Managed security service providers
We list 106 companies active in managed security services, and 43 of them have it as their main focus. 7 are public, 26 are owned by another company and 73 are private. Most are based in the United States (46) and the United Kingdom (16). The oldest, IBM, was founded in 1911. By revenue from annual reports, the largest company here is Open Text Corporation ($5.2bn in FY2026).
By countryUnited States 46United Kingdom 16
Companies focused on managed security services
43 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
N-able N-able provides cybersecurity and IT management software for managed service providers and businesses. | Burlington, United States | Public, NABL | $508.8m (FY2025) | ||
G GMV Innovating Solutions GMV Innovating Solutions is a technology group that provides solutions, services and products across many sectors. | Tres Cantos, Malaysia | 1984 | 3,880 staff | Private | |
CyberCX Australia and New Zealand's largest pure-play cybersecurity firm with offices in every major ANZ capital. CREST ANZ accredited and IRAP-listed for Australian Government testing. | Sydney, Australia | 2019 | 500+ staff | Part of Accenture | |
GuidePoint Security US-headquartered cybersecurity consultancy with 800+ employees, serving ~40% of the Fortune 500. FedRAMP 3PAO, PCI QSA, and HITRUST accreditations. | Reston, United States | 2011 | 500+ staff | Private | |
Argos Security GmbH Argos Security GmbH is a German cyber defence provider with an AI-supported centre in Munich. | Munich, Germany | 1999 | 100 staff | Owned by Sophora Unternehmerkapital | |
Jones IT Jones IT provides managed IT services, cybersecurity, and compliance support to businesses in the San Francisco Bay Area. | San Francisco, United States | 2002 | 100 staff | Private | |
InterIntra InterIntra is an Australian managed IT and cyber security provider. | Adelaide, Australia | 2006 | 35 staff | Private | |
Actus-Info Actus-Info is a Polish operator and integrator that provides a full range of telecommunications and IT services. | Wrocław, Poland | 2010 | Private | ||
Alcott Enterprises Managed IT Services & Cybersecurity Alcott Enterprises is a managed IT service provider and cybersecurity company based in Los Angeles. | Torrance, United States | 2014 | Private | ||
Alpha Code Technologies Alpha Code Technologies is a managed security services provider based in Jakarta, Indonesia. | Jakarta, Indonesia | 2025 | Owned by Akraya International | ||
Bondgate IT Bondgate IT is a managed service provider founded in 1998. | Darlington, United Kingdom | 1998 | Private | ||
Boston Managed IT Boston Managed IT is a managed service provider based in Waltham, Massachusetts, founded in 2017. | Waltham, United States | 2015 | Private | ||
ColdBoot ColdBoot is a Budapest-based Hungarian IT company that serves small and medium-sized businesses and private individuals. | Budapest, Hungary | 2026 | Private | ||
cycura GmbH cycura provides Microsoft tenant security consulting and managed security services for businesses. | Einbeck, Germany | Private | |||
Deloitte Cyber advisory and managed security services, including managed extended detection and response, cloud security, digital identity and threat intelligence, from a global professional services network. | London, United Kingdom | Private | |||
Exclusive Networks Exclusive Networks is a global cybersecurity specialist that distributes and supports security solutions through partners. | Boulogne Billancourt, France | Owned by CD&R and Permira | |||
Globalgig Globalgig provides managed security and network services to enterprises across multiple countries. | San Antonio, United States | Private | |||
Gtd Gtd is a technology and telecommunications company with an international presence across seven countries. | Santiago, Chile | 1980 | Private | ||
I Infysec Infysec provides cyber security services, training, and research and development. | Chennai, India | Private | |||
Integris IT Integris provides managed IT, cybersecurity, AI and cloud services to small and midsize businesses. | Cranbury, United States | Private | |||
ITSECOPS ITSecOps provides managed IT, cybersecurity and compliance services to organisations worldwide. | Greater Noida, India | Private | |||
MDSI MDSI is an IT services company based in La Réunion. | Le Port, France | 2010 | Owned by Groupe Factoria | ||
MonsterCloud MonsterCloud provides managed cloud, IT and cyber security services, including ransomware recovery, to businesses across the United States. | Hollywood, United States | Private | |||
Netrio Netrio provides managed IT, cybersecurity, cloud, and connectivity services to mid-market enterprises. | McKinney, United States | Private | |||
Network Brainiacs Provides managed IT support, cybersecurity services and custom software to small businesses. | Mount Arlington, United States | 2011 | Private | ||
nuHarbor nuHarbor provides cybersecurity services and managed security operations to organisations across government, healthcare, finance and enterprise. | United States | 2013 | Private | ||
Nuvol Cybersecurity Nuvol Cybersecurity is a boutique cybersecurity firm founded in 2017 in Panama. | Mexico City, Panama | 2017 | Private | ||
REJIS REJIS provides technology solutions for public safety and government agencies. | St. Louis, United States | 1974 | Private | ||
Schwarz Digits Schwarz Digits is the IT and digital division of Schwarz Group. | Bad Friedrichshall, Germany | 2023 | Owned by Schwarz Group | ||
SecureNET Systems SecureNET Systems provides IT outsourcing and cybersecurity services to small and medium businesses in Bucharest and Ilfov. | Romania | 2025 | Private | ||
SIBERLOCK SIBERLOCK is a cybersecurity and consultancy firm based in Turkey. | Konya Province, Turkey | 2024 | Private | ||
STACK Cybersecurity Provides managed IT services, cybersecurity, compliance support and AI adoption guidance to businesses. | Livonia, United States | Owned by IT Solutions | |||
XTIUM Provides managed IT services including security, cloud desktops, networks and AI deployment support. | Oldsmar, United States | Private | |||
Z-JAK Technologies Z-JAK Technologies is a Louisville-based provider of managed IT and cybersecurity services for small and midsize businesses, typically with 5 to 150 employees. | Louisville, United States | 2020 | Private | ||
Cloudrise Cloudrise provides security services to enterprises and technology partners. | Grand Junction, United States | 2019 | Part of Exclusive Networks | ||
E-C.O.P (Thailand) Limited Provides managed security services and security operations centre services in Thailand. | Thailand | 2007 | Private | ||
ITSS L.L.C-FZ ITSS provides managed cybersecurity services including detection, response, and penetration testing from Dubai. | Dubai, United Arab Emirates | 2012 | Private | ||
Kyndryl Managed security operations, threat intelligence and incident response services delivered from global security operations centres by an IT infrastructure services provider. | New York, United States | Private | |||
Littlefish Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations. | Nottingham, United Kingdom | 2003 | Owned by Bowmark Capital | ||
Marlink Marlink provides managed network, connectivity and cybersecurity services for remote maritime and land operations. | Paris, France | Private | |||
NTT DATA Cybersecurity consulting, transformation and managed security services covering risk and compliance, secure business enablement and cyber resilience, from a global IT services company. | Tokyo, Japan | Private | |||
Optiv Optiv advises, deploys, and operates cybersecurity programs for organizations. | Leawood, United States | 1996 | Owned by KKR | ||
System Force IT System Force IT provides managed IT support, cyber security, and Microsoft 365 services to UK SMEs. | Gloucester, United Kingdom | 2006 | Private |
Also active in managed security services
63 companies| Company | Based in | Founded | Size | Ownership | Revenue |
|---|---|---|---|---|---|
Open Text Corporation OpenText provides software and services for managing information across an organisation. | Waterloo, Canada | 1991 | Public, OTEX | $5.2bn (FY2026) | |
NETSCOUT NETSCOUT provides real-time network visibility, observability, cybersecurity, and DDoS protection solutions. | Westford, United States | 1984 | Public, NTCT | $859.5m (FY2026) | |
Fastly Fastly provides an edge cloud platform that helps businesses deliver, secure, and deploy applications and AI workloads. | San Francisco, United States | 2011 | Public, FSLY | $624.0m (FY2025) | |
Allot Allot provides network intelligence and security solutions for service providers and enterprises. | Hod Hasharon, Israel | Public, ALLT | $102.0m (FY2025) | ||
IBM IBM is a technology company that sells software, infrastructure, and consulting services. | Armonk, United States | 1911 | 352,600 staff | Public, IBM | |
Claranet CREST and CHECK-accredited European managed services provider delivering penetration testing with deep infrastructure and cloud hosting expertise. | London, United Kingdom | 1996 | 500+ staff | Private | |
LevelBlue (formerly Trustwave) Managed security provider that now runs Trustwave's SpiderLabs penetration testing team, with CREST-accredited testing, red and purple teaming, and deep PCI DSS expertise. | Chicago, United States | 1995 | 500+ staff | Private | |
PwC Cyber Security Global Big Four professional services firm delivering CREST, CHECK, and CBEST-accredited penetration testing and red teaming services from London, serving the UK's largest enterprises and regulated organisations. | London, United Kingdom | 1998 | 500+ staff | Owned by PwC | |
Integrity360 CREST-accredited pan-European cybersecurity services provider delivering penetration testing and managed security from Dublin with a strong UK and Ireland presence. | Dublin, Ireland | 2005 | 201-500 staff | Owned by August Equity | |
Redspin Miami-based cybersecurity firm with 300+ employees and deep healthcare/HIPAA expertise. Delivering pen testing since 2000. | Miami, United States | 2000 | 201-500 staff | Owned by Clearwater | |
The Missing Link Sydney-headquartered Australian cybersecurity firm founded in 1997, now part of Infosys. CREST-approved with OSCP, OSCE, and OSEE-certified testers. | Sydney, Australia | 1997 | 201-500 staff | Owned by Infosys | |
WorkNest CREST and CHECK-accredited UK penetration testing and managed security provider formed in 2026 from Pentest People, Bulletproof, and Target Defense, with CREST STAR/TLPT-FS capability and the GuardNest vulnerability management platform. | Chester, United Kingdom | 2014 | 201-500 staff | Owned by Inflexion | |
Sekuro Australian CREST-accredited cybersecurity consultancy formed from the 2021 Privasec, Naviro, AvertRo, and Theta merger. Risk-led offensive security with strong APRA and Essential Eight programme work. | Sydney, Australia | 2021 | 51-200 staff | Owned by Insight Enterprises | |
ThreatSpike Red London-based cybersecurity firm offering unlimited, fixed-price penetration testing and red teaming services with ISO 27001 certification and a unique subscription model. | London, United Kingdom | 2011 | 51-200 staff | Private | |
Wizlynx Group Swiss cybersecurity firm with major Singapore operation. CREST accredited, CSA-licensed in Singapore. Manual exploitation focus with the proprietary MAD reporting platform. | Zurich, Switzerland | 2008 | 51-200 staff | Private | |
Evalian CREST-accredited UK cyber security and data protection consultancy offering penetration testing, ISO consultancy, and managed SOC services from offices across the UK and Ireland. | Winchester, United Kingdom | 2018 | 51-200 staff | Private | |
SensePost (Orange Cyberdefense) Ethical hacking team within Orange Cyberdefense with a 20+ year track record. Known for building industry-standard security tools and groundbreaking research. | Pretoria, South Africa | 2002 | 51-200 staff | Owned by Orange | |
Aristi CHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients. | Birmingham, United Kingdom | 2008 | 11-50 staff | Owned by Limerston Capital | |
Black Hills Information Security Community-driven penetration testing firm known for free security education, open-source tools, Wild West Hackin' Fest, and practical offensive security services. | Spearfish, United States | 2008 | 11-50 staff | Private | |
Project Black Australian senior-led boutique pen testing firm with consultants in Sydney, Melbourne, and Brisbane. CREST CRT, OSCP, and OSCE certified testers. | Sydney, Australia | 2019 | 11-50 staff | Private | |
Salus Cyber Award-winning Cheltenham-based cybersecurity consultancy with NCSC CHECK Green Light status and CREST approval, specialising in defence, government, and critical national infrastructure security. | Cheltenham, United Kingdom | 2017 | 11-50 staff | Part of LRQA | |
Stripe OLT Award-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies. | Bristol, United Kingdom | 2004 | 11-50 staff | Part of Littlefish | |
Tinexta Cyber (formerly Swascan) Italian cybersecurity group that absorbed Swascan, offering offensive security and vulnerability assessment through its Cyber Competence Center. | Milan, Italy | 2017 | 11-50 staff | Private | |
Potenza Services Potenza Services is a veteran-owned firm based in Tampa, Florida, founded in 2012. | Q49255, United States | 2012 | 9 staff | Private | |
Cyphere CREST-accredited Manchester-based cyber security firm delivering penetration testing, managed security services, and compliance consultancy across the UK, Europe, and the USA. | Manchester, United Kingdom | 2020 | 1-10 staff | Private | |
7AI 7AI provides AI agents that automate security operations centre tasks for enterprises. | Boston, United States | 2024 | Private | ||
A Armor Provides cloud security, compliance and managed detection and response services to regulated industries. | Plano, United States | 2009 | Private | ||
AT&T Cybersecurity AT&T Cybersecurity provides network security services to businesses of all sizes. | San Mateo, United States | 2007 | Owned by WillJam Ventures | ||
BARR Advisory BARR Advisory helps organisations establish, manage, and audit cybersecurity and compliance programmes. | Kansas City, United States | Private | |||
Cato Networks Cato Networks provides a SASE platform that secures enterprise, cloud and AI interactions. | Tel Aviv, Israel | 2015 | Private | ||
Corero Network Security Corero Network Security provides automatic DDoS protection for businesses and service providers. | London, United Kingdom | Public, CNS | |||
Critical Start Critical Start provides managed detection and response services to monitor, investigate, and resolve security threats for organisations. | Plano, United States | 2012 | Owned by Vista Equity Partners | ||
Cyber Intelligence House Provides dark web intelligence and cyber exposure monitoring to managed security service providers. | Singapore, Singapore | 2015 | Private | ||
CyberSheath CyberSheath provides cybersecurity compliance services for DOD contractors, focusing on CMMC, DFARS, and NIST standards. | Reston, United States | 2012 | Private | ||
Cyderes Cyderes provides managed cybersecurity services including identity, threat detection, and exposure management. | Kansas City, United States | Private | |||
C CYMOTIVE Technologies Israeli firm selling in-vehicle intrusion detection, vulnerability tools, compliance software and vehicle SOC services to carmakers. | Tel Aviv, Israel | Private | |||
Dell Technologies Computer and IT infrastructure maker whose PowerProtect Data Manager software and Data Domain appliances back up data, detect ransomware and speed recovery. | Round Rock, United States | Private | |||
Druva Druva provides a fully managed SaaS platform for data backup, recovery, and cyber resilience. | Sunnyvale, United States | 2008 | Private | ||
EC-Council EC-Council is a cybersecurity certification and training body. | United States | 2001 | Private | ||
eSentire eSentire provides managed detection and response services to protect organisations from cyber threats. | Waterloo, Canada | 2001 | Private | ||
Expel Expel provides managed detection and response security services using AI and human analysts. | Herndon, United States | 2016 | Private | ||
EY Cybersecurity consulting and managed services covering security transformation, incident response, data protection and privacy, identity and privileged access, and operational technology security. | London, United Kingdom | Private | |||
Flowtriq Flowtriq provides real-time DDoS detection and automatic mitigation for servers and network infrastructure. | Toronto, Canada | Private | |||
Foresite Cybersecurity Foresite provides managed detection and response services using agentic AI for security operations. | Overland Park, United States | Private | |||
Gtd Colombia Gtd Colombia sells technology solutions for businesses in Colombia. | Bogotá, Colombia | 2012 | Part of Gtd | ||
Gtd Perú Gtd Perú provides technology solutions for businesses. | Lima, Peru | 2015 | Part of Gtd | ||
H HB Technologies HB Technologies provides smart card and digital security solutions for government, banking, telecom and transport sectors. | Rouiba, Algeria | 2004 | Private | ||
Immunefi Immunefi runs bug bounty programmes and security services for cryptocurrency and smart contract projects. | Singapore, Singapore | 2020 | Private | ||
KPMG Cyber security consulting covering strategy and governance, security transformation and cyber threat management, plus cyber managed services and cloud security from member firms. | London, United Kingdom | Private | |||
nFlo nFlo is a Polish technology company based in Warsaw. | Warsaw, Poland | 2015 | Private | ||
Ontinue Ontinue provides managed detection and response services for Microsoft security customers. | Redwood City, United States | Owned by Quorum Cyber | |||
PowerDMARC PowerDMARC provides a cloud-based platform for email authentication and domain security. | Plano, United States | 2020 | Private | ||
Quzara Quzara provides FedRAMP compliance advisory and managed detection and response services. | Vienna, United States | Private | |||
SERMA Safety & Security French security evaluation lab (ITSEF/CESTI) recognised by the PCI SSC for PTS device evaluation, plus EMVCo and Common Criteria. | Pessac (Bordeaux), France | Owned by SERMA Group | |||
Swimlane Swimlane provides agentic AI automation for security operations, vulnerability management, and compliance. | Denver, United States | 2015 | Private | ||
Team Cymru Team Cymru provides global threat intelligence from internet traffic for proactive defence. | Lake Mary, United States | Private | |||
UnderDefense UnderDefense provides managed detection and response, incident response, and compliance automation services. | New York, United States | 2017 | Private | ||
Accenture Cybersecurity consulting and managed security services covering cyber strategy, resilience, zero trust protection and operational technology security, within a global IT services firm. | Dublin, Ireland | Private | |||
Booz Allen Hamilton Cybersecurity consulting and engineering for US government and industry, including threat hunting, zero trust, incident response and defence of critical infrastructure and weapon systems. | McLean, United States | Private | |||
Clone Systems Provides penetration testing, PCI ASV scanning, and managed security services for compliance and threat detection. | Philadelphia, United States | 1998 | Private | ||
HackersEra Indian firm offering vehicle and ECU penetration testing, R155 and 21434 consulting, plus a vehicle SOC. | Pune, India | 2015 | Private | ||
IntelliGRC IntelliGRC provides software that helps managed service providers automate cybersecurity compliance and audit readiness. | Fairfax, United States | Private | |||
NuSummit NuSummit provides AI, cybersecurity, cloud, and digital engineering services to financial institutions. | Mumbai, India | Private |
Recent deals in managed security services
All managed security services dealsAcquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.
More in Security Services & MSSPs
See every category- Penetration testing companies 210 companies
- MDR providers 100 companies
- Incident response firms 104 companies
- Cybersecurity consulting firms 171 companies
- Bug bounty platforms 14 companies