What Fox - IT does

Fox-IT B.V. is a Netherlands-based cybersecurity services firm founded in 1999 and headquartered in Rijswijk, operating as a wholly-owned subsidiary of UK-listed NCC Group plc. The company delivers an end-to-end cybersecurity portfolio organized into five service pillars: Assessment & Advisory (risk management, supply chain risk, cloud/infrastructure security, application/software security, mobile, hardware & embedded systems, managed vulnerability scanning), Detection & Response (Managed XDR for Microsoft, managed detection and response, incident response with 24/7 SOC and hotline, threat intelligence), Compliance (data privacy, government & regulations, payment security), Academy (training, awareness, exercises), and Remediation (vulnerability remediation, bug bounty). Fox-IT also runs a dedicated penetration testing practice spanning attack simulation, AI security, application, infrastructure, cloud, hardware, blockchain, and cryptography/M&A due-diligence testing. Its go-to-market is direct enterprise field sales into government and large corporate clients across Europe, the UK, the US, and globally via NCC Group, supplemented by event-driven demand generation at venues such as Auto-ISAC, ESCAR, Maritime Cyber, and CYBERUK.

The business model combines project-based and retainer professional services (assessments, penetration testing, incident response, advisory, academy/training) with recurring managed detection and response revenue from a 24/7 Security Operations Center delivered through the NCC Group managed services portal. Pricing is quote-based on a multi-year contract cadence. Fox-IT monetizes a deep set of credentials — including GSMA NESAS global auditor status (one of only two), CREST, CBEST, NCSC CHECK, TISAX, ISO 27001/9001, SOC-CMM, and a Dutch Ministry of Justice private investigation license — alongside proprietary technology such as the open-source Dissect incident response framework and Global Threat Intelligence feeds that enable threat-actor attribution. The customer base spans finance, technology/media/telecom, transport/manufacturing, public sector, energy/utilities, healthcare, and retail, with named engagements including a North American bus/coach manufacturer, a maritime geoservices fleet operator, a Danish healthcare organization, a UK mobile network operator, and a global commodities organization. In August 2024 NCC Group divested Fox Crypto to CR Group Nordic AB, narrowing Fox-IT's scope to cybersecurity services.

Name

Fox - IT

Legal name

Fox-IT B.V.

Website

https://fox-it.com

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

501–1,000 employees

Short description

Fox-IT is a Netherlands-headquartered cybersecurity services firm and NCC Group subsidiary providing enterprise and government clients with managed detection and response, incident response, threat intelligence, penetration testing, compliance advisory, and security training across Europe, the UK, and globally.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Other Computer Related Services (541519), Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Managed Detection & Response (MDR) & SOC Services (HDADAGAG)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG), Security Operations (SOC), Incident Response & Threat Hunting (EDAOAIAI), Extended Detection & Response (XDR) (HDADAEAB)

Keywords

• Cybersecurity services
• Managed detection response
• Incident response
• Penetration testing
• Threat intelligence

Headquarters

HQ city

Delft

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Professional Cybersecurity Services: Fox-IT generates revenue through professional services including cybersecurity consulting, penetration testing, red teaming, security assessments, and advisory services. These are typically project-based or retainer engagements.
2. Managed Detection and Response Services: Recurring managed security services providing continuous monitoring, detection, and response capabilities through the company's SOC. Revenue is recurring in nature through subscription contracts.
3. Training and Academy Services: Fox-IT Academy provides training programs, awareness programs, exercises, and demonstrations for cybersecurity skill development.
4. Incident Response Services: Emergency incident response services including 24/7 hotline support for organizations under cyber attack.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Fox-IT provides end-to-end cybersecurity services including threat intelligence, managed detection and response (MDR/XDR), incident response, digital forensics, penetration testing, and compliance services. The company operates a Security Operations Center (SOC) for 24/7 monitoring and incident response, serving governments and leading companies globally.

Product overview

Fox IT is a global cybersecurity company offering a comprehensive portfolio of consulting and managed security services. The company operates as part of NCC Group and provides end-to-end cyber security capabilities organized into five main service pillars: Assessment & Advisory (including risk management, supply chain risk, cloud security, and managed vulnerability scanning), Detection & Response (Managed XDR for Microsoft, managed detection and response, incident response, and threat intelligence), Compliance (data privacy, government regulations, payment security), Academy (training programs, awareness, exercises), and Remediation (vulnerability remediation and bug bounty services). Fox IT also offers specialized penetration testing services spanning attack simulation, AI security, application security, infrastructure, cloud, hardware, blockchain, and cryptography. Previously, Fox Crypto was offered as a separate cryptographic solutions brand but has been sold to CR Group Nordic AB. The company is headquartered in Rijswijk, Netherlands, and serves clients globally across finance, technology, transport, public, retail, and energy sectors.

Differentiator

Problem solved

Functional benefit

Products and services

• Managed Detection and Response (MDR) 24/7 managed detection and response service delivered through Fox-IT's Security Operations Center (SOC) for enterprise customers needing continuous threat monitoring and rapid incident containment.
• Managed XDR for Microsoft Managed extended detection and response service built on Microsoft security technologies, provided to organizations seeking outsourced monitoring across Microsoft-centric environments.
• Incident Response
• Threat Intelligence
• Penetration Testing Services
• Managed Vulnerability Scanning Services (MVSS) Continuously managed vulnerability scanning and assessment service that identifies and prioritizes weaknesses across enterprise IT estates.
• Compliance Services
• Assessment & Advisory
• Remediation Services Post-incident and proactive remediation services to remove threats, close security gaps, and harden environments after attacks or discovered weaknesses.
• Fox Academy Cybersecurity training and education programs offering courses and certifications for security professionals and teams.

Quantifiable outcome

• Identified, traced, and contained a dangerous data exfiltration attack for global commodities organization, preventing theft of commercially sensitive information
• +1 more outcomes

Named customers6 records

Segments7 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Seven partnerships are on record, tiered divested, partner ecosystem, core ecosystem, flagship, strategic and parent company.

• CR Group Nordic ABdivestedOthers · 1 August 2024NCC Group completed the sale of Fox Crypto to CR Group Nordic AB following the initial announcement on August 1, 2024. This represents a divestiture of a subsidiary rather than a partnership.
• Horizon.ai / Splunkpartner ecosystemTechnology or IntegrationTechnology partner providing integration capabilities within Fox-IT's cybersecurity ecosystem. Partner logos are displayed on the partnership ecosystem page indicating collaborative solution delivery.
• Fox-IT Partner Ecosystemcore ecosystemStrategic or Co-development PartnerFox-IT maintains a diverse network of partners and strategic alliances to optimize cybersecurity solutions, adapt to unique business needs, and support innovation within the industry. Multiple unnamed partner logos are displayed.
• OpenAIflagshipStrategic or Co-development PartnerNCC Group was selected to join the OpenAI Daybreak Cyber Partner Program, demonstrating collaboration in AI security and trusted AI development in cybersecurity.
• AvertrostrategicStrategic or Co-development PartnerNCC Group and Avertro work together to transform cyber risk into strategic business intelligence, helping organizations understand and manage cybersecurity risk at the board level.
• CREST AI CharterflagshipStrategic or Co-development PartnerNCC Group became a founding signatory of CREST AI Charter helping shape trusted AI in cyber security, influencing industry standards for AI adoption in security.
• NCC Groupparent companyOthersFox-IT is a subsidiary of NCC Group, a global cyber security company headquartered in Manchester, England. NCC Group provides the parent organization structure and global reach for Fox-IT operations.

Scale indicators3 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• Trustwave: Global MSSP and cybersecurity services firm offering MDR, penetration testing, threat intelligence, and incident response — directly overlapping Fox-IT's service portfolio.
• WithSecure (formerly F-Secure): European cybersecurity firm offering managed detection and response, incident response, and security consulting. Comparable European footprint and target customer base to Fox-IT.
• CrowdStrike Services: CrowdStrike's services organization competes with Fox-IT's MDR, incident response, and proactive services, with the additional advantage of CrowdStrike's own XDR/EDR platform.
• Palo Alto Networks Unit 42: Unit 42 is Palo Alto Networks' threat intelligence, incident response, and managed detection arm — a direct competitor to Fox-IT on enterprise IR retainers and MXDR services.
• Secureworks: Pure-play MSSP offering managed detection and response, vulnerability management, and incident response. Direct competitor to Fox-IT in the mid-market and enterprise managed security services segment.
• Orange Cyberdefense: European-headquartered MSSP and cybersecurity services arm of Orange, providing managed detection, incident response, and threat intelligence with strong presence in the same European markets as Fox-IT.
• Mandiant (Google Cloud): Direct competitor in incident response, threat intelligence, and managed detection. Acquired by Google Cloud in 2022, Mandiant competes with Fox-IT on enterprise and government IR retainers and MXDR.
• Kudelski Security: Boutique cybersecurity services firm offering managed security, incident response, and cryptography advisory. Comparable in size and specialization, with similar vertical regulatory expertise.

Broad incumbents

• NCC Group: Parent company and direct global peer offering the same cybersecurity services (MDR, IR, advisory, threat intelligence) across a wider geographic footprint. Fox-IT operates as NCC Group's European high-assurance cyber arm.
• Accenture Security: Big-four-adjacent security consultancy offering managed detection and response, incident response, and cybersecurity advisory at global scale. Competes with Fox-IT on large enterprise and government transformation programs.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/cryptoron
• LinkedInlinkedin.com/company/240648
• Facebookfacebook.com/foxitsec

Compliance9 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Fox - IT