NCC Group is a global cyber security and software resilience business that helps organizations manage risk, strengthen operational resilience, and build trust across digital environments. Its model combines a people-powered, tech-enabled cyber security business with Escode, its software escrow and verification division, giving clients support across both active cyber defense and software continuity.
Across its cyber business, NCC Group brings together offensive security heritage, threat intelligence, incident response, managed services, cloud security, digital identity, and OT-focused capabilities. Through Escode, it helps organizations reduce dependency risk in third-party software with escrow, verification, and recovery-oriented services designed to keep critical applications and data accessible when supplier disruption occurs.
Offerings, Capabilities, and Integrations
NCC Group addresses cyber resilience across assessment, protection, monitoring, response, and recovery. Its capabilities span technical assurance, managed security operations, consulting and implementation, incident response, threat intelligence, and software resilience, allowing clients to combine specialist point services with ongoing operational support.
Its delivery model blends human expertise with proprietary platforms and a flexible partner ecosystem. The Unified Cyber Platform brings together telemetry, context, and workflows across endpoints, networks, cloud, OT, and identity environments, while supporting multiple tools and log sources without forcing vendor lock-in. NCC Group also works across major cloud ecosystems including AWS, Microsoft, and Google Cloud, supporting both enterprise IT and industrial environments.
Products and Services
- Incident Response Retainer: Retained incident response service that combines emergency support with preparedness options such as training, tabletop exercises, compromise assessment, and attack surface review.
- Penetration Testing Services: Offensive security testing services covering applications, networks, infrastructure, and other environments through manual, autonomous, and hybrid testing approaches.
- Cloud Security Services: Cloud security assessments and advisory services spanning architecture, risk and compliance, migration, IAM, configuration review, penetration testing, and incident response support.
- Intelligent MXDR: Managed extended detection and response service delivering 24/7 monitoring, detection, investigation, and response across complex and hybrid technology estates.
- Network Detection & Response for OT: Managed OT security service providing passive asset mapping, real-time monitoring, and threat detection across integrated IT and operational technology environments.
- Vulnerability Scanning & Management: Managed vulnerability service covering infrastructure, web application, compliance, and continuous monitoring use cases with validation and remediation guidance.
- Attack Surface Management: Service that discovers and maps internet-facing assets, identifies contextualized exposure, and helps prioritize remediation from an attacker’s perspective.
- Unified Cyber Platform (UCP): NCC Group’s integration platform for unified visibility across endpoints, networks, operations, and cloud environments, designed to support multiple tools and log sources.
- Identity & Access Management: Digital identity services spanning workforce identity, customer identity, privileged access management, identity insights, and identity-focused threat support.
- Online Exposure Monitoring: Threat intelligence-led monitoring service that tracks breached credentials, exposed data, phishing domains, code repository exposure, and threat actor discussion across the digital footprint.
- Escrow as a Service: Cloud-oriented software escrow service designed to protect source code, environments, and data for business-critical software and SaaS applications.
- Replicate & Recover: Software resilience service that combines escrow with automated backup and recovery for business-critical third-party cloud applications and associated data.
Target Customers
NCC Group serves governments and commercial organizations that operate in high-risk, highly regulated, or business-critical environments. It is particularly well suited to organizations with complex digital estates, hybrid and multi-cloud environments, OT exposure, stringent compliance obligations, or a need for rapid incident readiness and response.
Its sector presence is visible in financial services, public sector and government, manufacturing, transport, health, and technology, media, and telecommunications, as well as broader critical infrastructure settings. Through Escode, NCC Group also serves software vendors, SaaS providers, managed service providers, system integrators, resellers, and enterprises seeking continuity assurance for third-party software dependencies.
Cloud Integrations and Marketplace
- AWS Marketplace: NCC Group maintains an AWS Marketplace presence for software resilience and cyber services, including Escrow as a Service and selected professional service offerings.
- Microsoft Azure Marketplace: NCC Group maintains a Microsoft Azure Marketplace presence that includes Managed XDR, Cloud Security Assessment services, and Replicate & Recover for software resilience use cases.
Key People
- Mike Maddison: Chief Executive Officer
- Chris Stone: Non-Executive Chairman
- Guy Ellis: Chief Financial Officer
- Kevin Brown: Chief Operating Officer
- Peter Vorley: Chief Commercial Officer (CCO)
- Angela Brown: Chief Marketing Officer (CMO)
- Michelle Van de Velde: Chief People Officer (CPO)
- Damien Childs: SVP, Services & Capabilities
- Philipp Strasmann: Managing Director, Fox-IT and Market Leader, Northern Europe
- Richard Shenton: SVP, Transformation
Key Facts
- Headquarters: Manchester, England, United Kingdom
- Employees: 2,140
- Annual Revenue: £305.4M
- Parent Company: None
- Subsidiaries: Nearly 50 subsidiaries, including Fox-IT B.V., Fox-IT Holding B.V., NCC Group (Americas) Inc., NCC Group Deutschland GmbH, and NCC Group Pty Limited.
- Publicly Listed: London Stock Exchange (LSE: NCC)
Analyst Recognitions
- Forrester: Strong Performer in The Forrester Wave™: Cybersecurity Consulting Services in Europe, Q4 2025. Strong Performer in The Forrester Wave™: Managed Detection and Response Services in Europe, Q3 2025.
- IDC: Major Player in IDC MarketScape: Worldwide Incident Response Services 2025 Vendor Assessment. Leader in IDC MarketScape: European Managed Detection and Response (MDR) Services 2024 Vendor Assessment. Major Player in IDC MarketScape: Worldwide Emerging Managed Detection and Response Services 2024 Vendor Assessment.
