Skip to main content

Company directory

UK penetration testing companies

Compare 52 UK providers by accreditation and service. Firms are listed from public sources, such as the CREST Marketplace, the NCSC CHECK list and company sites, with the source linked on each listing.

Looking for US firms? Browse US companies

37 companies

London-based consultancy offering CREST-accredited penetration testing, incident response and PCI compliance.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK penetration testing firm holding CREST accreditation, known for cloud and application security testing.

CREST-accredited
Infrastructure & network testingWeb application testingMobile application testing

UK offensive security firm offering CREST-accredited penetration testing and financial-sector threat-led testing (STAR-FS).

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK cyber security and data protection consultancy holding CREST accreditation for penetration testing.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK cyber security consultancy offering CREST-accredited penetration testing, threat-led testing, managed detection and response.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK cyber security provider offering CREST-accredited penetration testing and compliance services.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK-based cyber security firm (with UAE and US offices) offering CREST-accredited penetration testing.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK cyber security provider, now trading as CNS at Six Degrees, listed on the CREST Marketplace for penetration testing and on the NCSC CHECK register as 6 Degrees Holdings Ltd.

CREST-accreditedNCSC CHECK
Infrastructure & network testing

UK cyber security firm offering CREST-accredited penetration testing including web and mobile application testing.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK offensive security firm offering CREST-accredited continuous red teaming and penetration testing on a subscription model.

CREST-accredited
Infrastructure & network testingWeb application testingSocial engineering testing

UK cyber security group offering CREST-accredited penetration testing, incident response and secure hosting.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK consultancy offering CREST-accredited penetration testing and security risk management.

CREST-accredited
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK penetration testing firm offering CREST-accredited infrastructure and web application testing and Cyber Essentials certification.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK consultancy offering CREST-accredited penetration testing, incident response and information security auditing.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

Ireland-based provider (serving the UK) delivering CREST-accredited penetration testing and continuous vulnerability management via a PTaaS platform.

CREST-accredited
Infrastructure & network testingAPI security testingMobile application testing

UK penetration testing firm holding CREST accreditation and Cyber Essentials Plus.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK-headquartered global firm offering CREST-accredited penetration testing, digital forensics and PCI compliance services.

CREST-accredited
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK boutique penetration testing firm holding CREST accreditation and Cyber Essentials Plus.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK cyber security specialist offering CREST-accredited penetration testing, social engineering, cloud reviews and wireless auditing.

CREST-accredited
Infrastructure & network testingWeb application testingSocial engineering testingCloud configuration testing

UK cyber security consultancy offering CREST-accredited penetration testing, threat-led testing and managed detection services.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingAPI security testingCloud configuration testing

UK boutique security firm holding CREST accreditation for penetration testing.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingSocial engineering testing

UK security firm holding CREST accreditation for penetration testing.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK consultancy specialising in CREST-accredited penetration testing and financial-sector threat-led testing (CBEST, GBEST, TIBER-EU).

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK security firm holding CREST accreditation for penetration testing.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

Long-established UK consultancy offering CREST-accredited penetration testing, vulnerability assessment and incident response.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK offensive security consultancy (formerly WithSecure Consulting) offering CREST-accredited penetration testing and threat-led testing (CBEST, GBEST, TIBER-EU).

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK firm providing CREST-accredited penetration testing alongside the Rootshell vulnerability-management platform.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

UK penetration testing provider holding CREST accreditation for penetration testing services.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingMobile application testing

Cheltenham-based cyber security firm offering CREST-accredited penetration testing.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingAPI security testingCloud configuration testing

UK cyber security consultancy offering CREST-accredited penetration testing and vulnerability assessment.

CREST-accredited
Infrastructure & network testingWeb application testingMobile application testingCloud configuration testing

UK information security consultancy providing CREST-accredited penetration testing and Cyber Essentials certification.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

Exeter-based cyber security firm holding CREST accreditation for penetration testing.

CREST-accredited
Infrastructure & network testingSocial engineering testing

UK security firm offering CREST-accredited penetration testing and security certification training.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingMobile application testing

Cyber division of Thomas Murray offering CREST-accredited penetration testing and incident response.

CREST-accredited
Infrastructure & network testingWeb application testingCloud configuration testingSocial engineering testing

Penetration testing firm listed on the CREST Marketplace as Truststream Cybersecurity Limited, part of SysGroup. CREST links to the SysGroup website.

CREST-accredited
Infrastructure & network testingWeb application testingMobile application testingSocial engineering testing

Cambridge-based cyber security firm offering CREST-accredited penetration testing and managed security services.

CREST-accredited
Infrastructure & network testingWeb application testingAPI security testingCloud configuration testing

Penetration testing provider that traded as Pentest People until 2025 and is now part of WorkNest, listed under WorkNest on the NCSC CHECK register and the CREST Marketplace.

CREST-accreditedNCSC CHECK
Infrastructure & network testingWeb application testingAPI security testingMobile application testing
UK Penetration Testing Companies | PenTesting.org