Vulnerability remediation for UK businesses and their IT providers

For growing UK businesses without an in-house security team.

Send us the scan results you already have. We get each issue fixed, most urgent first, and prove it with a re-scan.

Arrange a free 15-minute review How it works

You don’t need to send any scan data for the review.

Or email hello@pennward.co.uk

Every engagement is quoted at a fixed price, agreed up front, after a free review.

You work directly with the founder, from the first review to the final evidence pack.

Demo company: Hartwell Logistics is fictional.
Read transcript

Your vulnerability scanner already shows you what needs fixing.

Pennward takes it from there, and sees each finding through to the end.

We start from the exports you already have: Defender, Nessus, Qualys, OpenVAS, Trivy, or a plain CSV.

Every item is ranked, with actively exploited and business-critical issues first.

AI drafts each change, and a person approves it before anything on your systems is touched.

Your IT team applies it, or we do, with your written sign-off.

We follow up on every open item until it’s closed, or formally accepted as a risk.

A re-scan then confirms each closure.

In this demo, urgent findings went from 152 at the first scan to 5 after the re-scan, with 13 accepted as risks.

You receive a before-and-after evidence pack, ready for a Cyber Essentials Plus assessor, a customer’s supplier audit, or your insurer.

Pennward. The 30-Day Fix Sprint.

How it works

  1. 1. Send your scan results

    Microsoft Defender, Tenable/Nessus, Qualys, OpenVAS, Trivy, or any CSV export.

  2. 2. We get them fixed

    1. Rank Actively exploited first
    2. Draft A fix for each, drafted with AI
    3. Approve A person signs off every change
    4. Follow up Until closed or accepted as a risk

  3. 3. A re-scan proves it

    You get a before-and-after evidence pack for your assessor, customer or insurer.

How it works in detail

From the sample report

Urgent findings at first scan
152
Still open after re-scan
5

Read the sample report Sample report: a demo company built from real scans of public software.

Got a deadline?

We help you close findings before an audit, renewal or contract review.

Questions

Who is Pennward for?

Growing UK businesses with roughly 20 to 249 staff and no in-house security team. We work alongside your IT team or IT provider.

Do you need access to our systems?

No. Your IT team makes the changes, or we do with your written sign-off.

What does the AI see?

Four facts per issue: the CVE number, the package and the installed and fixed versions. No hostnames, IP addresses or company names. More detail.

Will this get us through Cyber Essentials Plus?

We fix the security updates the assessment checks and give you the evidence. Only a certification body can certify you.

How is the price set?

Fixed price, agreed up front, after a free review. The quote depends on how many systems and findings are in scope.

Contact

Tell us what you need and we’ll arrange a free 15-minute review.

hello@pennward.co.uk

Or email us directly. Don’t attach scan exports yet; we’ll agree a secure way to share them.