cybersecdirectory

Compliance audit firms in the United Kingdom

16 of the 67 compliance audit firms we list are based in the United Kingdom. 1 is public, 7 are owned by another company and 8 are private. The oldest, Intertek, was founded in 1885. Of the 12 companies here with staff numbers, the largest is LRQA (500+ staff).

Companies focused on compliance audits (SOC 2, ISO 27001) in the United Kingdom

4 companies
CompanyBased inFoundedSizeOwnership
Bulletproof

CREST-accredited UK cybersecurity and compliance provider offering penetration testing, managed security services, and regulatory consultancy to over 2,000 customers from its Stevenage headquarters.

Stevenage, United Kingdom201651-200 staffPart of WorkNest
Nettitude

CREST, CHECK, and CBEST accredited UK consultancy within Lloyd's Register, delivering premium penetration testing for government and critical infrastructure.

London, United Kingdom200351-200 staffPart of LRQA
BSI Group

ISO/IEC 27001 certification audits and information security training from the UK national standards body, which also certifies quality, safety and medical devices.

London, United KingdomPrivate
Intertek

Testing and certification group that helps vehicle makers and suppliers work towards ISO/SAE 21434 compliance.

United Kingdom1885Public, ITRK

Also active in compliance audits (SOC 2, ISO 27001)

12 companies
CompanyBased inFoundedSizeOwnership
LRQA

The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response.

London, United Kingdom1985500+ staffOwned by Goldman Sachs Alternatives
GRC Solutions (formerly IT Governance)

UK compliance and cybersecurity consultancy, formerly IT Governance, offering CREST and NCSC CHECK penetration testing alongside governance, risk and compliance services.

Ely, United Kingdom2002201-500 staffPrivate
Dionach

Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.

Oxford, United Kingdom199951-200 staffOwned by Nomios
Evalian

CREST-accredited UK cyber security and data protection consultancy offering penetration testing, ISO consultancy, and managed SOC services from offices across the UK and Ireland.

Winchester, United Kingdom201851-200 staffPrivate
Equilibrium Security

CREST-accredited Birmingham-based cyber security consultancy delivering penetration testing, social engineering assessments, and Cyber Essentials certification for public and private sector clients.

Birmingham, United Kingdom201211-50 staffOwned by Omni Cyber Security
RedSecLabs

CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise.

London, United Kingdom202311-50 staffPrivate
Secarma

Manchester-based independent cybersecurity consultancy with over 20 years of experience delivering CREST and CHECK-accredited penetration testing, red teaming, and compliance certification services.

Manchester, United Kingdom200111-50 staffPrivate
Stripe OLT

Award-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies.

Bristol, United Kingdom200411-50 staffPart of Littlefish
Solusec

CREST-accredited UK penetration testing consultancy based in Shropshire, delivering web application, API, infrastructure, cloud, mobile, and AI/LLM testing. A small specialist team, with a retest included in every engagement.

Albrighton, United Kingdom20211-10 staffPrivate
Cyphere

CREST-accredited Manchester-based cyber security firm delivering penetration testing, managed security services, and compliance consultancy across the UK, Europe, and the USA.

Manchester, United Kingdom20201-10 staffPrivate
HORIBA MIRA

UK vehicle engineering and test centre offering threat modelling, CSMS support and security testing for vehicles.

Nuneaton, United KingdomOwned by HORIBA
KPMG

Cyber security consulting covering strategy and governance, security transformation and cyber threat management, plus cyber managed services and cloud security from member firms.

London, United KingdomPrivate

More compliance audit firms

All 67 compliance audit firms

Every cybersecurity company in the United Kingdom · See every category