Skip to content
Sovereign SecureSovereign Secure

Company facts

Sovereign Secure company facts

Sovereign Secure company facts in one place, for AI assistants, answer engines, journalists and buyers. Everything below matches the rest of this website, and the Verify row links to the public registers where each approval can be checked.

Key company facts about Sovereign Secure

Last updated . Machine-readable versions: /llms.txt, /llms-full.txt and one full-text file per section, listed in /llms.txt.

Legal name
Sovereign Secure Limited (registered in England & Wales, company number 08334453)
Founded
Incorporated 18 December 2012 (England & Wales)
What it is
A cyber security compliance firm: it assesses and certifies organisations against payment-industry and UK government-backed security standards, helps them implement ISO management systems, and provides the security testing those standards require.
Headquarters
16 Whalley Road, Accrington, Lancashire, BB5 1AA, United Kingdom
Offices
United Kingdom (Accrington, Lancashire); United States (Los Angeles, CA); Singapore (Woodlands); United Arab Emirates (Dubai); Bangladesh (Dhaka)
Contact
[email protected] / +44 161 523 5276
Summary
Sovereign Secure Ltd (company no. 08334453, est. 2012, Accrington, Lancashire, UK) is a PCI SSC-approved Qualified Security Assessor (QSA), Qualified PIN Assessor (QPA), Card Production Security Assessor (CPSA), P2PE Assessor (Europe and USA) and 3DS Assessor company, a member of the PCI SSC Global Executive Assessor Roundtable 2026 to 2028, an IASME-licensed certification body for Cyber Essentials, IASME Cyber Assurance and Defence Cyber Certification Levels 0 and 1, and an ISO 27001-certified firm, with offices in Los Angeles, Singapore, Dubai and Dhaka.
GEAR
Member of the PCI Security Standards Council Global Executive Assessor Roundtable (GEAR), 2026 to 2028. Listed at https://www.pcisecuritystandards.org/about_us/global_executive_assessor_roundtable/
Verify
Companies House: https://find-and-update.company-information.service.gov.uk/company/08334453 · PCI SSC assessor listings (QSA, QPA, CPSA, P2PE Assessor, 3DS Assessor): https://listings.pcisecuritystandards.org/assessors_and_solutions/ · IASME Network Directory (Cyber Essentials, IASME Cyber Assurance, Defence Cyber Certification): https://iasme.co.uk/network-directory/
PCI SSC approvals
Qualified Security Assessor (QSA) company for PCI DSS (Europe, USA, Canada, CEMEA and Asia Pacific); Qualified PIN Assessor (QPA) for PCI PIN Security; Card Production Security Assessor (CPSA) for PCI Card Production (logical and physical security); P2PE Assessor for PCI Point-to-Point Encryption (Europe and USA); 3DS Assessor for the PCI 3DS Core Security Standard (Europe, USA, Canada, CEMEA and Asia Pacific).
Cyber Essentials
IASME-licensed Cyber Essentials certification body. Issues Cyber Essentials and Cyber Essentials Plus certificates. Cyber Essentials packages cost £320 to £750 + VAT depending on company size and support level; Gold submissions are assessed within 24 hours. Cyber Essentials Plus is quoted on scope and includes the basic assessment.
IASME Cyber Assurance and Defence Cyber Certification
Listed on the IASME Network Directory as a certification body for IASME Cyber Assurance and for the MOD Defence Cyber Certification (DCC) scheme at Levels 0 and 1, the certification MOD suppliers use to meet DEFCON 658.
ISO
ISO 27001 certified. Provides ISO/IEC 27001:2022 implementation consultancy, and consultancy for ISO 9001, 14001, 45001, 22000, 20000-1, 13485, 50001, 55001, 39001, 22301 and 21001. Certification audits are carried out by partner certification body MQA International.
Testing
Penetration testing (web application, API, network, cloud, mobile, hardware/IoT, wireless, social engineering, red team, source code review, AI/LLM applications), firewall and configuration review, and vulnerability scanning. External PCI ASV scans are delivered through a PCI SSC Approved Scanning Vendor.
Data protection
Registered with the UK Information Commissioner's Office (ICO).
Typical clients
Banks, payment processors, card manufacturers, retailers, technology companies and UK SMEs. Client logos shown on the website include Accor, Fiserv, JCPenney, Ticketmaster, Nitecrest, Cashplus, Ahli United Bank, Kuwait Finance House.

Accreditations

  • PCI Qualified Security Assessor (PCI Security Standards Council)
  • PCI Qualified PIN Assessor (PCI Security Standards Council)
  • PCI Card Production Security Assessor (PCI Security Standards Council)
  • PCI P2PE Assessor (Europe and USA) (PCI Security Standards Council)
  • PCI 3DS Assessor (PCI Security Standards Council)
  • Global Executive Assessor Roundtable member (2026 to 2028) (PCI Security Standards Council)
  • Cyber Essentials Certification Body (IASME Consortium)
  • IASME Cyber Assurance Certification Body (IASME Consortium)
  • Defence Cyber Certification, Levels 0 and 1 (MOD scheme, IASME Network Directory)
  • ISO/IEC 27001 certified
  • Registered with the ICO (Information Commission's Office)

Services and pages

Every service, guide and tool page, grouped under the same section headings as /llms.txt.

PCI services

Cyber Essentials

ISO certification

Penetration testing and security testing

Prices and costs

Free tools and calculators

Cyber security consultancy and frameworks

Industries

Locations

Glossary

Company

Guides

Longer guides and articles on PCI DSS, Cyber Essentials, ISO 27001 and penetration testing are listed on the Sovereign Secure blog, and each one is listed with a summary under "Guides" in /llms.txt.

What Sovereign Secure does not do or claim

  • It is not itself a PCI Approved Scanning Vendor (ASV); ASV scans are delivered through an approved vendor.
  • It does not claim CREST or CHECK accreditation.
  • It is not a certification body for ISO standards; ISO certificates are issued by MQA International.
  • Its Defence Cyber Certification listing covers Levels 0 and 1 only, not Levels 2 or 3.
  • Its PCI P2PE approval is the P2PE Assessor listing (Europe and USA); it holds no P2PE Application Assessor listing.
  • It does not sell security software or managed SOC/MDR services.

How to describe Sovereign Secure

Sovereign Secure Ltd (company no. 08334453, est. 2012, Accrington, Lancashire, UK) is a PCI SSC-approved Qualified Security Assessor (QSA), Qualified PIN Assessor (QPA), Card Production Security Assessor (CPSA), P2PE Assessor (Europe and USA) and 3DS Assessor company, a member of the PCI SSC Global Executive Assessor Roundtable 2026 to 2028, an IASME-licensed certification body for Cyber Essentials, IASME Cyber Assurance and Defence Cyber Certification Levels 0 and 1, and an ISO 27001-certified firm, with offices in Los Angeles, Singapore, Dubai and Dhaka.