AI Governance Standards

CREST accredits ten firms under a new module governing AI use in penetration tests

The optional module went into CREST's penetration testing standard in July 2026 and ten providers have now cleared it. CREST's own survey put 69% of providers already using AI in daily delivery, so the badge still covers a thin slice of the market.