NCC Group

NCC Group is a publicly traded (LSE: NCC) cyber security and risk mitigation business headquartered in Manchester, UK, providing assurance services spanning penetration testing, application security testing, red teaming, and cyber incident response, alongside a long-standing software escrow and resilience business that verifies and holds source code for business continuity purposes.

Founded in 1999, the company grew through decades of acquisitions into one of the largest independent security consultancies globally, holding accreditations including UK NCSC CHECK, CBEST, and CREST across its assurance practice, and serving highly regulated sectors like financial services, government, and critical infrastructure.

For fiscal 2025, NCC Group reported revenue of £238.9 million and roughly 2,140 employees serving more than 15,000 clients worldwide, with recent strategic focus split between deepening managed detection and response and incident response capability through its Cyber Incident Response Team, and continuing its differentiated Escrow business, which verifies software source code for enterprise customers’ business continuity needs.

As a public, decades-old consultancy competing against both boutique specialist firms and larger advisory practices, NCC Group’s advantage is breadth of accreditation and global delivery capacity rather than a single disruptive technology; its scores here reflect a mature, proven operator rather than a fast-moving startup.