cybersecdirectory

Cybersecurity consulting firms in the United Kingdom

39 of the 171 cybersecurity consulting firms we list are based in the United Kingdom. 2 are public, 13 are owned by another company and 24 are private. The oldest, Intertek, was founded in 1885.

Companies focused on security consulting and vCISO in the United Kingdom

5 companies
CompanyBased inFoundedSizeOwnership
Aon Cyber Solutions

Cybersecurity consulting division of global insurance leader Aon, uniquely combining penetration testing with cyber risk quantification and insurance expertise.

London, United Kingdom2000500+ staffOwned by LevelBlue
Automiq

Automiq is an automation strategy and transformation partner.

London, United Kingdom2025Private
EY

Cybersecurity consulting and managed services covering security transformation, incident response, data protection and privacy, identity and privileged access, and operational technology security.

London, United KingdomPrivate
KPMG

Cyber security consulting covering strategy and governance, security transformation and cyber threat management, plus cyber managed services and cloud security from member firms.

London, United KingdomPrivate
Nethermind

Nethermind is a blockchain research, engineering and security company.

London, United Kingdom2017Private

Also active in security consulting and vCISO

34 companies
CompanyBased inFoundedSizeOwnership
Claranet

CREST and CHECK-accredited European managed services provider delivering penetration testing with deep infrastructure and cloud hosting expertise.

London, United Kingdom1996500+ staffPrivate
LRQA

The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response.

London, United Kingdom1985500+ staffOwned by Goldman Sachs Alternatives
NCC Group

Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and penetration testing services.

Manchester, United Kingdom1999500+ staffPublic, NCC
Redscan (A Kroll Business)

London-based cybersecurity provider, now part of Kroll, delivering CREST-accredited penetration testing, managed detection and response, and incident response with a 550-strong cyber team.

London, United Kingdom2002500+ staffPart of Kroll
PwC Cyber Security

Global Big Four professional services firm delivering CREST, CHECK, and CBEST-accredited penetration testing and red teaming services from London, serving the UK's largest enterprises and regulated organisations.

London, United Kingdom1998500+ staffOwned by PwC
Bridewell

Fast-growing CREST and CHECK-accredited UK cybersecurity consultancy with deep expertise in critical national infrastructure sectors.

Bristol, United Kingdom2013201-500 staffOwned by I-TRACING
GRC Solutions (formerly IT Governance)

UK compliance and cybersecurity consultancy, formerly IT Governance, offering CREST and NCSC CHECK penetration testing alongside governance, risk and compliance services.

Ely, United Kingdom2002201-500 staffPrivate
Dionach

Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices.

Oxford, United Kingdom199951-200 staffOwned by Nomios
Pen Test Partners

The UK's largest independent security testing firm, renowned for IoT/OT research, CBEST red teaming, and CHECK/CREST-accredited penetration testing across all sectors.

Buckingham, United Kingdom201051-200 staffPrivate
Evalian

CREST-accredited UK cyber security and data protection consultancy offering penetration testing, ISO consultancy, and managed SOC services from offices across the UK and Ireland.

Winchester, United Kingdom201851-200 staffPrivate
Aristi

CHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients.

Birmingham, United Kingdom200811-50 staffOwned by Limerston Capital
Equilibrium Security

CREST-accredited Birmingham-based cyber security consultancy delivering penetration testing, social engineering assessments, and Cyber Essentials certification for public and private sector clients.

Birmingham, United Kingdom201211-50 staffOwned by Omni Cyber Security
MDSec

Elite UK offensive security consultancy specialising in CBEST/STAR/TIBER red teaming, advanced adversary simulation, and CREST-accredited penetration testing for FTSE 100 clients.

Southam, United Kingdom201111-50 staffPrivate
RedSecLabs

CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise.

London, United Kingdom202311-50 staffPrivate
Salus Cyber

Award-winning Cheltenham-based cybersecurity consultancy with NCSC CHECK Green Light status and CREST approval, specialising in defence, government, and critical national infrastructure security.

Cheltenham, United Kingdom201711-50 staffPart of LRQA
Secarma

Manchester-based independent cybersecurity consultancy with over 20 years of experience delivering CREST and CHECK-accredited penetration testing, red teaming, and compliance certification services.

Manchester, United Kingdom200111-50 staffPrivate
SECFORCE

UK offensive security consultancy delivering CREST-accredited penetration testing, adversary simulation and CBEST, TIBER-EU and TBEST threat-led testing, mainly for financial services and other large organisations.

London, United Kingdom200811-50 staffPrivate
Stripe OLT

Award-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies.

Bristol, United Kingdom200411-50 staffPart of Littlefish
Cyberis

CREST and CHECK-accredited UK penetration testing consultancy with CBEST approval, specialising in infrastructure, application, and simulated attack assessments across the public and private sectors.

Worcester, United Kingdom201111-50 staffOwned by Reply
Aardwolf Security

Boutique UK penetration testing consultancy in Milton Keynes specialising in manual, expert-led security assessments across web applications, APIs, cloud, and mobile platforms.

Milton Keynes, United Kingdom20151-10 staffPrivate
Komodo Consulting

Israeli-headquartered global cybersecurity consultancy with a UK presence, specialising in penetration testing and TIBER-EU red team exercises for Fortune 500 companies.

London, United Kingdom20111-10 staffPrivate
Solusec

CREST-accredited UK penetration testing consultancy based in Shropshire, delivering web application, API, infrastructure, cloud, mobile, and AI/LLM testing. A small specialist team, with a retest included in every engagement.

Albrighton, United Kingdom20211-10 staffPrivate
Cyphere

CREST-accredited Manchester-based cyber security firm delivering penetration testing, managed security services, and compliance consultancy across the UK, Europe, and the USA.

Manchester, United Kingdom20201-10 staffPrivate
Bondgate IT

Bondgate IT is a managed service provider founded in 1998.

Darlington, United Kingdom1998Private
BSI Group

ISO/IEC 27001 certification audits and information security training from the UK national standards body, which also certifies quality, safety and medical devices.

London, United KingdomPrivate
Copper Horse

UK security consultancy doing threat modelling, training and research for connected vehicles, IoT and mobile products.

Monmouth, United Kingdom2011Private
Deloitte

Cyber advisory and managed security services, including managed extended detection and response, cloud security, digital identity and threat intelligence, from a global professional services network.

London, United KingdomPrivate
Forefront IT Security Services

Forefront IT Security Services presents itself as a virtual cyber security team for organisations in the United Kingdom.

United Kingdom2021Private
HORIBA MIRA

UK vehicle engineering and test centre offering threat modelling, CSMS support and security testing for vehicles.

Nuneaton, United KingdomOwned by HORIBA
Intertek

Testing and certification group that helps vehicle makers and suppliers work towards ISO/SAE 21434 compliance.

United Kingdom1885Public, ITRK
SBD Automotive

UK automotive consultancy that runs vehicle penetration tests, threat assessments and anti-theft testing for carmakers.

Milton Keynes, United KingdomPrivate
Littlefish

Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations.

Nottingham, United Kingdom2003Owned by Bowmark Capital
Secvura

Secvura reviews web and SaaS applications for security weaknesses and helps teams fix them.

London, United Kingdom2026Private
System Force IT

System Force IT provides managed IT support, cyber security, and Microsoft 365 services to UK SMEs.

Gloucester, United Kingdom2006Private

More cybersecurity consulting firms

All 171 cybersecurity consulting firms

Every cybersecurity company in the United Kingdom · See every category