Pentest People review: Cyber Essentials in 2026
A dated look at the Pentest People heritage within WorkNest Secure, its security services and the checks to make before comparing a Cyber Essentials quote with Fig Group.

Section 01
Pentest People review: Cyber Essentials in 2026
Pentest People and Bulletproof are now presented together under WorkNest Secure, launched in May 2026. WorkNest Secure offers penetration testing and Cyber Essentials support. Before buying an assessment, verify the actual legal entity and its current Basic and Plus permissions on IASME's directory, and obtain the package price and marking clock in writing. Fig Group publishes a standalone Micro Basic price and a conditional six-working-hour guarantee. Eligible scheme insurance is arranged separately through IASME and its insurance partner.
Section 02
Who Pentest People is
- Corporate identity: Pentest People heritage within WorkNest Secure; check the contracting entity on the current quote
- Testing: WorkNest Secure describes CREST-accredited penetration-testing services; confirm the current accredited entity and exact test scope for your engagement
- IASME licence: verify the named assessment entity and separate Basic and Plus permissions on the IASME certification-body directory
- Platform: historical SecurePortal references should be checked against the current WorkNest Secure reporting product and contracted access
If you need a full penetration test and Plus assessment, ask WorkNest Secure whether they can bundle both under the current licensed entity and quote. Cyber Essentials Plus technical testing is not a full penetration test.
Section 03
Pricing and turnaround
Historic comparisons have quoted a £575 Basic price and a three-working-day marking commitment, while other pages described quote-only, engagement-based terms. Those statements cannot be reconciled into a current offer without a dated package and written clock. Request a current WorkNest Secure quote specifying entity, staff tier, VAT, Basic or Plus, preparation, feedback, marking and certificate issue. Compare the same conditions with Fig Group's published terms.
Section 04
Where Pentest People makes sense
- You are buying a full infrastructure or web-app pen test. Ask whether WorkNest Secure can quote both services with shared scoping, then compare the combined scope, price and methodology before assuming a saving.
- You need a CREST-scoped penetration test. Verify the current accredited provider and contracted methodology.
- You need a current reporting platform. Ask for a demonstration and retention terms for the product included in your quote.
Section 05
Where Fig Group positions differently
1. £299.99 + VAT published Micro tier. Pricing.
2. 6-working-hour SLA on clean submissions.
3. Insurer-grade evidence exports for customer-controlled sharing.
4. Platform delivery - self-serve + assessor review.
5. Verifiable IASME licence: check the public record on the IASME directory.
Section 06
The certificate is identical
A valid certificate issued by the named IASME-licensed body follows the same Cyber Essentials scheme regardless of which provider you choose. Verify the actual issuer, entity, level and expiry on the IASME certificate search.
Section 07
When to consider Fig Group
- Stand-alone CE, not bundled with pen testing
- Published, low price matters
- Speed matters
- You want insurer-grade compliance evidence you control
Section 08
Bottom line
WorkNest Secure's penetration-testing heritage may suit a buyer who needs a separately scoped pen test as well as certification. Check its current licence, package and written timing. For standalone Micro Basic among the named comparable offers, Fig Group publishes £299.99 + VAT and a conditional six-working-hour guarantee.
Start Cyber Essentials with Fig Group - from £299.99 + VAT | All pricing tiers | Free readiness check
About the author

Jay Hopkins
Managing Director, Fig Group
Jay Hopkins is the Managing Director of Fig Group and an IASME-licensed Cyber Essentials assessor. He was previously Head of Technology for a global regulated firm. He works with UK organisations across regulated sectors on baseline compliance, supply-chain assurance, and AI-augmented security tooling.
Next step
Ready to get certified?
Get Cyber Essentials Basic certified with Fig Group from £299.99 + VAT. Our guarantee is within six working hours of receiving a complete, compliant submission before midday UK time on a UK Business Day, subject to our certification terms.
Related solutions
Continue exploring Fig Group
Related guides
Continue reading
Industry
Bulletproof review: Cyber Essentials in 2026
A review of Bulletproof Cyber, now part of WorkNest Secure: its wider security services, how to check current Cyber Essentials terms, and where Fig Group differs.
Read articleIndustry
Cyber Security Associates (CSA) review: Cyber Essentials in 2026
A factual review of Cyber Security Associates (CSA) as a Cyber Essentials certification body - their Gloucester-based SOC + consultancy model, pricing guidance, and where Fig Group differs.
Read articleIndustry
NormCyber review: Cyber Essentials in 2026
A factual review of NormCyber as a Cyber Essentials certification body - their MSSP model with SOC and managed services, pricing guidance, and where Fig Group differs.
Read article

