CREST Marketplace

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) are a UK-based boutique security consultancy focussing on bringing the benefits of Penetration Testing as a Service (PTaaS) to all its clients. This innovative approach to security testing combines the benefits of a consultant-led penetration test and vulnerability assurance through a technologically advanced SecurePortal, providing a living threat system to its clients and benefit through the life of the contract rather than just a single point in time.

Our specialised team of security consultants hold industry qualifications such as CHECK Team Leader, CPSA, CRT, OSCP and combine this with many years of industry experience at the highest level working across all industry sectors. It is the aim of our consultants to work with organisations to ensure that their security investment is fully optimised on a 24/7/365 basis.

Penetration Testing Services include:
• Infrastructure Penetration Testing
• Web Application Penetration Testing
• IT Health Check
• Cyber Essentials
• Social Engineering Assessment
• VPN Configuration Assessment
• Firewall Ruleset & Configuration Review
• Network Device Security Review

Accreditations/Certifications: Check Service Provider, ISO27001, G-Cloud Supplier

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) offer PTaaS to all clients as part of the standard service but can tailor any approach to meet your needs, ranging from simple port scans outlining open services all the way through to detailed vulnerability assessment with telephone debriefs according to your schedule.

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) offer CREST OVS assessments covering tier one and tier two of the OWASP MASVS framework.

This is an in-depth assessment that boasts a mixture of external testing and consultancy, taking a far deeper dive into the security of an application than a traditional penetration test. Traditional penetration tests look for external vulnerabilities, that are accessible by an external malicious threat actor. The CREST OVS assessment uses this perspective as well as reviewing logic flow documentation, examining the underlying operating system, database accounts and internal processes surrounding the mobile application, including any APIs in use.

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) offer CREST OVS assessments covering tier one and tier two of the OWASP ASVS framework.

This is an in-depth assessment that boasts a mixture of external testing and consultancy, taking a far deeper dive into the security of an application than a traditional penetration test. Traditional penetration tests look for external vulnerabilities, that are accessible by an external malicious threat actor. The CREST OVS assessment uses this perspective as well as reviewing logic flow documentation, examining the underlying operating system, database accounts and internal processes surrounding the application.

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) are proud to have been part of the CHECK scheme for a numbers of years and have delivered complex ITHCs on a wide array of technologies across government, defence and blue-light.

We are on both the gCloud and Cyber Security Services frameworks.

At Worknest Secure our CREST STAR-FS service delivers intelligence-led penetration testing for financial services organisations, using bespoke threat intelligence to simulate the tactics, techniques and procedures (TTPs) of the threat actors most likely to target your organisation. Aligned with the STAR-FS framework, engagements assess your ability to detect, respond to and recover from realistic cyber attacks across critical business services. Using controlled attack simulation, we identify security weaknesses, validate defensive capabilities, and provide clear, prioritised remediation guidance to strengthen operational cyber resilience.

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) simulated attack services leverage real threat intelligence to build and deliver tailored Red Team engagements for your organisation.

Each engagement is built around your organisation and what matters most. Threat led testing delivers detailed insights into your organisation’s ability to protect itself from persistent threats and provides prioritised, actionable output to improve your defensive posture.

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) dedicated RedTeam brings a depth of knowledge allowing them to simulate advanced threats in a safe and controlled engagement.

WorkNest Cyber (comprising Bulletproof Cyber, Target Defence, and Pentest People) offers comprehensive Cyber Incident Response services, including rapid response with up to a 1-hour SLA, incident containment, recovery, and Threat Intelligence services. Our expert team conducts Cyber Incident Exercising (CIE) and Tabletop Exercises (TTX) to proactively prepare your business for potential breaches. With 24/7 support, proactive defence strategies, and tailored incident response plans, we ensure minimal downtime and robust protection of your digital assets through a client-led approach.