Compliance audit firms

German testing and certification group whose security services include penetration tests, ISO/SAE 21434 certification and UN R155 audits.

Inspection firm that audits carmakers' security management for R155 type approval and certifies suppliers to ISO/SAE 21434.

German inspection group assessing vehicles and makers against UN R155, R156, ISO/SAE 21434 and ISO 24089.

Compliance-focused cybersecurity advisory firm and FedRAMP 3PAO specializing in penetration testing that meets stringent regulatory requirements.

The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response.

Berlin-headquartered German cybersecurity consultancy with 30+ years of BSI IT-Grundschutz experience. Trusted by federal agencies, DAX corporations, and critical infrastructure operators.

Frankfurt-based European payment security specialist holding the full set of PCI credentials (QSA, PFI, ASV, P2PE). Manual-first penetration testing for fintechs, acquirers, and regulated enterprises.

UK compliance and cybersecurity consultancy, formerly IT Governance, offering CREST and NCSC CHECK penetration testing alongside governance, risk and compliance services.

Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.

CREST-accredited California consultancy blending compliance expertise with penetration testing. First to earn ISO 17020 for MITRE ATT&CK and PTES frameworks.

CREST-accredited UK cyber security and data protection consultancy offering penetration testing, ISO consultancy, and managed SOC services from offices across the UK and Ireland.

CREST-accredited Birmingham-based cyber security consultancy delivering penetration testing, social engineering assessments, and Cyber Essentials certification for public and private sector clients.

CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise.

Manchester-based independent cybersecurity consultancy with over 20 years of experience delivering CREST and CHECK-accredited penetration testing, red teaming, and compliance certification services.

Award-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies.

CREST-accredited UK penetration testing consultancy based in Shropshire, delivering web application, API, infrastructure, cloud, mobile, and AI/LLM testing. A small specialist team, with a retest included in every engagement.

CREST-accredited Manchester-based cyber security firm delivering penetration testing, managed security services, and compliance consultancy across the UK, Europe, and the USA.

AISafe Labs provides AI-powered penetration testing services for applications.

Sets standards, audits and insures frontier AI systems and agents for security, safety and reliability.

Security evaluation lab that penetration tests automotive ECUs and reports findings for UN R155 and ISO/SAE 21434.

Integrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience.

Gothenburg consultancy testing ECUs, vehicle buses, telematics and OTA pipelines, and advising on R155 and ISO 21434.

BCIT is a cybersecurity and compliance consulting firm and training organisation based in France.

Bureau Veritas Cybersecurity provides cybersecurity services covering people, processes, and technology.

CyberSheath provides cybersecurity compliance services for DOD contractors, focusing on CMMC, DFARS, and NIST standards.

Drata provides a platform that automates security compliance, risk management and trust assurance for companies.

ERMProtect provides cybersecurity assessments, penetration testing, compliance audits, and digital forensics services.

Beijing firm selling TARA and test software, vehicle test hardware, penetration testing and R155 compliance advice.

UK vehicle engineering and test centre offering threat modelling, CSMS support and security testing for vehicles.

Integris provides managed IT, cybersecurity, AI and cloud services to small and midsize businesses.

Cyber security consulting covering strategy and governance, security transformation and cyber threat management, plus cyber managed services and cloud security from member firms.

US engineering consultancy offering ISO 21434 consulting, TARA, security verification and automotive cybersecurity training.

GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.

Provides managed IT support, cybersecurity services and custom software to small businesses.

Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products.

Penumbral Labs helps manufacturers prepare connected products for EU Cyber Resilience Act compliance through testing and support.

Solcept AG is a Swiss engineering firm based in Wetzikon.

German security lab in Bonn, recognised by the PCI SSC for PTS device evaluation, plus German payment terminal schemes.

French test and approval body acting as a UN R155 technical service, with vehicle pentesting and TARA.

Vanta provides a platform for automating security compliance and risk management.

Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.

Spanish vehicle engineering and testing firm offering TARA, UN R155 and R156 gap analysis, and connectivity pentests.

Indian consultancy helping vehicle makers gain UN R155, R156 and AIS-189 approval, with TARA tools and penetration testing.

Provides penetration testing, PCI ASV scanning, and managed security services for compliance and threat detection.

Cyberneza provides cybersecurity and compliance consulting for defense contractors and regulated organizations.

IntelliGRC provides software that helps managed service providers automate cybersecurity compliance and audit readiness.

NSS Labs provides independent testing and validation of cybersecurity controls and AI systems.

Jinan company providing connected-vehicle test tools, cyber ranges, vulnerability research and compliance services for carmakers.

Swiss testing and certification group offering security evaluations, penetration tests and ISO/SAE 21434 audits.

VidraSec provides penetration tests and security audits for businesses.