systems architecture and design £1,000.00
Principal cyber security secure systems architecture and design £1,300.00

Data roles

Analytics engineer
Role level UK Rate Offshore Rate
Trainee analytics engineer £700.00
Analytics engineer £1,000.00
Senior analytics engineer £1,150.00
Lead analytics engineer £1,300.00
Head of analytics engineering £1,500.00
Data analyst
Role level UK Rate Offshore Rate
Associate analyst £800.00
Data analyst £900.00
Senior data analyst £1,050.00
Principal data analyst £1,200.00
Data engineer
Role level UK Rate Offshore Rate
Data engineer £1,000.00
Senior data engineer £1,100.00
Lead data engineer £1,200.00
Head of data engineering £1,300.00
Data governance manager
Role level UK Rate Offshore Rate
Data governance manager £1,000.00
Lead data governance manager £1,200.00
Head of data governance £1,300.00

IT operations roles

Application operations engineer
Role level UK Rate Offshore Rate
Associate application operations engineer £700.00
Application operations engineer £1,050.00
Senior application operations engineer £1,150.00
Lead application operations engineer £1,275.00
Principal application operations engineer £1,400.00
Business relationship manager
Role level UK Rate Offshore Rate
Lead business relationship manager £1,300.00
Change and release manager
Role level UK Rate Offshore Rate
Configuration analyst £700.00
Change and release analyst £800.00
Change and release manager £1,000.00
End user computing engineer
Role level UK Rate Offshore Rate
Associate end user computing engineer £600.00
End user computing engineer £700.00
Senior end user computing engineer £900.00
Lead end user computing engineer £1,000.00
Principal end user computing engineer £1,200.00
IT service manager
Role level UK Rate Offshore Rate
IT service analyst £650.00
IT service manager £900.00
Senior IT service manager £1,000.00
Head of IT service management £1,200.00
Incident manager
Role level UK Rate Offshore Rate
Incident manager £800.00
Major incident manager £1,000.00
Infrastructure engineer
Role level UK Rate Offshore Rate
Associate infrastructure engineer £700.00
Infrastructure engineer £900.00
Senior infrastructure engineer £1,000.00
Lead infrastructure engineer £1,100.00
Principal infrastructure engineer £1,200.00
Service desk manager
Role level UK Rate Offshore Rate
Service desk analyst £650.00
Senior service desk analyst £900.00
Service desk manager £1,100.00
Head of service desk £1,200.00
Service transition manager
Role level UK Rate Offshore Rate
Service transition manager £1,050.00
Lead service transition manager £1,200.00

Product and delivery roles

Business analyst
Role level UK Rate Offshore Rate
Trainee business analyst £600.00
Junior business analyst £800.00
Business analyst £1,000.00
Senior business analyst £1,100.00
Lead business analyst £1,250.00
Head of business analysis £1,450.00

Software development roles

Development operations (DevOps) engineer
Role level UK Rate Offshore Rate
DevOps engineer £1,300.00
Senior DevOps engineer £1,400.00
Senior DevOps engineer - management £1,450.00
Lead DevOps engineer £1,500.00
Frontend developer
Role level UK Rate Offshore Rate
Senior frontend developer £1,100.00
Lead frontend developer £1,200.00
Head of frontend development £1,600.00
Software developer
Role level UK Rate Offshore Rate
Senior developer £1,200.00
Senior developer - management £1,400.00
Lead developer £1,400.00
Lead developer - management £1,500.00
Principal developer £1,550.00

Non-mandatory Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Intertek
ISO/IEC 27001 accreditation date
Wednesday 22 May 2024
What the ISO/IEC 27001 doesn’t cover
N/a - it covers everything we do, no exclusions
ISO 28000:2022 certification
No
ISO 9001 certification
Yes
Who accredited the ISO 9001 certification
Intertek
ISO 9001 accreditation date
Wednesday 7 June 2023
What the ISO 9001 doesn’t cover
N/a - it covers everything we do, no exclusions
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
Yes
Who accredited the PCI DSS certification
Pen Test Partners
PCI DSS accreditation date
Friday 13 December 2024
What the PCI DSS doesn’t cover
N/a
Cyber essentials
Yes
Please provide your Cyber Essentials Certificate Number
4377ebef-31ac-49ef-9943-13c7f3e3f9a5
Cyber essentials plus
Yes
Please provide your Cyber Essentials Plus Certificate Number
66b24695-ed3f-4797-bb2c-65b58932576d
Other security certifications
No

Social value

Section B - Commitment for Future: Delivery
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Uk-bidteam@claranet.com. Tell them what format you need. It will help if you say what assistive technology you use.