Cybersecurity consulting firms in the United Kingdom
39 of the 171 cybersecurity consulting firms we list are based in the United Kingdom. 2 are public, 13 are owned by another company and 24 are private. The oldest, Intertek, was founded in 1885.
Companies focused on security consulting and vCISO in the United Kingdom
5 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
Aon Cyber Solutions Cybersecurity consulting division of global insurance leader Aon, uniquely combining penetration testing with cyber risk quantification and insurance expertise. | London, United Kingdom | 2000 | 500+ staff | Owned by LevelBlue |
Automiq Automiq is an automation strategy and transformation partner. | London, United Kingdom | 2025 | Private | |
EY Cybersecurity consulting and managed services covering security transformation, incident response, data protection and privacy, identity and privileged access, and operational technology security. | London, United Kingdom | Private | ||
KPMG Cyber security consulting covering strategy and governance, security transformation and cyber threat management, plus cyber managed services and cloud security from member firms. | London, United Kingdom | Private | ||
Nethermind Nethermind is a blockchain research, engineering and security company. | London, United Kingdom | 2017 | Private |
Also active in security consulting and vCISO
34 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
Claranet CREST and CHECK-accredited European managed services provider delivering penetration testing with deep infrastructure and cloud hosting expertise. | London, United Kingdom | 1996 | 500+ staff | Private |
LRQA The only organisation worldwide with a full suite of CREST accreditations. 250+ cybersecurity specialists operating in 55+ countries across pen testing, red teaming, and incident response. | London, United Kingdom | 1985 | 500+ staff | Owned by Goldman Sachs Alternatives |
NCC Group Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and penetration testing services. | Manchester, United Kingdom | 1999 | 500+ staff | Public, NCC |
Redscan (A Kroll Business) London-based cybersecurity provider, now part of Kroll, delivering CREST-accredited penetration testing, managed detection and response, and incident response with a 550-strong cyber team. | London, United Kingdom | 2002 | 500+ staff | Part of Kroll |
PwC Cyber Security Global Big Four professional services firm delivering CREST, CHECK, and CBEST-accredited penetration testing and red teaming services from London, serving the UK's largest enterprises and regulated organisations. | London, United Kingdom | 1998 | 500+ staff | Owned by PwC |
Bridewell Fast-growing CREST and CHECK-accredited UK cybersecurity consultancy with deep expertise in critical national infrastructure sectors. | Bristol, United Kingdom | 2013 | 201-500 staff | Owned by I-TRACING |
GRC Solutions (formerly IT Governance) UK compliance and cybersecurity consultancy, formerly IT Governance, offering CREST and NCSC CHECK penetration testing alongside governance, risk and compliance services. | Ely, United Kingdom | 2002 | 201-500 staff | Private |
Dionach Global enterprise cybersecurity consultancy founded in 1999 in Oxford, holding rare CREST STAR-FS accreditation and delivering penetration testing, red and purple teaming, and PCI QSA services across five international offices. | Oxford, United Kingdom | 1999 | 51-200 staff | Owned by Nomios |
Pen Test Partners The UK's largest independent security testing firm, renowned for IoT/OT research, CBEST red teaming, and CHECK/CREST-accredited penetration testing across all sectors. | Buckingham, United Kingdom | 2010 | 51-200 staff | Private |
Evalian CREST-accredited UK cyber security and data protection consultancy offering penetration testing, ISO consultancy, and managed SOC services from offices across the UK and Ireland. | Winchester, United Kingdom | 2018 | 51-200 staff | Private |
Aristi CHECK and CREST-accredited Birmingham-based cyber security consultancy with over 15 years of experience delivering penetration testing, red teaming, and OT security assessments for government and private sector clients. | Birmingham, United Kingdom | 2008 | 11-50 staff | Owned by Limerston Capital |
Equilibrium Security CREST-accredited Birmingham-based cyber security consultancy delivering penetration testing, social engineering assessments, and Cyber Essentials certification for public and private sector clients. | Birmingham, United Kingdom | 2012 | 11-50 staff | Owned by Omni Cyber Security |
MDSec Elite UK offensive security consultancy specialising in CBEST/STAR/TIBER red teaming, advanced adversary simulation, and CREST-accredited penetration testing for FTSE 100 clients. | Southam, United Kingdom | 2011 | 11-50 staff | Private |
RedSecLabs CREST-certified and PCI QSA penetration testing consultancy in London, delivering offensive security and compliance services across 25+ countries with research-driven expertise. | London, United Kingdom | 2023 | 11-50 staff | Private |
Salus Cyber Award-winning Cheltenham-based cybersecurity consultancy with NCSC CHECK Green Light status and CREST approval, specialising in defence, government, and critical national infrastructure security. | Cheltenham, United Kingdom | 2017 | 11-50 staff | Part of LRQA |
Secarma Manchester-based independent cybersecurity consultancy with over 20 years of experience delivering CREST and CHECK-accredited penetration testing, red teaming, and compliance certification services. | Manchester, United Kingdom | 2001 | 11-50 staff | Private |
SECFORCE UK offensive security consultancy delivering CREST-accredited penetration testing, adversary simulation and CBEST, TIBER-EU and TBEST threat-led testing, mainly for financial services and other large organisations. | London, United Kingdom | 2008 | 11-50 staff | Private |
Stripe OLT Award-winning CREST-certified managed cyber security and IT support provider with offices in Bristol, London, and Manchester, specialising in penetration testing and Microsoft security technologies. | Bristol, United Kingdom | 2004 | 11-50 staff | Part of Littlefish |
Cyberis CREST and CHECK-accredited UK penetration testing consultancy with CBEST approval, specialising in infrastructure, application, and simulated attack assessments across the public and private sectors. | Worcester, United Kingdom | 2011 | 11-50 staff | Owned by Reply |
Aardwolf Security Boutique UK penetration testing consultancy in Milton Keynes specialising in manual, expert-led security assessments across web applications, APIs, cloud, and mobile platforms. | Milton Keynes, United Kingdom | 2015 | 1-10 staff | Private |
Komodo Consulting Israeli-headquartered global cybersecurity consultancy with a UK presence, specialising in penetration testing and TIBER-EU red team exercises for Fortune 500 companies. | London, United Kingdom | 2011 | 1-10 staff | Private |
Solusec CREST-accredited UK penetration testing consultancy based in Shropshire, delivering web application, API, infrastructure, cloud, mobile, and AI/LLM testing. A small specialist team, with a retest included in every engagement. | Albrighton, United Kingdom | 2021 | 1-10 staff | Private |
Cyphere CREST-accredited Manchester-based cyber security firm delivering penetration testing, managed security services, and compliance consultancy across the UK, Europe, and the USA. | Manchester, United Kingdom | 2020 | 1-10 staff | Private |
Bondgate IT Bondgate IT is a managed service provider founded in 1998. | Darlington, United Kingdom | 1998 | Private | |
BSI Group ISO/IEC 27001 certification audits and information security training from the UK national standards body, which also certifies quality, safety and medical devices. | London, United Kingdom | Private | ||
Copper Horse UK security consultancy doing threat modelling, training and research for connected vehicles, IoT and mobile products. | Monmouth, United Kingdom | 2011 | Private | |
Deloitte Cyber advisory and managed security services, including managed extended detection and response, cloud security, digital identity and threat intelligence, from a global professional services network. | London, United Kingdom | Private | ||
Forefront IT Security Services Forefront IT Security Services presents itself as a virtual cyber security team for organisations in the United Kingdom. | United Kingdom | 2021 | Private | |
HORIBA MIRA UK vehicle engineering and test centre offering threat modelling, CSMS support and security testing for vehicles. | Nuneaton, United Kingdom | Owned by HORIBA | ||
Intertek Testing and certification group that helps vehicle makers and suppliers work towards ISO/SAE 21434 compliance. | United Kingdom | 1885 | Public, ITRK | |
SBD Automotive UK automotive consultancy that runs vehicle penetration tests, threat assessments and anti-theft testing for carmakers. | Milton Keynes, United Kingdom | Private | ||
Littlefish Littlefish provides managed IT services, cyber security, digital solutions, and data and AI services to organisations. | Nottingham, United Kingdom | 2003 | Owned by Bowmark Capital | |
Secvura Secvura reviews web and SaaS applications for security weaknesses and helps teams fix them. | London, United Kingdom | 2026 | Private | |
System Force IT System Force IT provides managed IT support, cyber security, and Microsoft 365 services to UK SMEs. | Gloucester, United Kingdom | 2006 | Private |
More cybersecurity consulting firms
All 171 cybersecurity consulting firmsEvery cybersecurity company in the United Kingdom · See every category