WorkNest Secure
ClaimedCREST and CHECK-accredited UK penetration testing and managed security provider formed in 2026 from Pentest People, Bulletproof, and Target Defense, with CREST STAR/TLPT-FS capability and the GuardNest vulnerability management platform.
Featured in: Best CHECK-Approved Penetration Testing Companies (2026)
Key facts
- Launched in May 2026, combining Pentest People, Bulletproof, and Target Defense under the WorkNest Secure brand.
- CREST member of eleven years, listed as WorkNest Cyber, with accreditation for penetration testing, vulnerability assessment, application testing, STAR/TLPT-FS, and incident response.
- NCSC CHECK Green Light company covering the whole of the UK.
- NCSC Assured provider for Cyber Incident Exercising and Cyber Advisor services.
- Delivers PSN IT Health Checks and CHECK penetration testing for public sector systems.
- GuardNest platform provides continuous vulnerability scanning, live reporting, and consultant chat, with a free Essentials tier.
- Headquartered in Chester, with operating offices in Leeds and Stevenage.
- Part of WorkNest, an Axiom GRC company.
- Founded in 2014.
- Team of 201-500 security professionals.
- Holds CREST, CHECK, STAR, NCSC Assured, ISO 27001, and ISO 9001 accreditation.
- Delivers 11 penetration testing services.
- Serves clients in the UK, Europe, and North America.
- Specialises in CHECK Penetration Testing, PSN IT Health Check, and UK Government Testing.
- Compliance expertise across ISO 27001, SOC 2, PCI DSS, GDPR, and Cyber Essentials.
About
WorkNest Secure is the cyber security division of WorkNest, launched in May 2026 to bring Pentest People, Bulletproof, and Target Defense together under one brand. The trading entity, WorkNest Cyber Ltd, is the renamed Pentest People Limited, and holds CREST accreditation for penetration testing, vulnerability assessment, application and mobile application testing, STAR/TLPT-FS intelligence-led testing, and incident response. NCSC lists WorkNest Secure as a CHECK Green Light company for the whole of the UK, and as an NCSC Assured provider for Cyber Incident Exercising and Cyber Advisor services.
Testing covers web, mobile, API, and desktop applications, network infrastructure, cloud and container environments, CHECK penetration testing and PSN IT Health Checks for public sector systems, social engineering, and LLM security assessment. Attack simulation services include red teaming, purple teaming, threat-led penetration testing, and assumed breach engagements. Continuous vulnerability scanning, reporting, and remediation tracking run through GuardNest, the company's vulnerability management platform, which offers a free Essentials tier and paid Core, Advanced, and Pro tiers.
The legacy brands bring a combined history to the listing. Pentest People was founded in Leeds in 2014 and became CREST and CHECK accredited, known for its SecurePortal client platform and transparent pricing. Bulletproof, headquartered in Stevenage, grew from 2016 into a CREST-accredited testing and managed security provider serving more than 2,000 customers. Both were acquired by The GRC Group, now Axiom GRC, in 2024, and Target Defense added US delivery. WorkNest Secure is headquartered at the group's Chester office, with Leeds and Stevenage remaining as operating offices and a team of more than 100 accredited cyber professionals.
WorkNest Secure in Depth
EnhancedOverview
WorkNest Secure is the cyber security arm of WorkNest, created in May 2026 when the group brought Pentest People, Bulletproof, and Target Defense together under one brand. The business trades as WorkNest Cyber Ltd, the renamed Pentest People Limited, which is where the CREST and CHECK accreditations sit. It serves UK organisations from SMB to enterprise and public sector, with US delivery through the former Target Defense team.
Approach
Testing is delivered by CHECK-accredited and CREST-certified consultants against a documented methodology aligned to CREST, OWASP, PTES, and NIST guidance. Engagements are scoped to the client's risk and compliance drivers, from a single application test to a threat-led red team programme, and findings are delivered through GuardNest with live reporting, direct consultant chat, and remediation tracking, so retesting and continuous scanning carry on after the engagement closes.
What They Test
Working with WorkNest Secure
Services
+ Also offers 5 more services
Accreditations
Best For
Methodologies
No reviews yet. Share your experience →
Related Providers
Dionach
Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.
SECFORCE
Canary Wharf-based adversary simulation and CBEST-aligned penetration testing consultancy, delivering CREST-accredited offensive security to UK financial services and other organisations with the most demanding requirements.
PwC Cyber Security
Global Big Four professional services firm delivering CREST, CHECK, and CBEST-accredited penetration testing and red teaming services from London, serving the UK's largest enterprises and regulated organisations.