CREST Accredited Company

About This Accreditation

CREST (Council of Registered Ethical Security Testers) is an international not-for-profit accreditation body that certifies the competence and professionalism of organizations and individuals providing penetration testing, cyber incident response, threat intelligence, and Security Operations Centre (SOC) services. CodeMiners' CREST accreditation confirms that our security testing team, methodologies, and quality assurance processes meet the rigorous standards required by CREST. Accreditation involves a comprehensive assessment of the organization's technical capabilities, business processes, and staff qualifications.

Governing Body

CREST (Council of Registered Ethical Security Testers)

Scope of Certification

Covers the organization's ability to deliver penetration testing (infrastructure, web application, mobile), vulnerability assessment, red team operations, and security consultancy services. Evaluates staff qualifications, testing methodologies, reporting standards, and business processes.

Audit and Assessment Process

CREST accreditation requires an on-site assessment by CREST assessors. The assessment evaluates technical testing capabilities, quality assurance processes, staff certifications (CRT, CCT), reporting templates, data handling procedures, and business governance. Accreditation is renewed annually.

Key Requirements

1. Qualified testing staff holding CREST certifications (CRT, CCT)
2. Documented testing methodologies aligned with CREST standards
3. Quality assurance review process for all deliverables
4. Secure data handling and client confidentiality procedures
5. Professional indemnity insurance
6. Incident escalation and notification procedures

Compliance Entitlements

• Internationally recognized accreditation for penetration testing services
• Verified technical capabilities, methodologies, and staff qualifications
• Required by many UK Government departments and financial institutions
• Annual reassessment ensures continued competence

Client Benefits

• Provides assurance that penetration testing is performed by a CREST-verified organization
• CREST accreditation is required or preferred by many enterprise and government procurement standards
• Ensures testing staff hold recognized professional qualifications
• Annual reassessment provides ongoing quality assurance

Related Certifications