Fox-IT

Fox-IT, headquartered in Delft, the Netherlands, provides cyber incident response, digital forensics, managed detection and response, and threat intelligence services, historically serving Dutch government agencies at state-secret classification levels as well as banks, energy operators, and other critical-infrastructure organizations across the Benelux region. The company built its reputation over 25-plus years on hands-on incident response work for high-profile breaches and on a threat intelligence practice with deep visibility into nation-state and organized-crime activity targeting Dutch and European organizations.

NCC Group, the UK-listed security consultancy, acquired Fox-IT in 2015 for roughly EUR 133 million. Unlike many acquisitions where the acquired brand disappears, Fox-IT has continued to operate under its own name for a decade since, with its own managing director and status as NCC Group’s designated market leader for Northern Europe, while NCC Group’s broader assurance and escrow businesses are covered separately from Fox-IT’s incident-response and threat-intelligence specialty. The formerly affiliated Fox Crypto cryptography subsidiary was sold off separately in 2024 and rebranded as Sentyron, further sharpening Fox-IT’s own focus on detection, response, and intelligence services.

Fox-IT’s differentiation is less about a single product and more about deep, sustained access to Dutch government and critical-infrastructure incident response work, giving it visibility into real-world attacks that smaller regional competitors lack. Its scores here reflect a mature, service-heavy operator with strong domain credibility in its home region rather than a fast-scaling product company.