Independent · evidence-based · not an accreditation body
The independent directory of penetration testing companies
Compare 52 UK providers by accreditation, service, and size. Firms are listed from public sources, such as the CREST Marketplace, the NCSC CHECK list and company sites, with the source linked on each listing.
Neutral, not a vendor
We don't sell testing and we're not affiliated with any firm or accreditation body. The directory compares providers on checkable facts, not marketing.
Every claim is sourced
Every accreditation links to the public record we took it from, such as the CREST Marketplace or the NCSC CHECK list, so you can check it yourself.
Real firms only
We would rather list fewer companies we can source than pad the directory. No invented firms, no fake reviews, no ratings we haven't earned.
Most accredited UK firms
Ordered by verified accreditations — not by payment.
Claranet Cyber Security
Large (201–1000)
Cyber security division of Claranet providing CREST-accredited penetration testing, application testing and managed security services.
Pen Test Partners
Size not stated
UK consultancy offering CREST-accredited penetration testing across web, mobile, infrastructure and specialist areas such as maritime, automotive and aviation.
Cyberfort Limited
Large (201–1000)
UK cyber security group offering CREST-accredited penetration testing, incident response and secure hosting.
Cyberis Reply Ltd
Small (11–50)
UK consultancy (part of Reply) offering CREST-accredited penetration testing and financial-sector threat-led testing (STAR-FS).
Dionach Ltd
Mid-size (51–200)
UK consultancy offering CREST-accredited penetration testing, incident response and information security auditing.
MDSec Consulting Ltd
Mid-size (51–200)
UK consultancy specialising in CREST-accredited penetration testing and financial-sector threat-led testing (CBEST, GBEST, TIBER-EU).