Incident response firms

Microsoft sells software, cloud services, hardware, and gaming products.

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Commvault provides a cloud-native platform for data security, identity resilience, and cyber recovery.

IBM is a technology company that sells software, infrastructure, and consulting services.

GMV Innovating Solutions is a technology group that provides solutions, services and products across many sectors.

Australia and New Zealand's largest pure-play cybersecurity firm with offices in every major ANZ capital. CREST ANZ accredited and IRAP-listed for Australian Government testing.

US-headquartered cybersecurity consultancy with 800+ employees, serving ~40% of the Fortune 500. FedRAMP 3PAO, PCI QSA, and HITRUST accreditations.

Global risk advisory firm with a 400+ person cyber practice. IR-led penetration testing that feeds active breach intelligence straight into test scoping.

Managed security provider that now runs Trustwave's SpiderLabs penetration testing team, with CREST-accredited testing, red and purple teaming, and deep PCI DSS expertise.

The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response.

Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and penetration testing services.

London-based cybersecurity provider, now part of Kroll, delivering CREST-accredited penetration testing, managed detection and response, and incident response with a 550-strong cyber team.

Sophos provides cybersecurity products and managed detection and response services to organisations worldwide.

Airbus group cybersecurity consultancy with ANSSI PASSI qualification. Aerospace, defence, and critical infrastructure penetration testing across Europe.

Global Big Four professional services firm delivering CREST, CHECK, and CBEST-accredited penetration testing and red teaming services from London, serving the UK's largest enterprises and regulated organisations.

Fast-growing CREST and CHECK-accredited UK cybersecurity consultancy with deep expertise in critical national infrastructure sectors.

Berlin-headquartered German cybersecurity consultancy with 30+ years of BSI IT-Grundschutz experience. Trusted by federal agencies, DAX corporations, and critical infrastructure operators.

CREST-accredited pan-European cybersecurity services provider delivering penetration testing and managed security from Dublin with a strong UK and Ireland presence.

CREST and CHECK-accredited UK penetration testing and managed security provider formed in 2026 from Pentest People, Bulletproof, and Target Defense, with CREST STAR/TLPT-FS capability and the GuardNest vulnerability management platform.

Argos Security GmbH is a German cyber defence provider with an AI-supported centre in Munich.

Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.

Denver-based offensive security boutique with a community-first red team culture. Home of PTES co-authors and the Continuous Red Team retainer.

The UK's largest independent security testing firm, renowned for IoT/OT research, CBEST red teaming, and CHECK/CREST-accredited penetration testing across all sectors.

Vienna-headquartered Austrian cybersecurity consultancy with a prolific Vulnerability Lab research program and deep expertise in IoT and embedded systems security across the DACH region.

Offensive security firm founded by former NSA operator David Kennedy, delivering CREST-accredited penetration testing, red teaming, and adversary simulation to Fortune 500 and government clients.

Swiss cybersecurity firm with major Singapore operation. CREST accredited, CSA-licensed in Singapore. Manual exploitation focus with the proprietary MAD reporting platform.

Community-driven penetration testing firm known for free security education, open-source tools, Wild West Hackin' Fest, and practical offensive security services.

RedTeam Security is now part of DeepSeas, which offers penetration testing, red teaming and physical testing as its offensive security practice.

Dubai-based cybersecurity firm providing pen testing and security consulting across the GCC with expertise in critical infrastructure.

Full-service London-based cybersecurity consultancy with CREST, CHECK, and NCSC accreditations delivering offensive testing, managed detection, and strategic advisory services.

Elite UK offensive security consultancy specialising in CBEST/STAR/TIBER red teaming, advanced adversary simulation, and CREST-accredited penetration testing for FTSE 100 clients.

US-wide pen testing firm serving major cities including Atlanta, Dallas, Denver, Houston, and Miami with security assessments.

CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise.

Award-winning Cheltenham-based cybersecurity consultancy with NCSC CHECK Green Light status and CREST approval, specialising in defence, government, and critical national infrastructure security.

Factero Advisory Services is an independent IT governance and cybersecurity advisory firm.

Potenza Services is a veteran-owned firm based in Tampa, Florida, founded in 2012.

Israeli-headquartered global cybersecurity consultancy with a UK presence, specialising in penetration testing and TIBER-EU red team exercises for Fortune 500 companies.

Actus-Info is a Polish operator and integrator that provides a full range of telecommunications and IT services.

Alpha Code Technologies is a managed security services provider based in Jakarta, Indonesia.

Arctic Wolf provides managed security operations, threat detection and incident response services to organisations.

Artemis Security provides an AI-native security operations platform that detects, investigates and responds to cyber attacks.

Article 14 Ready provides a browser-based working packet for manufacturers that fall under the EU Cyber Resilience Act.

Provides agentic threat intelligence and validation for critical infrastructure security teams.

Bureau Veritas Cybersecurity provides cybersecurity services covering people, processes, and technology.

CodeTechLab is a cybersecurity consulting and training firm based in Jaipur, India.

Cofense provides phishing detection and response services using AI and human validation.

Critical Start provides managed detection and response services to monitor, investigate, and resolve security threats for organisations.

Cybersplice provides operational technology security solutions for industrial networks.

cycura provides Microsoft tenant security consulting and managed security services for businesses.

Provides cybersecurity protection and risk management for maritime vessels, offshore facilities and ports.

Cyngular provides an agentic security operations centre platform that autonomously detects, investigates and resolves cyber threats.

Decurity is a web3 security firm based in Dubai.

DEFION Security is an independent security partner that has operated since 2005.

Computer and IT infrastructure maker whose PowerProtect Data Manager software and Data Domain appliances back up data, detect ransomware and speed recovery.

Cyber advisory and managed security services, including managed extended detection and response, cloud security, digital identity and threat intelligence, from a global professional services network.

Dragos provides cybersecurity for industrial control systems and operational technology environments.

EC-Council is a cybersecurity certification and training body.

ERMProtect provides cybersecurity assessments, penetration testing, compliance audits, and digital forensics services.

eSentire provides managed detection and response services to protect organisations from cyber threats.

Expel provides managed detection and response security services using AI and human analysts.

Cybersecurity consulting and managed services covering security transformation, incident response, data protection and privacy, identity and privileged access, and operational technology security.

Hardware and software that detect cyber attacks and cargo theft on fleet vehicles, backed by a vehicle SOC.

Flowtriq provides real-time DDoS detection and automatic mitigation for servers and network infrastructure.

Galvanick provides behavioral threat detection for operational technology environments.

Gtd is a technology and telecommunications company with an international presence across seven countries.

Guardsi Cybersecurity is a Brazilian firm that has specialised in penetration testing and offensive security since 2015.

Immunefi runs bug bounty programmes and security services for cryptocurrency and smart contract projects.

Intezer provides an AI-powered security operations center that investigates all alerts at forensic depth.

ITSecOps provides managed IT, cybersecurity and compliance services to organisations worldwide.

Lorikeet Security provides penetration testing, incident response, and security leadership services.

MonsterCloud provides managed cloud, IT and cyber security services, including ransomware recovery, to businesses across the United States.

Morphisec sells endpoint security software that blocks ransomware and governs AI tools on devices.

Netrio provides managed IT, cybersecurity, cloud, and connectivity services to mid-market enterprises.

nFlo is a Polish technology company based in Warsaw.

Ontinue provides managed detection and response services for Microsoft security customers.

SANS Institute provides cybersecurity training, certifications, and resources to professionals and organisations worldwide.

ScanTitan provides website security scanning, malware removal, and external attack surface management for businesses.

Sunnyvale and Pune firm selling in-vehicle intrusion detection, vehicle SOC analytics, secure OTA and security assessments.

Semperis provides identity-driven cyber resilience and crisis management for critical identity systems.

Onboard monitoring platform that detects cyber and electronic warfare threats on military vehicles, aircraft, ships and trains.

Sucuri provides cloud-based website security.

Georgia start-up whose TranzSecure service flags cyber attacks, unknown devices and cargo theft across trucking fleets.

TRM Labs provides blockchain intelligence and AI tools to help investigate and disrupt criminal networks.

UnderDefense provides managed detection and response, incident response, and compliance automation services.

Veeam provides data resilience, security, and AI trust solutions for hybrid cloud environments.

Italian Var Group security firm that absorbed Munich automotive consultancy CYRES and offers a vehicle SOC service.

Cybersecurity consulting and managed security services covering cyber strategy, resilience, zero trust protection and operational technology security, within a global IT services firm.

Athena Agentic provides a unified cyber operations platform that automates detection, response, and hardening.

Cybersecurity consulting and engineering for US government and industry, including threat hunting, zero trust, incident response and defence of critical infrastructure and weapon systems.

Data security and backup platform with immutable backups, threat detection and ransomware recovery, protecting more than 1,000 workload types.

IRONVALD provides autonomous cybersecurity defence for critical infrastructure and industrial control systems.

ITSS provides managed cybersecurity services including detection, response, and penetration testing from Dubai.

Joe Security provides automated and analyst-driven malware and phishing analysis through its Joe Sandbox platform.

Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider.

Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations.

Marlink provides managed network, connectivity and cybersecurity services for remote maritime and land operations.

Cybersecurity consulting, transformation and managed security services covering risk and compliance, secure business enablement and cyber resilience, from a global IT services company.

Optiv advises, deploys, and operates cybersecurity programs for organizations.

simler provides an AI platform for generating and running cybersecurity tabletop exercises.