Penetration testing day rates
Published G-Cloud 15 penetration-testing rates, checked in November 2026. Only suppliers whose listings mention CREST and publish a comparable role rate are included. Prices were published for public-sector buyers and may not reflect comparable scopes. One supplier per row; where several rates exist, a range is shown. Click headings to sort. This site does not favour any supplier.
Organisation size is the employee band stated on the matched CREST profile; membership is the duration displayed on 4 November 2026. Group or brand scope can differ from the contracting entity. Unknown means not verified, not a non-member. Filters combine both selections; Unknown / unverified is available separately. Size ranges follow the published employee-band boundaries, with no split bands or estimated headcounts.
Showing 70 of 70 suppliers
| Provider website | Links / sources | |||||||
|---|---|---|---|---|---|---|---|---|
| ACCENTURE (UK) LIMITED 3 listings | 20,000 or more | 19 years | Mentioned | £1,350 | £1,850 | £2,500 | Website | CREST profile G-CloudRates |
| CAPGEMINI UK PLC 4 listings | 20,000 or more | 19 years | Mentioned | £1,000 | £1,289 | £1,658 | Website | CREST profile G-Cloud |
| CLARANET LIMITED 3 listings | 500-999 | 19 years | Mentioned | £800 | £1,000 | £1,300 | Website | CREST profile G-CloudRates |
| Intertek NTA 5 listings | 10-49 | 19 years | Mentioned | £900 | £1,050 | £1,200 | Website | CREST profile G-CloudRates |
| MTI TECHNOLOGY LIMITED 2 listings | 100-499 | 19 years | Mentioned | £1,300 | £1,250 | £1,100 | Website | CREST profile G-CloudRates |
| NCC Group Security Services Limited 5 listings | 1,000-4,999 | 19 years | Mentioned | £1,154 | £1,592.5 | £3,079.5 | Website | CREST profile G-CloudRates |
| Resillion 5 listings | 500-999 | 19 years | Mentioned | £800 | £875 | £975 | Website | CREST profile G-CloudRates |
| LRQA 12 listings | 100-499 | 17 years | Mentioned | £900 | £950 | £1,000 | Website | CREST profile G-Cloud All 12 listingsAI Penetration TestingService |
| PA CONSULTING SERVICES LIMITED 3 listings | 1,000-4,999 | 17 years | Mentioned | £1,846 | £2,688 | £3,321 | Website | CREST profile G-CloudRates |
| PEN TEST PARTNERS LLP 4 listings | 100-499 | 17 years | Mentioned | £1,200 | £1,400 | £1,500 | Website | CREST profile G-CloudRates |
| DIONACH LTD 4 listings | 50-99 | 16 years | Mentioned | £1,400 | £1,600 | £1,800 | Website | CREST profile G-CloudRates |
| BAE SYSTEMS APPLIED INTELLIGENCE LIMITED | 5,000-9,999 | 14 years | Mentioned | £975 | £1,421 | £1,884 | Website | CREST profile G-CloudRates |
| CYBERIS LIMITED 2 listings | 10-49 | 14 years | Mentioned | £1,000 | £1,400 | £1,700 | Website | CREST profile G-CloudRates |
| JUMPSEC LIMITED 16 listings | 10-49 | 14 years | Mentioned | £1,150 | £1,450 | £1,750 | Website | CREST profile G-CloudRates All 16 listingsNCSC CHECK IT Health Check (ITHC)Service |
| PGI - PROTECTION GROUP INTERNATIONAL LTD. 4 listings | 50-99 | 13 years | Mentioned | £600 | £1,200 | £1,850 | Website | CREST profile G-CloudRates |
| CYBER SECURITY ASSOCIATES LTD 5 listings | 50-99 | 12 years | — | £850 | £1,000 | £1,100 | Website | CREST profile G-CloudRates |
| IBM UNITED KINGDOM LIMITED | 10,000-19,999 | 12 years | Mentioned | £1,290 | £2,235 | £2,235 | Website | CREST profile G-CloudRates |
| SECARMA LIMITED 6 listings | 10-49 | 12 years | — | £792 | £1,089 | £1,320 | Website | CREST profile G-Cloud |
| DIGITALXRAID LTD 11 listings | 50-99 | 10 years | Mentioned | £900 | £1,200 | £1,350 | Website | CREST profile G-CloudRates All 11 listings |
| PRISM INFOSEC 5 listings | 10-49 | 10 years | Mentioned | £950 | £1,075 | £1,750 | Website | CREST profile G-Cloud |
| SAPPHIRE TECHNOLOGIES LIMITED 6 listings | 100-499 | 10 years | Mentioned | £850 | £950 | £1,500 | Website | CREST profile G-Cloud |
| BRIDEWELL CONSULTING LIMITED 15 listings | 100-499 | 9 years | Mentioned | £990 | £1,300 | £1,300 | Website | CREST profile G-CloudRates All 15 listingsPenetration Testing - Application Source Code ReviewsService |
| CYBERFORT LIMITED 6 listings | 100-499 | 9 years | Mentioned | £1,000 | £1,100 | £1,250 | Website | CREST profile G-CloudRates All 6 listings |
| JISC SERVICES LIMITED | 1,000-4,999 | 8 years | — | £1,400 | £1,400 | £1,400 | Website | CREST profile G-CloudRates |
| Wavenet | 500-999 | 8 years | Mentioned | £1,100 | — | — | Website | CREST profile G-CloudRates |
| 3B DATA SECURITY LTD 19 listings | 10-49 | 7 years | Mentioned | £675 | £850 | £1,000 | Website | CREST profile G-CloudRates All 19 listings |
| COGNISYS GROUP LIMITED 9 listings | 100-499 | 7 years | — | £1,250 | £1,250 | £1,250 | Website | CREST profile G-Cloud All 9 listingsAPI (Application Programming Interface ) PentestService Attack Path Management / Active Directory PentestService LLM/Generative AI Penetration TestingService Mobile Application Penetration TestingService Network (External & Internal) Penetration TestingService Penetration TestingService Red Team / Threat-Led / Threat Actor Emulation Penetration TestingService Web Application Penetration TestingService Wireless/WiFi Penetration TestingService |
| CyberOne | 50-99 | 7 years | — | £650 | £850 | £1,100 | Website | CREST profile G-CloudRates |
| SECQUEST INFORMATION SECURITY LTD | 10-49 | 7 years | Mentioned | £800 | £800 | £800 | Website | CREST profile G-CloudRates |
| FORTIS CYBER SECURITY LIMITED 2 listings | 10-49 | 6 years | — | £650 | £895 | £995 | Website | CREST profile G-CloudRates |
| PURECYBER LIMITED 7 listings | 10-49 | 6 years | — | £950 | £950 | £950 | Website | CREST profile G-CloudRates All 7 listings |
| STRIPE OLT CONSULTING LTD | 50-99 | 6 years | — | £1,500 | £1,500 | £1,500 | Website | CREST profile G-CloudRates |
| ZOONOU LIMITED 3 listings | 50-99 | 6 years | Mentioned | £700 | £820 | £1,200 | Website | CREST profile G-CloudRates |
| FSP CONSULTING SERVICES LIMITED | 100-499 | 4 years | — | £990 | £1,120 | £1,350 | Website | CREST profile G-Cloud |
| AMBERWOLF LIMITED | 10-49 | 3 years | — | £1,350 | £1,650 | £1,850 | Website | CREST profile G-CloudRates |
| CYBER SECURITY SPECIALISTS LIMITED | 10-49 | 3 years | — | £750 | £850 | £950 | — | CREST profile G-CloudRates |
| METHODS BUSINESS AND DIGITAL TECHNOLOGY LIMITED | 500-999 | 3 years | Mentioned | £790 | £1,240 | £1,480 | Website | CREST profile G-CloudRates |
| EJN LABS LTD | Less than 10 | 2 years | — | £1,000 | £1,000 | £1,000 | Website | CREST profile G-CloudRates |
| FORFEND INFORMATION SECURITY LTD | 10-49 | 2 years | Mentioned | £950 | £950 | £1,250 | Website | CREST profile G-CloudRates |
| Reversec | 100-499 | 2 years | Mentioned | £1,600 | £1,600 | £1,600 | Website | CREST profile G-CloudRates |
| Sencode Ltd | Less than 10 | 2 years | — | £1,035 | £1,035 | £1,035 | Website | CREST profile G-CloudRates |
| LAYER 7 LIMITED 2 listings | 10-49 | 1 year | Mentioned | £1,200 | £1,600 | £2,000 | Website | CREST profile G-Cloud |
| MAPLE NETWORKS LIMITED 10 listings | 10-49 | 1 year | Mentioned | £500 | £1,000 | £1,500 | Website | CREST profile G-CloudRates All 10 listings |
| AGILITY CYBER LIMITED 38 listings | Unknown | Unknown | Mentioned | £1,300 | £1,500 | £1,800 | Website | G-CloudRatesAll 38 listings |
| ARCANUM INFORMATION SECURITY LIMITED 17 listings | Unknown Entity unverified | Unknown Entity unverified | Mentioned | £850 | £1,200 | £1,300 | Website | Related CREST profile G-CloudRates All 17 listings |
| CAMBRIDGE CYBER ADVISERS LIMITED 2 listings | Unknown | Unknown | — | £790 | £1,160 | £1,600 | Website | G-CloudRates |
| CCL-FORENSICS LIMITED 3 listings | Unknown Entity unverified | Unknown Entity unverified | Mentioned | £950 | £1,175 | £1,400 | Website | Related CREST profile G-CloudRates |
| COMPUTER NETWORK DEFENCE LIMITED | Unknown | Unknown | Mentioned | £650 | £1,000 | £1,350 | Website | G-Cloud |
| CYBERLAB SECURITY LIMITED 9 listings | Unknown Entity unverified | Unknown Entity unverified | Mentioned | £1,350 | £1,350 | £1,350 | Website | Related CREST profile G-CloudRates All 9 listings |
| DIGI2AL LIMITED | Unknown | Unknown | Mentioned | £1,200 | £1,550 | £2,000 | Website | G-Cloud |
| ENTSERV UK LIMITED | Unknown Entity unverified | Unknown Entity unverified | Mentioned | £813 | £1,057 | £1,418 | Website | Related CREST profile G-CloudRates |
| GOACO GROUP LTD 4 listings | Unknown | Unknown | Mentioned | £550 | £735 | £965 | Website | G-CloudRates |
| I3SECURE LIMITED | Unknown | Unknown | Mentioned | £650 | £850 | £1,100 | Website | G-CloudRates |
| INTAFORENSICS LTD | Unknown | Unknown | — | £950 | £1,000 | £1,200 | Website | G-CloudRates |
| ITogether | Unknown | Unknown | — | £750 | £950 | £950 | Website | G-CloudRates |
| LEIDOS INNOVATIONS UK LTD 3 listings | Unknown | Unknown | Mentioned | £727 | £1,237 | £1,314 | Website | G-CloudRates |
| M8 SOLUTIONS LIMITED | Unknown | Unknown | — | £1,050 | £1,050 | £1,050 | Website | G-CloudRates |
| MICHAEL PAGE INTERNATIONAL RECRUITMENT LIMITED 2 listings | Unknown | Unknown | — | £863.5 | £1,368 | £1,782 | Website | G-CloudRates |
| MONDAS CONSULTING LTD 2 listings | Unknown | Unknown | Mentioned | £650 | £750 | £850 | Website | G-Cloud |
| Nortal UK 4 listings | Unknown | Unknown | Mentioned | £375 | £585 | £850 | Website | G-CloudRates |
| QUALITEST GROUP UK LTD 5 listings | Unknown | Unknown | — | £999 | £999 | £999 | Website | G-CloudAll 5 listingsMobile Application Security and Penetration Testing: Secure Mobile AppService Network Penetration Testing by OSCP and CREST certified penetration testersService Penetration Testing: Pen Testing for web, mobile, API, network securityService Security Bounty Testing/Bounty Hunting Service with skilled ethical hackersService Web Application Penetration TestingService |
| REDSECLABS LIMITED | Unknown Entity unverified | Unknown Entity unverified | — | £650 | £800 | £1,000 | Website | Related CREST profile G-CloudRates |
| RENAISSANCE COMPUTER SERVICES LTD | Unknown | Unknown | — | £600 | £600 | £600 | Website | G-CloudRates |
| REPLY LIMITED | Unknown Entity unverified | Unknown Entity unverified | — | £725 | £995 | £1,145 | Website | Related CREST profile G-CloudRates |
| SECON CYBER SECURITY LTD | Unknown | Unknown | Mentioned | £1,250 | £1,750 | £1,750 | Website | G-Cloud |
| Six Degrees 3 listings | Unknown Entity unverified | Unknown Entity unverified | Mentioned | £900 | £1,100 | £1,300 | Website | Related CREST profile G-CloudRates |
| Stone Technologies Limited Trading as Converge Technology Solutions | Unknown | Unknown | Mentioned | £550 | £950 | £1,100 | Website | G-Cloud |
| TRUSTMARQUE SOLUTIONS LIMITED | Unknown Entity unverified | Unknown Entity unverified | Mentioned | £950 | £1,100 | £1,300 | Website | Related CREST profile G-CloudRates |
| UST GLOBAL PRIVATE LIMITED | Unknown Entity unverified | Unknown Entity unverified | — | £455 | £535 | £580 | Website | Related CREST profile G-Cloud |
| VERNOVI CYBER LTD | Unknown | Unknown | Mentioned | £1,200 | £1,200 | £1,200 | Website | G-CloudRates |
Sources and disclaimer
Information is compiled from publicly available G-Cloud 15 service listings and pricing documents checked in November 2026. Supplier names link to an official website where identified, otherwise to their G-Cloud listing. G-Cloud listings, available pricing documents and matched CREST membership profiles are linked separately. CREST profile employee bands and membership durations were captured on 4 November 2026 and are supplier-submitted profile information, not independently audited headcounts. Related-entity profiles are labelled and their values are not attributed to the supplier. Hover over a size or membership value for profile identity and matching notes. Suppliers are initially sorted by CREST membership duration, longest first. Ties are alphabetical; unknown durations appear last. Readers can change the sort using the column headings. There are no paid placements, endorsements or preferential rankings.
This website is provided for general information only, without warranty as to accuracy, completeness or currency. Supplier accreditations, personnel clearance, pricing and availability have not been independently verified. Absence of a mention is not evidence that a supplier lacks a qualification. Rates may exclude VAT, vary by scope and differ from current commercial quotations. Verify all details directly with suppliers before procurement or security decisions. No liability is accepted to the extent permitted by law for reliance on this information. This site is not affiliated with Crown Commercial Service, the UK Government or the suppliers shown.