What Performanta does

Performanta is a privately held managed cybersecurity services provider founded in 2010, headquartered in South Africa with a primary UK office in Maidenhead and additional offices in the USA, Australia, Germany, and broader North America. The firm delivers 24/7 managed security, consulting, and outsourced CISO services to enterprise customers across 50 countries, with named engagements spanning telecommunications, healthcare, insurance, financial services, higher education, and government. Its delivery is anchored in two Security Operations Centres staffed by 80+ analysts and supported by 12 former CISOs/CIOs, accumulating an estimated 180+ security professionals overall and managing 2M users for 500+ enterprise clients.

The company's core technology is Safe XDR, marketed as the world's first AI-verified Extended Detection and Response platform built around Gartner's Continuous Threat Exposure Management (CTEM) framework. Safe XDR integrates Microsoft's security stack (Sentinel, Defender, Intune, Entra, Purview, Security Copilot) with Performanta's proprietary Encore ASM agentless attack-surface-management platform, the Risk Operations Centre (ROC) methodology, and proprietary Security Copilot partner agents (Email Threat Analyst Agent and IAM Supervisor Agent). Anomaly detection leverages Microsoft Defender for Endpoint behavioral monitoring and Ironscales' Adaptive AI (Themis) via a managed phishing partnership. ISO 27001 certification and Microsoft Intelligent Security Association (MISA) membership underpin governance and ecosystem positioning.

Performanta monetizes primarily through subscription-based managed services (Safe XDR, managed Sentinel/Defender/Intune/Entra/Purview, SOC, managed ASM, security assurance, threat intelligence, vulnerability management) supplemented by project-based and retainer professional services (planning and deployment, incident response, digital forensics, GRC, penetration testing, outsourced CISO). The go-to-market is consultative direct enterprise field sales, layered with Microsoft's co-sell and partner ecosystem channel. The company is founder-controlled under CEO and Executive Chairman Guy Golan (co-founder), with co-founders Lior Arbel (CTO) and Brendan Kotze (CDO), plus William Morrish (Group CRO), Attie Booyens (COO/CDO/CTO/co-founder), Chereen Godwin (CPO), and Tim Collins (CFO). Beech Tree Private Equity provided institutional capital in March 2021, and Performanta acquired Identity Experts in April 2021 to deepen identity capabilities.

Name

Performanta

Legal name

Performanta Ltd

Website

https://performanta.com

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

101–250 employees

Short description

Performanta is a managed cybersecurity services provider founded in 2010, delivering 24/7 SOC, Safe XDR, managed Microsoft security, and consulting to 500+ enterprise customers across 50 countries via two SOCs and 150-180+ security professionals.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Computer Facilities Management Services (541513), Security Systems Services (56162), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Security Incident Response (IR) & Digital Forensics Services (BPAEADAI)

Keywords

• Managed security services
• Extended detection response
• Attack surface management
• Security operations center
• Incident response consulting

Headquarters

HQ city

Maidenhead

HQ country

United Kingdom

HQ region

Europe

Offices6 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring managed security services including Safe XDR, SOC services, managed ASM, managed controls, and security assurance. Delivered as subscription-based services with 24/7 monitoring and support.
2. Professional Services: Consulting services including planning and deployment, incident response, outsourced CISO, GRC consulting, penetration testing, and vulnerability management. One-time project-based or retainer engagements.
3. Managed Microsoft Security Services: Ongoing management of Microsoft security solutions including Managed Sentinel, Managed Defender, Managed Intune, Managed Entra, and Managed Purview. Subscription-based services with continuous monitoring.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels8 records

Core offering

Performanta delivers managed cybersecurity services anchored by its proprietary Safe XDR platform, an AI-verified Extended Detection and Response service designed for Continuous Threat Exposure Management. The offering combines SOC services, the Encore ASM platform for attack surface visibility, managed Microsoft Security controls, Security Copilot AI agents, and consulting across GRC, incident response, digital forensics, and outsourced CISO for enterprise customers worldwide.

Product overview

Performanta is a managed cybersecurity services provider offering a unified platform approach centered on its flagship Safe XDR service, the world's first AI-verified XDR platform designed for Continuous Threat Exposure Management (CTEM). The portfolio integrates the proprietary Encore ASM platform for attack surface visibility alongside managed SOC services, managed controls for Microsoft security products, security assurance, and professional consulting services spanning governance/GRC, incident response, digital forensics, and outsourced CISO. The company operates as a Microsoft-centric security specialist, offering managed services built on the Microsoft security stack (Sentinel, Defender, Intune, Entra, Purview) augmented with AI-powered Security Copilot agents for automated threat analysis and identity monitoring, and differentiated through a partnership with Ironscales for advanced email security powered by adaptive AI.

Differentiator

Problem solved

Functional benefit

Brands

• Encore ASM Platform: An agentless SaaS platform that integrates with existing security controls to provide near real-time visibility to cyber security posture via a single interface.
• Safe XDR
• Risk Operations Centre (ROC)

Products and services

• Safe XDR Managed Cyber Threat Exposure Management (CTEM)-enabling service that integrates internal and external ASM with XDR and automation, providing proactive risk and threat management with AI-verified detection and response capabilities for enterprise customers.
• SOC Services 24/7 Security Operations Center services with 80+ analysts across two SOCs, combining threat intelligence, engineering, automation development, and continuous incident response to detect and respond to threats for enterprise customers.
• Encore ASM Platform Agentless SaaS platform providing near real-time visibility into cybersecurity posture via a single interface, enabling gap identification in security control coverage and integration with existing security tooling.
• Managed ASM Continuous discovery, analysis, remediation, and monitoring of internal and external attack surface vulnerabilities and potential attack vectors, delivered via the Encore ASM platform.
• Managed Controls Managed services for Microsoft 365 security, Sentinel, Defender, Intune, Entra, and Purview, providing continuous monitoring and management of Microsoft security solutions.
• Security Assurance Continuous security posture reviews and configuration optimization for Microsoft and other vendor platforms, including annual roadmaps, targeted support, and vendor-funded workshops.
• Planning and Deployment APBRI cycle approach for deploying security services, ensuring specific needs and goals are met at every stage with rapid delivery of security value for enterprise customers.
• Incident Response Strategic Response Unit providing incident containment and investigation, working with security, privacy, governance, and IT teams to determine breach causes and eradicate intruders.
• Governance, Risk and Compliance (GRC) Risk management and compliance systems based on data protection policies, integrating with SOCs and governance systems to create organization-wide risk management that evolves with data risks.
• Outsourced CISO Virtual CISO services providing security leadership, strategy, and governance expertise for organizations lacking internal CISO capabilities.
• Digital Forensics Digital investigation services including log file analysis, malware reverse engineering, network forensics, and forensic imaging for legal proceedings and breach investigation.
• Threat Intelligence Service Cyber threat intelligence aggregation from OSINT, dark web monitoring, and proprietary feeds, processed with analytics, machine learning, and AI to create actionable intelligence integrated with customer security tools.
• Vulnerability Management Service Managed service for ongoing discovery, assessment, prioritization, and remediation guidance of network vulnerabilities from internal and external perspectives, with monthly reporting.
• Penetration Testing Service Security testing to identify and mitigate vulnerabilities, helping organizations meet regulatory obligations under SOC 2, GDPR, ISO 27001, PCI DSS, and HIPAA.
• Third Party Risk Monitoring Supply chain cyber security monitoring including risk assessment, vendor management, cyber threat data integration, real-time monitoring, and incident response planning.
• Email Threat Analyst Agent AI agent providing 24/7 email protection by continuously scanning for malicious links, attachments, and sender anomalies, delivering evidence-based alerts and neutralizing threats before reaching users.
• IAM Supervisor Agent AI agent providing 24/7 monitoring of identity events with intelligent alerting, detecting risks like account takeovers and privilege misuse with prioritized recommendations.
• Managed Phishing Service Managed phishing service delivered in partnership with Ironscales, combining Ironscales' Adaptive AI engine (Themis) with Performanta's 24/7/365 managed threat detection and response. Includes real-time threat detection, expert-led analysis, proactive threat hunting, and integrated phishing simulations.

Quantifiable outcome

• 95% reduction in Mean Time to Remediate (MTTR) to less than 6 minutes
• +6 more outcomes

Named customers3 records

Segments8 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability7 records

Feature6 records

Partnerships

Two partnerships are on record, tiered core/flagship and core.

• Microsoftcore/flagshipTechnology or IntegrationPerformanta is a recognized specialist Microsoft Security partner and member of Microsoft Intelligence Security Association (MISA). The partnership involves deep integration with Microsoft Security stack including Sentinel, Defender, Intune, Entra, Purview, and Security Copilot. Performanta was among the first partners to launch Security Copilot partner agents and participates in Microsoft's co-selling and partner programs.
• IronscalescoreTechnology or IntegrationPerformanta partnered with Ironscales to deliver a Managed Phishing Service that combines Ironscales' Adaptive AI engine (Themis) with Performanta's 24/7/365 managed threat detection and response. The service includes real-time threat detection, expert-led analysis, proactive threat hunting, and integrated phishing simulations.

Scale indicators12 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Arctic Wolf: Pure-play MDR/managed security services provider offering 24/7 SOC, XDR-style detection and response, and managed risk services to mid-market and enterprise customers. Highly comparable to Performanta's Safe XDR and SOC service portfolio.
• Expel: Managed detection and response (MDR) and XDR provider with a transparency-focused service model and strong cloud-native architecture. Direct competitor in the enterprise MDR/XDR market segment.
• ReliaQuest: Enterprise-focused MDR and security operations provider using its GreyMatter platform to integrate multiple security tools. Comparable in its XDR-style managed service delivery and enterprise customer focus.
• eSentire: MDR specialist providing 24/7 SOC services, XDR, and incident response for mid-market and enterprise. Competes directly with Performanta's managed detection and response offerings.

Regional players

• NCC Group: UK-headquartered cybersecurity and resilience firm providing managed security, incident response, and consulting. Geographic and service overlap with Performanta's UK enterprise base.

Emerging players

• F-Secure (WithSecure): European cybersecurity provider offering managed endpoint and cloud protection services, including MDR. Comparable in the European MSSP market and overlapping with Performanta's UK/Nordic-adjacent footprint.

Broad incumbents

• Secureworks: Global MSSP offering managed detection and response, vulnerability management, and consulting across a wide customer base. Established incumbent competing in the same MSSP space as Performanta, though with a broader portfolio.
• CrowdStrike: Endpoint and cloud security platform with Falcon Complete managed XDR offering. While primarily a product vendor, its managed service competes directly with Performanta's Safe XDR value proposition.
• Sophos: Endpoint and network security vendor with a managed detection and response service (Sophos MDR) and channel-led MSSP ecosystem. Competes at the endpoint/XDR layer where Performanta operates.
• Trustwave: Global cybersecurity services firm offering managed security, MDR, consulting, and database security. Overlaps significantly with Performanta's managed services and consulting portfolio.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/PerformantaSec
• LinkedInlinkedin.com/company/performanta

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles11 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Performanta