Sekurno Joins the CREST Pathway+ to Advance Penetration Testing Standards

At Sekurno, security is more than a service. It’s a signal of trust. And across regulated, high-risk industries, trust is often what moves partnerships forward.

We’re proud to share that Sekurno is now a CREST Pathway+ organisation, marking the first step on our journey toward full CREST accreditation. CREST is globally recognized for its rigorous standards in penetration testing and cybersecurity assurance.

For our clients, this milestone means we are actively working toward aligning every assessment with validated methods, technical depth, and professional ethics recognised by CREST.

This reflects our long-term commitment to helping clients meet rising expectations — not only in security, but in compliance and credibility.

Security That Meets the Standards of the Most Regulated Industries

Our clients build high-impact products in regulated spaces — from genomics and digital health to fintech and data-sensitive SaaS.

In these domains, security isn’t optional — it’s required.

• Compliance with regulations like HIPAA, FDA Premarket Guidance, EU MDR/IVDR, and ISO 27001 isn’t just expected by regulators — it’s demanded by customers, partners, and investors.

• Security audits are often part of vendor qualification, fundraising due diligence, or CE/FDA certification processes.

As a CREST Pathway organisation, we are progressing toward a framework where every test we deliver is aligned with industry-recognised, defensible standards. This journey strengthens the independent credibility we bring to every engagement.

Bridging Penetration Testing and Real-World Compliance

Many pentests fail to address the realities of regulated product development. They’re too shallow, too generic, or too detached from the compliance journey.

At Sekurno, we take a different approach.

Alongside deep manual testing, threat modeling, and code review, we provide tools and guidance to help teams meet regulatory expectations faster — with more clarity.

For example:

If you’re building or operating a digital health platform in the U.S, Our HIPAA Self-Assessment Guide helps you assess risks to ePHI and technical safeguards before they become urgent during audits.

Developing a SaMD or connected medical device? Our FDA Cybersecurity Readiness Checklist aligns directly with SPDF sections and Premarket expectations, helping you prepare security documentation in parallel with product milestones.

Targeting CE certification under the EU’s MDR or IVDR? Our EU MDR/IVDR Cybersecurity Checklist maps key Annex I, Section 17 requirements to actionable engineering activities — so security isn’t a blocker to launch.

Working toward ISO 27001 adoption or client assurance? Our ISO 27001 Annex A.8 Controls Checklist supports access control maturity assessments, often the first area reviewed by auditors.

Whether you’re preparing for a certification milestone, scaling a regulated product, or need clarity on which regulations apply to you, get in touch. We’ll help you navigate the right frameworks and build the right security foundation for where you’re headed.

A Team You Can Trust, Backed by the Industry’s Toughest Certifications

Our progress toward CREST accreditation strengthens our firm-level credibility. But just as important are the individual consultants behind every engagement.

Our team brings a range of respected certifications:

• OSCP, OSWE, OSEP

• eMAPT, eWPTXv2, eCPPT

• AWS Security Specialty

• ISO 27001 Lead Auditor

• CIPP/E

• CREST Registered Tester (CRT)

This means our findings aren’t just technical — they’re actionable, explainable, and credible across engineering, compliance, and leadership teams.

Supporting Innovation Where It Matters

We’re proud to work with ambitious companies advancing health, finance, and infrastructure. Whether you’re developing AI-powered diagnostics, aging biomarker platforms, neobank infrastructure, or multi-tenant SaaS, the risks are real — and the scrutiny is rising.

Becoming a CREST Pathway organisation is one step in our ongoing investment in quality and trust. It’s how we help teams move forward without sacrificing security or regulatory readiness.

Let’s Talk

Whether you’re preparing for a certification milestone, scaling a regulated product, or simply want to sleep better at night — reach out. We’ll show you what security looks like when it’s built on trust, not templates.