Cybersecurity Companies

Categories · Certification

CREST

CREST-accredited companies. As listed — we do not audit membership.

3 companies. Search a country or city. Tick features, then apply once. Organic order is not for sale.

Indexorganic · newest first
CompanyWhat they sellFocus / ratingStatus

Orange Cyberdefense

Paris, FR · MSSP / managed

European MSSP and incident response from Orange Group.

Security operations

NCC Group

Manchester, GB · Consultancy / pentest

Global pentest, research, and cyber resilience consultancy.

Application security · Security operations

Bishop Fox

Phoenix, US · Consultancy / pentest

Offensive security consultancy and Cosmos continuous pentest.

Application security · Security operations
FAQ
What does CREST mean on this index?

Companies that list CREST. Company attestations (ISO 27001, SOC 2) are held by the firm. Practitioner credentials (OSCP, GPEN) are held by people on staff. We do not audit certificates or invigilate exams.

Is the order paid?

No. Organic order is recency. Promoted shelves are labeled and separate. That is the opposite of buying a rank.

How do I get listed under CREST?

Submit a company and tick the certifications you actually hold. We review before anything is public. Paid plans buy a labeled shelf, not a silent bump in this list.

Why is a staff exam on a company directory?

Buyers shortlist pentest and training firms by who sits on the engagement. OSCP and GPEN are company filters here, not a people directory.