NCC Group is a global cyber security and resilience company that helps organisations anticipate, withstand, and recover from cyber threats. Its operating model combines specialist human expertise with technology-led delivery across incident response, technical assurance, managed services, consulting and implementation, threat intelligence, and identity-related security work.
NCC Group focuses on environments where operational continuity, regulatory pressure, and stakeholder trust all depend on strong cyber resilience. The company brings together frontline incident experience, research-led insight, and integrated delivery to help customers reduce exposure, strengthen detection and response, and improve recovery readiness across enterprise, cloud, and operational environments.
Offerings, Capabilities, and Integrations
NCC Group delivers a mix of advisory, validation, and operational security services. Its capabilities span cyber strategy, risk and compliance, implementation of preventative controls, security testing, continuous monitoring, and intelligence-led response. The company supports both discrete engagements and ongoing managed programmes, depending on how much capability a customer wants to retain in house.
A key strength is NCC Group’s integration-led approach. It is built to work with customers’ existing security investments and correlate signals across endpoint, network, cloud, identity, and operational environments rather than forcing a single-vendor model. NCC Group also aligns with major cloud and security ecosystems, including Microsoft, AWS, Google Cloud, Splunk, CrowdStrike, and Qualys, to extend visibility, accelerate deployment, and support more flexible operating models.
Products and Services
- Digital Forensics & Incident Response: Readiness, rapid containment, forensic investigation, recovery support, and retainer-based services for active cyber incidents.
- Technical Assurance: Offensive security and assessment services covering penetration testing, attack simulation, application security, cloud security, hardware, and network security.
- Managed Services: Ongoing managed security services that augment or outsource core monitoring, detection, and cyber operations activities.
- Consulting & Implementation: Advisory and hands-on implementation services spanning strategy, risk, compliance, remediation, operational technology, and security programme improvement.
- Threat Intelligence: Strategic, operational, and tactical threat intelligence services, including subscriptions, bespoke research, and exposure monitoring.
- Managed Extended Detection & Response (MXDR): 24/7 managed detection, investigation, threat hunting, and response across complex enterprise environments.
- Unified Cyber Platform (UCP): NCC Group’s integration platform that unifies visibility across endpoints, networks, operations, and cloud environments to support managed security services.
- Attack Surface Management (ASM): Continuous discovery, monitoring, and prioritisation of digital assets, exposures, vulnerabilities, and misconfigurations.
- Identity & Access Management: Assessment, design, and implementation of identity controls and solutions such as MFA, SSO, privileged access, and access governance.
- Cyber Services Portal: Secure client portal for interactive penetration test reporting, remediation tracking, trend analysis, and collaboration.
- Continuous Offensive Security: Agile, ongoing testing integrated into development and security workflows to provide continuous technical assurance.
- NDR for OT: Network detection and response for operational technology environments, with passive asset mapping and continuous monitoring.
Target Customers
NCC Group serves enterprises and government organisations that operate in complex, high-risk, or highly regulated environments. Its services fit organisations that need specialist support for incident readiness and response, technical validation, managed detection and response, identity security, and cyber programme improvement.
Its sector coverage includes financial services, public sector and government, technology, media and telecommunications, energy and utilities, transport, manufacturing, health, retail and consumer markets, and legal and professional services. NCC Group is particularly relevant for customers that need to secure critical operations, cloud estates, digital products, and distributed business environments without relying on a single security vendor stack.
Cloud Integrations and Marketplace
- AWS Marketplace: NCC Group maintains an AWS Marketplace seller presence with verified listings that include Escrow as a Service and AWS-focused professional security services such as security architecture support.
- Microsoft Azure Marketplace: NCC Group maintains Microsoft Azure Marketplace presence through consulting-service and application listings, including Azure cloud security assessments, Microsoft Sentinel workshops, and Managed XDR for Microsoft.
Key People
- Mike Maddison: Chief Executive Officer
- Chris Stone: Non-Executive Chairman
- Guy Ellis: Chief Financial Officer
- Kevin Brown: Chief Operating Officer
- Damien Childs: Chief Delivery Officer
- Peter Vorley: Chief Commercial Officer
- Michelle Van de Velde: Chief People Officer
- Angela Brown: Chief Marketing Officer
- Doug Klotnia: Global Capability Leader for Managed Services
- Alejandro Rivas-Vasquez: Global Head of Digital Forensics and Incident Response
- Richard Shenton: SVP, Transformation
Key Facts
- Headquarters: Manchester, England, United Kingdom
- Employees: Approximately 2,140
- Annual Revenue: £305.4M
- Parent Company: None
- Subsidiaries: More than 25 subsidiaries, including NCC Group Holdings Limited, Fox-IT Holding B.V., Fox-IT B.V., NCC Group (Americas) Inc., NCC Group Security Services, Inc., and NCC Group Pte Limited.
- Publicly Listed: London Stock Exchange (LSE: NCC)
Analyst Recognitions
- Forrester: Strong Performer in The Forrester Wave™: Managed Detection and Response Services in Europe, Q3 2025. Strong Performer in The Forrester Wave™: Cybersecurity Consulting Services in Europe, Q4 2025.
- IDC: Major Player in IDC MarketScape: Worldwide Incident Response Services 2025 Vendor Assessment. Leader in IDC MarketScape: European Managed Detection and Response (MDR) Services 2024 Vendor Assessment. Major Player in IDC MarketScape: Worldwide Emerging Managed Detection and Response Services 2024 Vendor Assessment.
