What Nclose does

Nclose is a South Africa-based cybersecurity technology and services provider founded in 2006, headquartered in Cape Town with an additional office in Johannesburg. The company delivers managed cybersecurity services to enterprise and mid-market customers across verticals including banking and financial services, public sector, healthcare, fintech, education, utilities and manufacturing, professional services, and media. Since 2025, Nclose has operated as part of Integrity360, an Ireland-headquartered cybersecurity services group with six global Security Operations Centres (SOCs) and operations spanning Europe, North America, and the Caribbean.

The core offering is a managed security services platform built around 24/7 SOC operations and continuous monitoring, with a modular portfolio covering Managed Detection and Response (CyberFire MDR, Aegis MDR), Managed XDR/EDR/NDR, Managed SIEM, Managed DLP, Managed Identity Security, Managed SASE/SSE, Managed Vulnerability Management, Continuous Threat Exposure Management (CTEM), and Managed Darktrace SOC (dSOC) for AI-assisted detection. Adjacent lines include Incident Response (emergency response, digital forensics, compromise assessments, IR retainers), cybersecurity testing (penetration testing, cloud and application security testing, red team exercises, social engineering), Operational Technology Security, Payments Compliance (PCI DSS variants), and Governance, Risk & Compliance services spanning GDPR, DORA, NIS2, ISO 27001/27018/27701, NIST, and HIPAA. Core technology integrations include Microsoft Security, Darktrace, and Fortinet, with additional partnerships including Venari Security for quantum-readiness advisory.

Nclose's revenue model is dominated by recurring managed security services subscriptions, supplemented by project-based professional services for implementation, incident response retainers, compliance engagements, and discrete testing engagements. The go-to-market is enterprise field sales with direct expert-led consultation, supplemented by a channel/reseller partner network. Pricing is quote-based and not publicly disclosed. The company holds CREST, SOC 2, and ISO 27001/27018/27701 certifications and is recognized as a Gartner Representative Vendor in the Market Guide for Outsourced Managed Security Services.

Name

Nclose

Website

https://nclose.com

Company type

Private

Founded year

2006

Operating status

Acquired

Headcount range

101–250 employees

Short description

Nclose is a South Africa-based managed cybersecurity services provider, now part of Integrity360, delivering 24/7 SOC, MDR, incident response, compliance, and security testing to enterprise and mid-market customers across banking, public sector, healthcare, and other regulated verticals.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Security Systems Services (56162), Security Guards and Patrol Services (561612)

akta.pro primary industry

Control System Cybersecurity for OT (ICS Security, Monitoring, Hardening) (IMAGABAL)

akta.pro secondary industries

Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Supply Chain & Firmware Security for Industrial Devices (HDADAJAL), Application Security & DevSecOps Services (BPAKAHAJ), OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

Keywords

• Managed cybersecurity services
• Incident response services
• Threat exposure management
• Security operations center
• Cybersecurity compliance advisory

Headquarters

HQ city

Cape Town

HQ country

South Africa

HQ region

Africa

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring managed cybersecurity services including 24/7 monitoring, detection, and response delivered through SOC operations
2. Professional Services: Consulting, implementation, and project management services for cybersecurity
3. Incident Response: Emergency incident response, digital forensics, compromise assessments, and IR retainers
4. Compliance & Risk Services: Governance, risk and compliance services including GDPR, NIS2, DORA, ISO 27001, PCI DSS
5. Cybersecurity Testing: Penetration testing, cloud security testing, application security testing, red team exercises

Go-to-market motion1 record

Distribution channels2 records

Marketing channels6 records

Core offering

Nclose provides managed cybersecurity services to organizations in South Africa, delivered from a 24/7 Security Operations Centre. Its offerings include Managed Detection and Response (MDR) such as CyberFire MDR and Aegis MDR, Threat Exposure Management (CTEM), managed EDR/XDR/NDR/SIEM/firewall/DLP/identity, incident response with digital forensics, cybersecurity testing (penetration, cloud, application, red team, social engineering), PCI DSS and OT/ICS security, and governance, risk, and compliance services across GDPR, DORA, NIS2, ISO 27001, and NIST frameworks. Nclose operates as the South African arm of Integrity360 following its 2025 acquisition.

Product overview

Nclose operates as a cybersecurity services provider offering a portfolio of managed security services, incident response, and professional security testing. The portfolio consists of a core managed cyber services platform providing 24/7 monitoring capabilities, augmented by specialised modules for threat exposure management (CTEM), endpoint detection and response (EDR/XDR), network detection and response (NDR), and data loss prevention. The services also include dedicated incident response capabilities, penetration testing and red team exercises, cloud and application security testing, operational technology security, and cyber risk and compliance advisory services covering regulatory frameworks such as GDPR, DORA, NIS2, ISO 27001, NIST, and PCI DSS.

Differentiator

Problem solved

Functional benefit

Products and services

• Managed Cyber Services 24/7 managed cybersecurity services delivered by experienced SOC analysts covering threat exposure management, detection and response, vulnerability management, and security operations for enterprise and mid-market organisations.
• Managed Detection and Response (MDR) Managed Detection and Response services (CyberFire MDR and Aegis MDR) that provide continuous monitoring and threat neutralisation to strengthen organisations' cyber defences.
• Continuous Threat Exposure Management (CTEM) Continuous Threat Exposure Management (CTEM) service for ongoing assessment and management of organisational threat exposure, including vulnerability management.
• Incident Response Emergency and planned incident response services covering malware analysis, threat containment, digital forensics, compromise assessment, and incident response retainers.
• Managed SIEM Managed Security Information and Event Management (SIEM) service providing centralised log aggregation, correlation, and threat analysis.

Quantifiable outcome

• 87% of intrusions now span multiple attack surfaces

Named customers1 record

Segments8 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Five partnerships are on record, tiered core.

• Integrity360coreStrategic or Co-development PartnerNclose has been acquired by Integrity360 and is now part of the Integrity360 group, delivering world-class cybersecurity services in South Africa. This partnership expands Integrity360's presence into the African market.
• Advantus360coreStrategic or Co-development PartnerLeading Canadian cybersecurity services provider that joined Integrity360, creating the group's first hub in North America alongside Nclose's South African operations.
• MicrosoftcoreTechnology or IntegrationMicrosoft Security Partner providing integrated security solutions and services including Microsoft Security Services, Azure security, and M365 security offerings.
• DarktracecoreTechnology or IntegrationProvider of Managed Darktrace SOC (dSOC) service for AI-powered security operations and threat detection.
• FortinetcoreTechnology or IntegrationProvider of Managed Fortinet Fabric services for integrated network security solutions.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Trustwave: Global MSSP delivering managed detection and response, MDR, threat intelligence, and incident response to enterprises. Highly comparable service mix, including SOC-as-a-service and compliance support, and competes for the same mid-market and enterprise buyers.
• Secureworks: Pure-play MSSP offering managed detection and response, vulnerability management, and incident response. Direct overlap with Nclose's managed XDR/EDR/SIEM portfolio and similar mid-market/enterprise go-to-market.
• Performanta: South Africa–headquartered MSSP focused on managed security, identity, and compliance services across Africa and the UK. Closest geographic peer, directly competing for South African enterprise and mid-market security spend.
• NCC Group: UK-headquartered cyber services firm with managed detection, threat intelligence, and incident response practices. Similar mix of managed services and CREST-accredited testing/IR, with comparable regulatory and compliance capabilities.

Broad incumbents

• Orange Cyberdefense: Global MSSP arm of Orange, with 24/7 SOCs across Europe and Africa offering managed detection, threat intel, and incident response. Larger footprint and bench than Nclose but overlapping service catalogue and target verticals.
• Atos Cybersecurity: Global cybersecurity services arm of Atos offering managed SOC, MDR, and identity services to large enterprises and public sector. Overlaps with Nclose's enterprise and public-sector GTM, with deeper international scale.
• Accenture Security: Global security consulting and managed services practice covering MDR, cyber defense, OT/ICS, and GRC. Competes for the same large-enterprise transformation and managed mandates across regulated industries.
• Tesserent (Thales Cyber): Australian MSSP acquired by Thales, delivering managed detection, threat intel, and compliance services across ANZ and increasingly EMEA. Comparable mid-sized regional MSSP whose acquisition trajectory mirrors Nclose's integration into Integrity360.
• KPMG Cyber Security Services: Big-Four advisory cyber practice covering GRC, incident response, OT security, and managed detection for regulated industries. Overlaps with Nclose's banking and public-sector vertical focus and its DORA/NIS2/ISO advisory work.

Emerging players

• Darktrace: AI-driven cybersecurity vendor whose technology Nclose delivers as a managed service (managed dSOC). Strategic partner and adjacent competitor — Darktrace is increasingly bundling its own managed detection, creating channel conflict for partners like Nclose.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/integrity360
• Xx.com/nclose_sa

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Nclose