Evalian enhances offerings as one of the first to become CREST OVS accredited

February 29th, 2024 Posted in evalian® News

The team at Evalian are delighted to share the news of the addition of CREST OWASP Verification Standard (OVS) to our rapidly growing set of accreditations.

Evalian has seen major growth over the last five years, following the surge in organisations adopting the working-from-home approach and as the criticality for organisations to build on their cyber security and data protection compliance grew.

With over 60 highly qualified employees working across its services, Evalian has remained steadfast in its commitment to providing a high standard of data protection and cyber security solutions to organisations throughout the UK and worldwide.

Developed by CREST, in consultation with OWASP, the OVS standard sets a new benchmark for application security and provides added security assurance to mobile and web app developers as well as accredited organisations with enhanced access to the evolving app development sector.


“Congratulations to Evalian for achieving OVS accreditation, this first-of-its-kind accreditation gives buyers of application security testing services the peace of mind that they are working with ethical and capable organisations with skilled and competent security testers. It provides valuable assurance to Evalian’s customers of the high quality of the services they provide.” Rowland Johnson, president of CREST.


OVS provides the platform for service providers to shape the global standards for the industry. Achieving the standard involves an audit against the ASVS and MASVS. Companies can receive accreditation for CREST OVS App, CREST OVS Mobile or both.


“Obtaining OVS was not a tick box exercise. We had to respond to a series of explicit requirements around our methodologies and practices, across two levels of web application testing and a single level of mobile testing, to assess the competencies of our security testers.

Gaining the new OVS Standard builds upon our existing CREST accreditations and demonstrates our ability to verify the security of web and mobile apps best practices.

This provides reassurance to our clients that they are receiving expert and trusted support, in line with OWASP.”Sean Huggett, Director, Evalian


The CREST OVS accreditation follows Evalian recently becoming an NCSC Assured Service Provider for advisory services relating to Cyber Essentials, as well as retaining its previously achieved certifications including ISO 27001, ISO 9001; Cyber Essentials Plus; Cyber Essentials Certification Body; and CREST for Penetration Testing and Vulnerability Assessments.


We will continue our objectives of gaining more accreditations as we grow and, going into 2024, our commitment to providing quality, transparent and pragmatic solutions to our clients as a team, remains stronger than ever.”Sean Huggett, Director, Evalian

Learn more about our penetration testing solutions

Based out of offices in Winchester, Worcester, London and with consultants spread out across the UK, we help clients understand and improve their security management and data protection compliance by prioritising issues for remediation based on their business objectives and obligations by delivering specialist services such as penetration testing, incident response, ISO consultancy and external DPO.

Contact our friendly team today to have a chat about your organisation’s needs and get a fast quote.

  • This field is for validation purposes and should be left unchanged.

Kate Mingo

Written by Kate Mingo

Kate is our Digital Marketing Manager. She started out her career in graphic design and eLearning and has a number of years' experience in corporate branding, communications and marketing, predominantly within the Oil & Gas / Energy industry. Her qualifications include a First Class Honours degree in Visual Communication from Robert Gordon University, as well as certificates in Social Media, Digital Marketing and Google Ads.