$ pentest --country=uk

UK-specific pen-test pricing in GBP. CREST and CHECK accreditation context for buyers in regulated UK sectors.

$ answer --question="What does a pen test cost in the UK?"

UK pen-test day rates from CREST-accredited firms broadly sit at £1,000 to £3,500 per day in 2026 (mid-market to senior). A typical UK web-app pen test runs £6,000 to £20,000; an internal network test runs £8,000 to £40,000. CHECK accreditation is the National Cyber Security Centre's scheme for testing UK government and critical-infrastructure systems; CREST is the broader commercial scheme.

Last verified June 2026

$ stat --slot=1

£1-3.5K/d

UK day-rate band

CREST-accredited firms

$ stat --slot=2

£6-20K

Web-app project band

UK GBP equivalent

$ stat --slot=3

CREST

Broad commercial scheme

Verifiable membership

$ stat --slot=4

CHECK

NCSC government scheme

Critical infra + gov

$ accreditation --notes

CREST
Industry-standard accreditation. Most UK enterprise buyers expect CREST membership for serious pen-test work.
CHECK
NCSC scheme. Required for UK government and certain critical-infrastructure assessments.
Both can apply
Many UK pen-test firms hold CREST membership AND CHECK approval.
UK GDPR Article 32
Defines testing as a Technical Measure under UK GDPR. Pen test is a common way to demonstrate it.