cybersecdirectory

Incident response firms in the United Kingdom

17 of the 104 incident response firms we list are based in the United Kingdom. 1 is public, 8 are owned by another company and 8 are private. The oldest, LRQA, was founded in 1985. Of the 13 companies here with staff numbers, the largest are LRQA, NCC Group, Redscan (A Kroll Business) and PwC Cyber Security, each with 500+ staff.

Also active in incident response

17 companies
CompanyBased inFoundedSizeOwnership
LRQA

The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response.

London, United Kingdom1985500+ staffOwned by Goldman Sachs Alternatives
NCC Group

Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and penetration testing services.

Manchester, United Kingdom1999500+ staffPublic, NCC
Redscan (A Kroll Business)

London-based cybersecurity provider, now part of Kroll, delivering CREST-accredited penetration testing, managed detection and response, and incident response with a 550-strong cyber team.

London, United Kingdom2002500+ staffPart of Kroll
PwC Cyber Security

Global Big Four professional services firm delivering CREST, CHECK, and CBEST-accredited penetration testing and red teaming services from London, serving the UK's largest enterprises and regulated organisations.

London, United Kingdom1998500+ staffOwned by PwC
Bridewell

Fast-growing CREST and CHECK-accredited UK cybersecurity consultancy with deep expertise in critical national infrastructure sectors.

Bristol, United Kingdom2013201-500 staffOwned by I-TRACING
WorkNest

CREST and CHECK-accredited UK penetration testing and managed security provider formed in 2026 from Pentest People, Bulletproof, and Target Defense, with CREST STAR/TLPT-FS capability and the GuardNest vulnerability management platform.

Chester, United Kingdom2014201-500 staffOwned by Inflexion
Dionach

Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.

Oxford, United Kingdom199951-200 staffOwned by Nomios
Pen Test Partners

The UK's largest independent security testing firm, renowned for IoT/OT research, CBEST red teaming, and CHECK/CREST-accredited penetration testing across all sectors.

Buckingham, United Kingdom201051-200 staffPrivate
JUMPSEC

Full-service London-based cybersecurity consultancy with CREST, CHECK, and NCSC accreditations delivering offensive testing, managed detection, and strategic advisory services.

London, United Kingdom201211-50 staffPrivate
MDSec

Elite UK offensive security consultancy specialising in CBEST/STAR/TIBER red teaming, advanced adversary simulation, and CREST-accredited penetration testing for FTSE 100 clients.

Southam, United Kingdom201111-50 staffPrivate
RedSecLabs

CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise.

London, United Kingdom202311-50 staffPrivate
Salus Cyber

Award-winning Cheltenham-based cybersecurity consultancy with NCSC CHECK Green Light status and CREST approval, specialising in defence, government, and critical national infrastructure security.

Cheltenham, United Kingdom201711-50 staffPart of LRQA
Komodo Consulting

Israeli-headquartered global cybersecurity consultancy with a UK presence, specialising in penetration testing and TIBER-EU red team exercises for Fortune 500 companies.

London, United Kingdom20111-10 staffPrivate
Cydome

Provides cybersecurity protection and risk management for maritime vessels, offshore facilities and ports.

London, United KingdomPrivate
Deloitte

Cyber advisory and managed security services, including managed extended detection and response, cloud security, digital identity and threat intelligence, from a global professional services network.

London, United KingdomPrivate
EY

Cybersecurity consulting and managed services covering security transformation, incident response, data protection and privacy, identity and privileged access, and operational technology security.

London, United KingdomPrivate
Littlefish

Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations.

Nottingham, United Kingdom2003Owned by Bowmark Capital

More incident response firms

All 104 incident response firms

Every cybersecurity company in the United Kingdom · See every category