Independent cybersecurity directory, built from public sources. Featured listings are paid placements and always labelled. How we work

NCC Group

FTSE 250 global cybersecurity and software resilience firm offering technical assurance, managed detection, and incident response.

CompanyPenetration Testing FirmsCloud

Pricing: Custom (contact sales)

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed June 2026 · How we review listings

What is NCC Group?

NCC Group was formed in 1999 when the National Computing Centre's commercial divisions were spun out and is headquartered in Manchester, listed on the London Stock Exchange. With 2,000+ staff across the UK, North America, Europe, and APAC, the group operates technical assurance, managed services, and software escrow divisions and is a founding CREST member.

Best for: Regulated enterprises and public-sector buyers wanting CREST-accredited testing, MDR, and software escrow under one global vendor

Pros

  • Founding CREST member with deep accreditation across CHECK, CBEST, and TIBER-EU
  • Recognised research output, including former Cryptography Services and Exploit Development Group
  • Broad global delivery footprint with UK government-cleared consultants
  • Combines offensive testing with MDR, IR, and escrow under one umbrella

Things to check

  • Public company under cost-discipline pressure with periodic restructurings
  • Project-based pricing per engagement, no public rate card
  • Breadth of services means specialist depth varies by region and practice

Reported in public reviews and vendor documentation. See sources below.

Key Features

Penetration testing across applications, infrastructure, and networks
Red team and adversary simulation aligned to CBEST, TIBER-EU, STAR
Hardware, embedded, and IoT security assessments
Cloud and container security review
Digital forensics and incident response retainers
Managed detection and response (MDR) and 24/7 monitoring
Threat intelligence and threat hunting
Cyber risk consulting and compliance advisory
Software escrow and source-code verification

Do you work at NCC Group? to confirm the details or send us a correction.

Add the Cyber Vendor Guide badge to your site

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Spot an error, or do you represent NCC Group? Request a correction.

Key facts

Pricing
Custom (contact sales)
Model
Project + retainer + managed services
Founded
1999
Cloud
Yes
Self-hosted
No
Visit website

NCC Group Alternatives

FeaturedSBS CyberSecurity
US cybersecurity consulting, audit and testing firm founded ...
Learn more
  • Bishop FoxOffensive security firm pairing high-end penetration testing...
  • IOActive, Inc.Independent global research-driven security consultancy spec...
  • Mandiant (part of Google Cloud)Elite incident response and offensive security consultancy o...
  • PraetorianOffensive security firm delivering continuous penetration te...
  • Trail of BitsHigh-end security research and engineering firm known for de...
View all alternatives

Where NCC Group appears

Guides

Certifications

CREST, CHECK, CBEST, TIBER-EU, PCI DSS, ISO 27001