As of 28 July 2026, cyber security service providers can apply to have their use of AI within their service provision independently assured by Crest as part of our accreditation process using two new additions to Crest’s Accreditation Standards.

Artificial intelligence is rapidly reshaping how cyber security services are designed and delivered. From penetration testing and vulnerability analysis to reporting and workflow automation, AI is already becoming part of everyday security practice. But how can providers demonstrate that they are using it responsibly?

Today, Crest is taking the next step in its AI programme with the launch of its first accreditation for AI-enabled cyber security services, giving service providers a practical framework for demonstrating responsible AI use within accredited cyber security services through independent assessment.

The new accreditation is underpinned by additions to our standards that have been developed with the Crest AI Working Group. This builds on the foundations established by the Crest AI Charter and Crest’s industry-backed 9 Principles for AI in cyber security, and moves the industry from voluntary commitments, towards independently verifiable assurance.

Crest was established in 2006 and has over 500 accredited member companies tested against a rigorous standard, and operating across dozens of countries, over 50 of which have already started the process to formally accredit themselves/demonstrate their responsible use of AI.

Rapidly changing market

The pace of AI adoption across the cybersecurity profession has accelerated significantly over the past year.

Crest’s recent research found that 69% of penetration testing providers already use AI, while 76% have increased their use over the past 12 months. At the same time, 85% expect clients to demand greater transparency about how AI is being used within cybersecurity engagements.

These findings highlight a clear shift in market expectations. Clients, regulators and procurement teams increasingly want independent evidence that AI-enabled cybersecurity services are secure, transparent and professionally governed. Service providers can no longer rely solely on claims about AI capability – they need recognised ways to demonstrate responsible practice.

Building trust through independent assurance

The launch of these additions to Crest’s accreditation products reflects a broader shift taking place across the cybersecurity market.

As AI becomes embedded in professional practice, trust is increasingly becoming a competitive differentiator and Iindependent accreditation can enable organisations to:

• Demonstrate independently verified responsible AI practices.

• Differentiate themselves in a rapidly evolving cybersecurity market.

• Build greater confidence with clients, regulators and procurement teams.

• Demonstrate transparency around the use of AI within accredited services.

• Help shape the future evolution of AI assurance through participation in the founding assessment cohort.