CREST Marketplace

ProCheckUp is an approved provider of CREST STAR services.

STAR (Simulated Target Attack and Response) is an intelligence-led, vulnerability testing framework devised to replicate the behaviours of a real-world threat against individual clients. The testing framework has been designed to provide a bespoke assessment service, tailoring the assessment to replicate the specific threats faced by an organisation.

STAR has been created for non-financial organisations, using the same methodology as CBEST assessments, while managing the risks of a simulated attack exercise. STAR can be used by financial organisations to prepare for a CBEST assessment. STAR providers have to go through additional levels of assurance, and work with threat intelligence providers to provide intelligence led security assessments.

ProCheckUp has formed a partnership with Digital Shadows; a threat intelligence provider. For each STAR engagement, Digital Shadows will provide ProCheckUp with a customised threat intelligence report identifying the key threats facing your organisation. The threat intelligence report is used by ProCheckUp to develop a tailored testing strategy to focus the security assessment and replicate the threats facing your business.

ProCheckUp STAR testing delivers a customised testing experience simulating the threat posed by current threat actors and Advanced Persistent Threats (APTs) to replicate the most realistic attack scenarios and deliver a comprehensive evaluation of your current threat exposure.

ProCheckUp was formed in 1999. Our incident response service allows your organisation to promptly regain control of your systems following an incident. By conducting forensically sound investigations our consultants can determine, how the breach occurred, the activity of the threat actors, the extent of infiltration, categorise what was taken and help you understand any losses. Our Services are delivered to the world’s leading finance and banking organisations, UK Central Government authorities and FTSE 100 companies.

ProCheckUp is a UK and Malaysian-based independent provider of cyber security services, including IT Security, Assurance, Compliance and Incident Response. We commenced offering Penetration Testing and Compliance services in 1999 and have since developed a wider portfolio of enterprise-wide security and consulting services to help customers comprehensively handle the information security challenges of today.

We pride ourselves on the breadth and depth of experience, expertise and qualifications held by our senior consultants. We are service providers to some of the world’s leading finance and banking organisations, UK Central and Local Government authorities, international law firms and FTSE 100 companies.

ProCheckUp is accredited to the NCSC government green light CHECK scheme and has been a certified CREST member and verified PCI DSS (Payment Card Industry Data Security Standard) member since their respective inceptions in 2006. ProCheckUp has attained many industry leading accreditations and awards including the Queen’s Award for Enterprise. Our Penetration Testing services range includes (but is not limited to):

Application Testing
API/Web Service Testing
Breakout testing – Citrix and network pivoting
Build Reviews
NCSC IT Health Checks
Cloud and Virtualisation Testing
Code Reviews
Device Testing/IOT testing
Infrastructure Penetration Testing
Mobile Application Testing
PCI DSS ASV and QSA
Red/Blue/Purple Teaming
Social Engineering
Supply Chain testing
Training
Wireless Testing

ProCheckUp offers vulnerability assessments (VA), where infrastructure is frequently assessed to ensure that all vulnerabilities are identified, prioritised and the appropriate actions applied in a timely fashion.

ProCheckUp are an Approved Scanning Vendor (ASV), and are audited annually to ensure that our vulnerability assessments achieve a high rate of accuracy.