Incident response firms in the United Kingdom
17 of the 104 incident response firms we list are based in the United Kingdom. 1 is public, 8 are owned by another company and 8 are private. The oldest, LRQA, was founded in 1985. Of the 13 companies here with staff numbers, the largest are LRQA, NCC Group, Redscan (A Kroll Business) and PwC Cyber Security, each with 500+ staff.
Also active in incident response
17 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
LRQA The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response. | London, United Kingdom | 1985 | 500+ staff | Owned by Goldman Sachs Alternatives |
NCC Group Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and penetration testing services. | Manchester, United Kingdom | 1999 | 500+ staff | Public, NCC |
Redscan (A Kroll Business) London-based cybersecurity provider, now part of Kroll, delivering CREST-accredited penetration testing, managed detection and response, and incident response with a 550-strong cyber team. | London, United Kingdom | 2002 | 500+ staff | Part of Kroll |
PwC Cyber Security Global Big Four professional services firm delivering CREST, CHECK, and CBEST-accredited penetration testing and red teaming services from London, serving the UK's largest enterprises and regulated organisations. | London, United Kingdom | 1998 | 500+ staff | Owned by PwC |
Bridewell Fast-growing CREST and CHECK-accredited UK cybersecurity consultancy with deep expertise in critical national infrastructure sectors. | Bristol, United Kingdom | 2013 | 201-500 staff | Owned by I-TRACING |
WorkNest CREST and CHECK-accredited UK penetration testing and managed security provider formed in 2026 from Pentest People, Bulletproof, and Target Defense, with CREST STAR/TLPT-FS capability and the GuardNest vulnerability management platform. | Chester, United Kingdom | 2014 | 201-500 staff | Owned by Inflexion |
Dionach Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices. | Oxford, United Kingdom | 1999 | 51-200 staff | Owned by Nomios |
Pen Test Partners The UK's largest independent security testing firm, renowned for IoT/OT research, CBEST red teaming, and CHECK/CREST-accredited penetration testing across all sectors. | Buckingham, United Kingdom | 2010 | 51-200 staff | Private |
JUMPSEC Full-service London-based cybersecurity consultancy with CREST, CHECK, and NCSC accreditations delivering offensive testing, managed detection, and strategic advisory services. | London, United Kingdom | 2012 | 11-50 staff | Private |
MDSec Elite UK offensive security consultancy specialising in CBEST/STAR/TIBER red teaming, advanced adversary simulation, and CREST-accredited penetration testing for FTSE 100 clients. | Southam, United Kingdom | 2011 | 11-50 staff | Private |
RedSecLabs CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise. | London, United Kingdom | 2023 | 11-50 staff | Private |
Salus Cyber Award-winning Cheltenham-based cybersecurity consultancy with NCSC CHECK Green Light status and CREST approval, specialising in defence, government, and critical national infrastructure security. | Cheltenham, United Kingdom | 2017 | 11-50 staff | Part of LRQA |
Komodo Consulting Israeli-headquartered global cybersecurity consultancy with a UK presence, specialising in penetration testing and TIBER-EU red team exercises for Fortune 500 companies. | London, United Kingdom | 2011 | 1-10 staff | Private |
Cydome Provides cybersecurity protection and risk management for maritime vessels, offshore facilities and ports. | London, United Kingdom | Private | ||
Deloitte Cyber advisory and managed security services, including managed extended detection and response, cloud security, digital identity and threat intelligence, from a global professional services network. | London, United Kingdom | Private | ||
EY Cybersecurity consulting and managed services covering security transformation, incident response, data protection and privacy, identity and privileged access, and operational technology security. | London, United Kingdom | Private | ||
Littlefish Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations. | Nottingham, United Kingdom | 2003 | Owned by Bowmark Capital |
More incident response firms
All 104 incident response firmsEvery cybersecurity company in the United Kingdom · See every category