Terms of use

PenTesting.org is an independent directory and guide to penetration testing. We are not a penetration testing firm, not an accreditation body, and not affiliated with CREST, the NCSC or any firm we list.

Our listings, guides and tools are general information. They are not security, legal or compliance advice for your situation. Before you hire a firm, confirm its accreditations, insurance, scope and terms directly with the firm and the accrediting body.

Each fact on a listing comes from a public source, linked on the listing, and is dated with when we compiled it. Sources change, so a listing can be out of date. If you find an error, tell us from the contact page. Listing a firm is not an endorsement. Nobody can pay to change a firm’s place in the normal order; if we ever offer paid placement, it will be clearly labelled and kept separate.

The tools run in your browser and are provided as they are. Check important results, such as a vulnerability score, against the official standard before you rely on them. Only test systems you own or have written permission to test.

We link to firms, registers and other sites we do not control. We are not responsible for their content or how they handle your data.

The text, data selection and design of this site are ours. You may quote short extracts with a link back. Please don’t copy listings or guides in bulk.

We work hard to keep the site accurate, but we can’t promise it is complete, current or error-free, and we are not liable for decisions made on the basis of it. Nothing in these terms limits liability that the law does not allow us to limit.

We may update these terms. The date below shows the latest version. Questions: hello@pentesting.org.