pentestcostcalculator.com
CREST · uk

CREST: pen test requirements 2026

CREST is a not-for-profit accreditation body. CREST membership requires both organisational and individual exams. CREST migrated its member directory to the separate CREST Marketplace (marketplace.crest.org) — the canonical lookup for verified pen test providers, listing 510 firms holding CREST Penetration Testing accreditation worldwide as of August 2026 (202 in the UK).

Required
Voluntary
Region
UK
Publisher
CREST

Applies to

  • UK commercial pen testing across all scopes

Budget impact

Day count impact

Neutral — CREST methodology aligns with industry standard day counts

Rate impact

CREST consultant day rate is the UK benchmark (£1,000-£1,500/day for standard, £1,200 median)

Source

https://marketplace.crest.org/suppliers/

Verified 2026-08-31.

Other standards
CHECKCyber Essentials PlusOWASP Testing StandardsNIST SP 800-115PCI DSS 4.0.1 testing