Compliance audit firms in the United Kingdom
16 of the 67 compliance audit firms we list are based in the United Kingdom. 1 is public, 7 are owned by another company and 8 are private. The oldest, Intertek, was founded in 1885. Of the 12 companies here with staff numbers, the largest is LRQA (500+ staff).
Companies focused on compliance audits (SOC 2, ISO 27001) in the United Kingdom
4 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
Bulletproof CREST-accredited UK cybersecurity and compliance provider offering penetration testing, managed security services, and regulatory consultancy to over 2,000 customers from its Stevenage headquarters. | Stevenage, United Kingdom | 2016 | 51-200 staff | Part of WorkNest |
N Nettitude CREST, CHECK, and CBEST accredited UK consultancy within Lloyd's Register, delivering premium penetration testing for government and critical infrastructure. | London, United Kingdom | 2003 | 51-200 staff | Part of LRQA |
BSI Group ISO/IEC 27001 certification audits and information security training from the UK national standards body, which also certifies quality, safety and medical devices. | London, United Kingdom | Private | ||
Intertek Testing and certification group that helps vehicle makers and suppliers work towards ISO/SAE 21434 compliance. | United Kingdom | 1885 | Public, ITRK |
Also active in compliance audits (SOC 2, ISO 27001)
12 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
LRQA The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response. | London, United Kingdom | 1985 | 500+ staff | Owned by Goldman Sachs Alternatives |
GRC Solutions (formerly IT Governance) UK compliance and cybersecurity consultancy, formerly IT Governance, offering CREST and NCSC CHECK penetration testing alongside governance, risk and compliance services. | Ely, United Kingdom | 2002 | 201-500 staff | Private |
Dionach Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices. | Oxford, United Kingdom | 1999 | 51-200 staff | Owned by Nomios |
Evalian CREST-accredited UK cyber security and data protection consultancy offering penetration testing, ISO consultancy, and managed SOC services from offices across the UK and Ireland. | Winchester, United Kingdom | 2018 | 51-200 staff | Private |
Equilibrium Security CREST-accredited Birmingham-based cyber security consultancy delivering penetration testing, social engineering assessments, and Cyber Essentials certification for public and private sector clients. | Birmingham, United Kingdom | 2012 | 11-50 staff | Owned by Omni Cyber Security |
RedSecLabs CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise. | London, United Kingdom | 2023 | 11-50 staff | Private |
Secarma Manchester-based independent cybersecurity consultancy with over 20 years of experience delivering CREST and CHECK-accredited penetration testing, red teaming, and compliance certification services. | Manchester, United Kingdom | 2001 | 11-50 staff | Private |
Stripe OLT Award-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies. | Bristol, United Kingdom | 2004 | 11-50 staff | Part of Littlefish |
Solusec CREST-accredited UK penetration testing consultancy based in Shropshire, delivering web application, API, infrastructure, cloud, mobile, and AI/LLM testing. A small specialist team, with a retest included in every engagement. | Albrighton, United Kingdom | 2021 | 1-10 staff | Private |
Cyphere CREST-accredited Manchester-based cyber security firm delivering penetration testing, managed security services, and compliance consultancy across the UK, Europe, and the USA. | Manchester, United Kingdom | 2020 | 1-10 staff | Private |
HORIBA MIRA UK vehicle engineering and test centre offering threat modelling, CSMS support and security testing for vehicles. | Nuneaton, United Kingdom | Owned by HORIBA | ||
KPMG Cyber security consulting covering strategy and governance, security transformation and cyber threat management, plus cyber managed services and cloud security from member firms. | London, United Kingdom | Private |
More compliance audit firms
All 67 compliance audit firmsEvery cybersecurity company in the United Kingdom · See every category