In urgent need of assistance from our Incident Response team? Click below to email directly and get support.
Get Support
Set up regular vulnerability scans for Web Apps & Infrastructure with our innovative SecurePortal
Learn More
PTaaS Packages For All Businesses
Distribute, manage and monitor remediation tasks effortlessly with PTaaS, powered by SecurePortal
View PTaaS Options
Need Our Assistance?
We now offer Incident Response Retainers helping you reduce damage from a cyber attack
Read
.webp)
IT Health Check – For PSN Compliance
Pentest People are a CHECK accredited company and can scope and perform your IT Health Check (ITHC) for access to the Public Services Network (PSN).
The Public Services Network (PSN) is the government’s high-performance network, which helps public sector organisations work together, reduce duplication and share resources. Organisations, both public and private sector that require a connection to the PSN require to complete a Code of Connection (CoCo) application
Identify Vulnerabilities
Identify security risks within your infrastructure
Comply with CoCo Regulations
CoCo Applications require an ITHC is performed on your business
Get Access to PSN
Gain access to The Public Services Network with a succesfull application
Get a Quote
Answer a Few Questions & Get a Quote Straight to Your Email
IT Health Check For Internal & External Testing
With ITHC we Can Perform Internal & External Penetration Tests Based on Your Business needs
Internal Assessment
Internal testing takes the form of a Penetration Test and should include Vulnerability Scanning and a thorough Manual Analysis of your internal network.
At a minimum it should include:
- Desktop and Server build and configuration, and network management security
- Patching of Operating Systems, Applications and Firmware levels
- Configuration of Remote Access solutions including Virtual Private Networks (VPNs) and the associated authentication
- Build and Configuration Review of Laptops and other Mobile devices such as phones and tablets used for remote access
- Internal Security Gateway configuration including the Firewall connection to the PSN network.
- Wireless Network configuration
The assessment of the above look to provide assurance that your internal systems are configured in a secure manner and are being properly maintained.
External Assessment
The External Assessment part of the ITHC should include public-facing services such as email servers, web servers and other systems such as the firewalls in place to prevent unauthorised access from the public Internet into your organisation.
Any other inbound connections from the Internet such as Remote Access or Site-to-Site Virtual Private Networks (VPNs) also need to be penetration tested as part of the engagement. This assessment takes place for the infrastructure and authentication methods in place to protect the connections.
Internal Assessment
Internal testing takes the form of a Penetration Test and should include Vulnerability Scanning and a thorough Manual Analysis of your internal network.
At a minimum it should include:
- Desktop and Server build and configuration, and network management security
- Patching of Operating Systems, Applications and Firmware levels
- Configuration of Remote Access solutions including Virtual Private Networks (VPNs) and the associated authentication
- Build and Configuration Review of Laptops and other Mobile devices such as phones and tablets used for remote access
- Internal Security Gateway configuration including the Firewall connection to the PSN network.
- Wireless Network configuration
The assessment of the above look to provide assurance that your internal systems are configured in a secure manner and are being properly maintained.
External Assessment
The External Assessment part of the ITHC should include public-facing services such as email servers, web servers and other systems such as the firewalls in place to prevent unauthorised access from the public Internet into your organisation.
Any other inbound connections from the Internet such as Remote Access or Site-to-Site Virtual Private Networks (VPNs) also need to be penetration tested as part of the engagement. This assessment takes place for the infrastructure and authentication methods in place to protect the connections.
Scoping & Intelligence Gathering
Our experts will listen to you and your needs to develop a tailored testing strategy. From here our consultants will use a wide variety of penetration testing tools and resources to gather information on your organisation.
Reporting & Remediation
Now the test is complete our consultants will fill out a detailed report of their findings, broken down by category and type, adding any remediation advice to the exploits and vulnerabilities they discovered. This data will be accessible via SecurePortal and follow up calls will be made to walkthrough the test and the steps required to remove the risks found.
Make Your Testing Experience Easier with SecurePortal
SecurePortal provides clients with a new way to monitor and analyse the data you receive in your penetration tests. Rather than a lengthy physical report you gain a range of simple features that highlight your test findings and vulnerabilities.
Easily access remediation advice from our team of consultants on discovered vulnerabilities and assign them to your team for fast and efficient resolution. Receive overview and trend data of all of the current security issues you face in your organisatio and so much more./
Key Benefits of IT Health Check
Understand the Internal and External security issues you face through a very thorough assessment from a qualified security consultant.
.svg)
Use your ITHC report to gain access to the PSN, the governments high-performance network, which helps public sector organisations work together, reduce duplication and share resources
Identify any areas of your system that may be slowing down or causing inefficiencies. By addressing these issues, you can improve the performance of your system and reduce downtime
Prove You Take Cyber Security Seriously
Provide assurance that your internal systems are secure with an ITHC from Pentest People
Gain Access to PSN Network
Receive an IT Health Check Report required for annual access to the Public Services Network. As well as assuring your clients of your infrastructure’s security.
Comply With PSN Requirements
Engage with Pentest People to ensure your scope is identified in line with the PSN requirements. PSN Compliance demonstrates that your organisation’s security arrangements, policies and controls are sufficiently rigorous.
Skilled Consultants
Rest assured that your ITHC is performed by qualified Security Consultants. Our specialised team of security consultants hold industry qualifications such as CHECK Team Member & Team Leader, CCIE, CISSP and CEH.
Why Does Your Business Need an IT Health Check?
It is a requirement of the CoCo application to provide a recent (within 12 months) IT Health Check report that has to be performed by a qualified organisation. Pentest People, through their CREST membership and CHECK Service Provider status, are able to provide ITHC services to organisations requiring connection to the PSN.
Not only does the ITHC allow access to the PSN, which is a great benefactor to your business but simply showing you’re on the network demonstrates that your organisation’s security arrangements, policies and controls are sufficiently rigorous.
Organisations connecting to the PSN have to perform an annual IT Health Check in order to sustain the connection.
.webp)
Experienced Consultant Team
Our Testing Team are CREST Accredited & Includes CHECK Team Leaders
Experienced & Accredited Testing Team For All Our Services
Penetration testing is a key component of any effective cybersecurity strategy, and it requires well-trained professionals to execute. Our consultant team needs are highly trained in order to test your business for vulnerabilities and identify potential threats before they cause harm. Our team have a deep understanding of the systems and protocols involved in protecting against hackers, malware, and data breaches.
- CHECK Team Leaders
- CREST Accredited consultant teams
- Experts in all areas of cybersecurity
See What Our Clients Have to Say About our Professional Services
“Pentest People stand out in the field of penetration testing due to the skillset of people they have working there. We undertook a complex bespoke pentest with them which required a lot of pre-work in order to make sure it was scoped correctly and they took the time to come onsite to make sure all was correct prior to commencing. From my experience with them, they are very intelligent people with a deep understanding of the security landscape and we will continue to use them for future testing requirements”.
"Pentest People has been a trusted partner in our Information Security audits, helping us achieve ISO27001:2013 and Cyber Essentials certifications. Their expertise, professionalism, and
customer-focused solutions have greatly improved our ICT infrastructure.
I highly recommend Pentest People to any potential client."
“Pentest People were efficient, knowledgeable and very supportive of our organisation making the jump from Cyber Essentials to accreditation to the ‘Plus’ upgrade. They were great to communicate with, delivered as promised and we will certainly use again when re-certification comes round."
“The SecureGateway allowed Pentest People to perform a quality penetration test while the tester worked remotely. The results and data collected by the consultant were at the level we would expect from a standard test, showing no real difference other than allowing us to proceed as normal”
“Pentest People have provided us with a very streamlined testing service, that can be easily reviewed using their SecurePortal. I’m pleased with the quality of the testing report and it has enabled us to feel more confident in our network security”.
“We used Pentest People to assist us with our security testing. They truly understand this area extremely well and gave us great reassurance on areas that we needed to improve.
Pentest People are truly experts in the security field and we would highly recommend them. They have great depth of knowledge and breadth of experience”
"Pentest People perform Web Application and Infrastructure Penetration Testing for Pharmacy2U. They are always professional to engage with, provide an excellent level of service and the addition of the SecurePortal makes receiving and interrogating the results of the service very easy indeed.We look forward to working with them in the future and trust the work they deliver."
Need More Info on Our Infrastructure Testing?
Frequently Asked Questions
What is an IT Health Check?
An IT Health Check (ITHC) for PSN (Public Services Network) compliance is a comprehensive assessment of an organisation's information technology infrastructure, systems, and security measures. This evaluation ensures that public sector organisations meet the strict security standards required to connect to the government's secure network, the PSN. The primary goal of an ITHC is to identify vulnerabilities within the IT environment and provide recommendations for addressing these potential risks.
Learn Something New
Have a read of our blogs written by industry experts, covering topics from all areas in cyber.
Meeting Compliance With Threat Intelligence
This blog covers the basics of Threat Intelligence and how you can meet compliance by adding a Threat Intelligence solution into your defences. SecurePortal 2.10 now helps customers comply with ISO27001, DORA & PCI DSS with Real-Time Threat Intelligence and its free! Read our blog for more information.
SecurePortal 2.10 - Introducing Threat Intelligence
Stay ahead of global cyber threats with our powerful new Dashboard. Access over 30 live feeds for real-time, industry-specific insights. Customise your view to focus on what matters most, and empower your team with actionable intelligence. Enhance your situational awareness, streamline reporting, and meet compliance requirements—all through our user-friendly interface. Equip your organisation to proactively address risks and strengthen your security posture.
Cyber Security Trends to Look Out For in 2025
Dive into the future of cyber security as we gear up for 2025. We'll explore how AI is set to redefine threat detection, making it smarter and faster. As we become more connected, securing supply chains against vulnerabilities is more important than ever. Plus, with the rise of hybrid work environments, zero trust architecture is becoming a must-have to keep everything locked down and secure. It's all about staying one step ahead of the curve, so let's unpack what your organisation can do to tackle these challenges head-on and keep your digital world safe.
.webp)
