Penetration Testing / Web Application /API
This service provides CREST-aligned penetration testing for web applications and APIs. Experienced security specialists assess technical controls using recognised methodologies to identify vulnerabilities and weaknesses. Findings are clearly documented in a comprehensive, easy-to-understand report with prioritised recommendations to support effective remediation and risk reduction.
Features
- CREST-aligned penetration testing
- Web application security testing
- API security assessments
- Formal testing methodologies
- Vulnerability identification and validation
- Risk-based severity ratings
- Clear technical reporting
- Remediation guidance provided
- Retesting options available
- Secure testing delivery
Benefits
- Reduced application security risks
- Improved vulnerability visibility
- Stronger technical controls
- Enhanced compliance confidence
- Clear remediation priorities
- Lower breach likelihood
- Better security assurance
- Improved system resilience
- Increased stakeholder trust
- Faster risk mitigation
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
7 8 1 3 4 3 8 2 3 3 5 2 0 5 4
Contact
PRISM INFOSEC
Andrew Turner
Telephone: 01242652100
Email: contact@prisminfosec.com
About your service
- Service categories
-
Cloud Support Services
Security Services
- Security risk management
- Security design
- Security incident management
- Security audit services
- Security quality assurance (QA) and testing
Service scope
- Service constraints
- No constraints.
User support
- Email or online ticketing support
- Yes
- Support response times
- We respond within 2 working days
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
- We typically provide support during office hours with regard to the delivery of ongoing penetration testing services or reports delivered within the last 3 months with a 6 hour response window. This is included in the cost of delivery of a penetration test. The principal consultant responsible for the delivery of a penetration test shall be responsible for customer's technical account.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Developed Vetting (DV)
Pricing
- Discount for educational organisations
- No
Chief digital and data roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Chief information security officer | £2,000.00 |
Cyber security roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security audit and assurance | £1,150.00 | |
| Principal cyber security audit and assurance | £1,400.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security governance and risk manager | £1,075.00 | |
| Lead cyber security governance and risk manager | £1,150.00 | |
| Principal cyber security governance and risk manager | £1,400.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber incident response | £1,250.00 | |
| Lead cyber security incident response | £2,000.00 | |
| Principal cyber security incident response | £2,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security vulnerability management | £950.00 | |
| Lead cyber security vulnerability management | £1,025.00 | |
| Principal cyber security vulnerability management | £1,400.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security digital forensics | £1,250.00 | |
| Lead cyber security digital forensics | £2,000.00 | |
| Principal cyber security digital forensics | £2,500.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security testing | £950.00 | |
| Lead cyber security penetration testing | £1,075.00 | |
| Principal cyber security testing | £1,750.00 |
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- Alcumus
- ISO/IEC 27001 accreditation date
- Tuesday 10 March 2020
- What the ISO/IEC 27001 doesn’t cover
- N/A
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- Who accredited the ISO 9001 certification
- AAC
- ISO 9001 accreditation date
- Wednesday 10 January 2018
- What the ISO 9001 doesn’t cover
- N/A
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- Aeaefa45-544b-4378-add7-86c15c513a9c
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- 7577cfc5-a965-404d-b045-7f3c78fdd6fe
- Other security certifications
- Yes
- Any other security certifications
-
- NCSC CHECK Penetration Testing Assured Service Provider
- NCSC Cyber Incident Exercising (CIE) Assured Service Provider
- NCSC Cyber Advisor Assured Service Provider
- CREST Penetration Testing
- CREST STAR/STAR-FS Red Teaming
- CBEST Red Teaming
- PCI QSA
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
-
Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of the issues affecting the development of new skills by target cohort
-
Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
- Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
-