What PureCyber does

PureCyber is a Cardiff-based cybersecurity managed services provider founded in 2016, delivering a unified cyber security offering organised around four pillars: Managed SOC Services (24/7 SOC, MXDR, MDR/EDR, vulnerability scanning, breach monitoring, phishing simulations, incident response, and threat exposure/brand protection), Consultancy (Cyber Essentials, IASME, ISO 27001, ISO 22301, cyber security audits, incident response simulation, awareness training, and Virtual CISO), Penetration Testing (application, infrastructure, red teaming, and IT health checks), and Subscription Packages (Foundations, Core, Total tiers). Its proprietary Vyper Agent endpoint solution provides active response and ransomware rollback up to 72 hours, supporting Windows, MacOS, Linux, and mobile devices. The company holds CREST membership, NCSC Assured Service Provider status, ISO 27001:2022, ISO 9001:2015, Cyber Essentials, Cyber Essentials Plus, and IASME Cyber Assured certifications.

PureCyber serves both SMEs and larger global enterprises, with explicit vertical depth in manufacturing, social housing, education, accountancy, legal, financial services/FinTech, retail, and (more recently) sports and leisure. The firm operates an outsourced-team, sales-led motion with subscription-based recurring revenue complemented by project-based penetration testing and consultancy engagements. Distribution combines direct enterprise field sales (HubSpot consultation booking), subscription self-service tiers, vertical channel partnerships (Welsh Sports Association, Glamorgan County Cricket Club), and active participation in industry events. In July 2024, PureCyber received a £5 million growth capital investment from BGF, joined by Non-Executive Chair Ben Marnham, supporting a stated strategy of UK-wide expansion and pursuit of larger enterprise clients. By its June 2026 ten-year milestone, the firm had grown its cybersecurity professional headcount from 34 to 54 and reported 33% revenue growth and 44% gross profit growth since the investment.

Name

PureCyber

Legal name

PureCyber Limited

Website

https://purecyber.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

PureCyber is a Cardiff-based cybersecurity managed services firm founded in 2016 that delivers 24/7 SOC, MDR/EDR, penetration testing, and consultancy through tiered subscription packages (Foundations, Core, Total) to SMEs and global enterprises across manufacturing, housing, education, legal, financial services, and sports verticals.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (5415), Other Computer Related Services (541519)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Application Security & DevSecOps Services (BPAKAHAJ)

Keywords

• Managed security services
• Penetration testing
• Cyber consultancy
• Security operations centre
• Threat detection

Headquarters

HQ city

Cardiff

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Subscription Services: Tiered subscription packages (Foundations, Core, Total) providing integrated cybersecurity services. The subscription model offers a fixed-price solution with fully integrated and complete cyber security coverage tailored to business size and complexity.
2. Managed Services: 24/7 SOC services, MXDR, vulnerability scanning, breach monitoring, phishing simulations, and incident response provided as ongoing managed services.
3. Professional Services / Consultancy: CE, CEP, and IASME consultancy, ISO 27001, ISO 22301, cyber security audits, incident response simulation, cyber awareness training, and Virtual CISO services.
4. Penetration Testing Services: One-off and project-based penetration testing including application testing, infrastructure testing, red teaming, and IT health checks.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels8 records

Core offering

PureCyber provides integrated cybersecurity services across four pillars: Managed SOC Services (24/7 SOC, MXDR, MDR/EDR, vulnerability scanning, breach monitoring, phishing simulations, incident response, threat exposure and brand protection), Penetration Testing (application, infrastructure, red teaming, IT health checks), Consultancy (Cyber Essentials, ISO 27001, ISO 22301, IASME, audits, vCISO, awareness training), and tiered Subscription Packages (Foundations, Core, Total). The offering is delivered as a fixed-price, vendor-agnostic outsourced security team backed by CREST-certified and NCSC-assured expertise.

Product overview

PureCyber provides a comprehensive, integrated cyber security solution delivered through four core pillars: Managed SOC Services, Consultancy Services, Subscription Packages, and Penetration Testing. The subscription model offers three tiers (Foundations, Core, Total) that bundle managed services including MDR/EDR, SOC monitoring, vulnerability scanning, and phishing simulations. Standalone managed services include 24/7 SOC, MXDR, Breach Monitoring, Threat Exposure & Brand Protection, and Incident Response. Penetration Testing services cover application, infrastructure, red teaming, and IT health checks. Consultancy services include governance certifications (Cyber Essentials, ISO 27001, ISO 22301, IASME), cyber audits, incident response simulation, awareness training, and virtual CISO services. The platform is described as agnostic, designed to integrate with existing tools and infrastructure.

Differentiator

Problem solved

Functional benefit

Products and services

• 24 Hour SOC 24/7 Security Operations Center providing continuous monitoring and real-time threat detection and response for client organisations.
• MXDR (Managed Extended Detection and Response) Managed cybersecurity service providing extended detection and response capabilities across endpoints, networks and cloud environments.
• MDR/EDR (Managed Detection and Response / Endpoint Detection and Response) Endpoint security solution providing continuous monitoring, threat detection and active response across Windows, macOS, Linux and mobile devices, with behavioural analysis and machine learning.
• Vulnerability Scanning Continuous scanning and assessment of client systems to identify security vulnerabilities and weaknesses.
• Breach Monitoring Monitoring service that detects and alerts on potential data breaches and compromised credentials.
• Phishing Simulations Simulated phishing exercises designed to test employee awareness and identify vulnerable users within client organisations.
• Incident Response Rapid response and remediation services for cybersecurity incidents and breaches affecting client organisations.
• Threat Exposure and Brand Protection Monitoring and protection service covering digital footprint, brand impersonation and external threat exposure for client organisations.
• Application Penetration Testing Security testing of software and web applications to identify exploitable vulnerabilities, delivered by CREST-certified testers.
• Infrastructure Penetration Testing Network and infrastructure penetration testing to identify security weaknesses in client IT systems.
• Red Teaming

Quantifiable outcome

• 33% revenue increase following BGF investment
• +4 more outcomes

Named customers4 records

Segments10 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

Three partnerships are on record, tiered core.

• Glamorgan County Cricket ClubcoreGTM or Marketing Partner · 3 July 2024Three-year partnership making PureCyber Glamorgan's official cyber security partner. PureCyber will provide proactive awareness training to enhance digital resilience of Glamorgan's stakeholders. Collaboration aims to raise awareness of cybersecurity importance across the club's network and fanbase.
• Welsh Sports Association (WSA)coreStrategic or Co-development Partner · 3 June 2024PureCyber became official cyber security delivery partner for WSA, creating an equal playing field for organisations of all sizes in the sports and leisure sector across Wales. Partnership brings PureCyber's expertise and sector-specific knowledge to sports, stadiums, and leisure entities through scalable subscription services.
• National and International Bodies and Membership OrganisationscoreOthersPureCyber works in collaboration with many national and international bodies and membership organisations to provide resources and cyber security reassurance to organisations. Partnership logos displayed on website include various industry bodies.

Scale indicators8 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• NCC Group: Large UK-listed cybersecurity services firm offering managed detection, incident response, and CREST-accredited penetration testing. Comparable as a scaled UK MSSP/pentest competitor, though broader in scope and global in reach.
• Trustwave: Global MSSP providing MDR, SOC, penetration testing, and consulting. Comparable across nearly all PureCyber service lines but at much greater scale and with broader geographic coverage.
• WithSecure (formerly F-Secure): European-headquartered cybersecurity vendor offering managed detection, endpoint protection, and consultancy. Overlaps with PureCyber on MDR/EDR and security services for mid-market European customers.
• Orange Cyberdefense: European MSSP owned by Orange, delivering managed detection, SOC, threat intel, and consultancy across multiple geographies. Comparable as a scaled European MSSP competing for similar enterprise customers.
• Sopra Steria Cyber: Large European IT services group with a dedicated cybersecurity practice covering SOC, identity, and compliance services. Comparable as a broad incumbent delivering managed security to enterprises and public sector.
• Arctic Wolf: Global MDR/security operations vendor delivering subscription-based SOC services to mid-market and enterprise. Comparable business model and target segment, though significantly larger and more US-centric.

Direct peers

• Expel: US-based MDR provider delivering transparent, subscription-based SOC and detection/response services. Comparable product set (MDR, vulnerability management, phishing) and mid-market enterprise target customer.
• Integrity360: UK and Ireland-based cybersecurity services provider offering managed SOC, MDR, and CREST-accredited penetration testing. Closely comparable size, geography, and service mix to PureCyber.
• eSentire: Pure-play MDR provider offering 24/7 SOC, endpoint detection, and managed response services to mid-market organisations. Direct overlap with PureCyber's MDR/EDR and MXDR offerings and subscription model.
• Bridewell: UK-headquartered cybersecurity services firm providing 24/7 MDR/SOC, penetration testing, and consultancy across regulated industries. Closely comparable in size, geography, and CREST/NCSC-accredited service portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/PureCyberLtd
• LinkedInlinkedin.com/company/purecyber-limited

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about PureCyber