Foregenix
Foregenix is a UK-headquartered cybersecurity firm, founded in 2009, that delivers PCI compliance assessments, digital forensics, and offensive security services to payment service providers, financial institutions, and merchants across 10 countries.
- Company typePrivate
- Founded2009
- HeadquartersMarlborough, United Kingdom
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Foregenix does
Foregenix is a UK-headquartered cybersecurity firm founded in 2009 that delivers payment-industry compliance, digital forensics, and offensive security services to enterprises, financial institutions, payment service providers, and merchants worldwide. The company is a PCI Security Standards Council Qualified Security Assessor (QSA), PCI Forensic Investigator (PFI), Qualified PIN Assessor (QPA), P2PE Assessor, 3DS Assessor, and Card Production Security Assessor (CPSA), and is an SWIFT Customer Security Programme assessor and CSSP; it has held QSA and PFI status continuously since 2009 and sits on the PCI SSC Global Executive Assessor Roundtable (GEAR).
The product surface is anchored by two proprietary in-house platforms — ThreatView, a rapid eCommerce cyber-risk assessment platform, and FGX-Web, a website security platform distributed in part through channel partners — plus the Foregenix Portal used to deliver assessments and reports. Services are organized into three lines: Compliance & Consulting (PCI DSS, P2PE, PIN, 3DS, CPSA, SSF, SWIFT CSP, AusPayNet audits, CMMC/DFARS, HIPAA, Virtual CISO), Digital Forensics & Incident Response (PCI PFI, non-PFI investigations, proactive IR, blue-team extension), and Offensive Cybersecurity via the OrionX team (penetration testing, red/purple teaming, OT/IoT and hardware testing, secure-coding training/SAST).
The business operates a predominantly project-based professional services model, with multi-year consulting contracts, retainer arrangements for incident response, and subscription licensing for ThreatView and FGX-Web. Services are delivered through a direct enterprise sales motion supported by owned offices in 10 countries (UK, US, Germany, Spain, South Africa, Singapore, Australia, Uruguay, Brazil, Argentina) and channel partnerships including Mico Digital for FGX-Web and Unisys for ANZ network segmentation. The company reports more than 1,500 cumulative clients served globally and 4% employee turnover, indicating broad customer reach and high assessor retention.
Foregenix firmographics
Firmographics- Name
- Foregenix
- Legal name
- Foregenix Ltd.
- Website
- https://foregenix.com
- Company type
- Private
- Founded year
- 2009
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Foregenix is a UK-headquartered cybersecurity firm, founded in 2009, that delivers PCI compliance assessments, digital forensics, and offensive security services to payment service providers, financial institutions, and merchants across 10 countries.
- Ownership category
- akta.pro rank
Foregenix industry classification
Industry- Product category
- Cybersecurity Services and Compliance
- NAICS
- Computer Systems Design Services (541512), Other Computer Related Services (541519)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Risk, Fraud & 3DS Orchestration for Payments (FSAGABAL)
- akta.pro secondary industry
- Tokenization, Network Vaults & Credential Management (FSAGABAF)
Keywords
Where Foregenix is headquartered
LocationHeadquarters
- HQ city
- Marlborough
- HQ country
- United Kingdom
- HQ region
- Europe
Offices10 records
Markets served
Foregenix business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Cybersecurity Consulting Services: Professional consulting services for PCI compliance, cybersecurity assessments, risk management, and virtual CISO services. Revenue generated through project-based engagements and retainer arrangements.
- Digital Forensics & Incident Response: Forensic investigation services for breached organizations, including PCI Forensic Investigations (PFI), digital forensics, and proactive incident response. Billed through project engagements and retainer contracts.
- Offensive Security Services (OrionX): Penetration testing, red team/purple team services, social engineering attacks, and OT/IoT testing. Sold as professional service engagements.
- Assessment & Certification Services: Qualified Security Assessor (QSA) and PCI PFI services for payment industry compliance validation. Revenue from assessment fees and compliance consulting.
- Software Subscriptions: ThreatView website security platform and FGX-Web products provided as software solutions with associated licensing.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Enterprise cybersecurity consulting and assessment services |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels6 records
Foregenix product offering
Product offeringCore offering
Foregenix provides specialized cybersecurity services and assessor-led compliance engagements for the payment industry and broader enterprise market. Its core offerings include PCI DSS and adjacent payment compliance consulting (P2PE, PIN, 3DS, CPSA, SSF), Digital Forensics and Incident Response including PCI PFI investigations, offensive cybersecurity through the OrionX team (penetration testing, red/purple teaming, OT/IoT testing), SWIFT CSP assessments, and AusPayNet audits, supported by in-house technology platforms such as ThreatView, FGX-Web, and the Foregenix Portal.
Product overview
Foregenix is a cybersecurity services company offering a portfolio of specialized products and services focused on payment industry security and compliance. The core product offerings include: ThreatView (eCommerce cyber risk assessment platform), OrionX (offensive cybersecurity/pentest services), the Foregenix Portal (client delivery platform), and FGX-Web/DataExchange (support tools). Services span PCI compliance consulting (DSS, SSF, P2PE, PIN Security, 3DS), Digital Forensics & Incident Response (DFIR), SWIFT CSP assessments, AusPayNet audits, and general cybersecurity consulting. The company operates a service-based model rather than a single unified product platform, with offerings organized around compliance, forensics, and offensive security. Foregenix has been a QSA Company and PCI PFI since 2009 with global operations across 10+ offices worldwide.
Differentiator
Problem solved
Functional benefit
Brands
- OrionX: Offensive cybersecurity team that evaluates security posture and associated risks posed by companies. Services include penetration testing, attack simulation, red & purple teaming, social engineering attacks, OT/IoT testing, and secure development support.
Products and services
- ThreatView
- OrionX Offensive Cybersecurity
- PCI Compliance and Consulting Services
- Digital Forensics and Incident Response (DFIR)
- SWIFT Customer Security Programme (CSP) Services
- AusPayNet Audit Services
- Cybersecurity Consulting
- eCommerce Threat Intelligence
- FGX-Web
Quantifiable outcome
- 14+ years performing highly complex cybersecurity projects
- +1 more outcomes
Companies that use Foregenix
Customer profileNamed customers3 records
Segments9 records
Ideal customer profiles4 records
Foregenix technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature2 records
Foregenix partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core.
- TranwallcoreForegenix and Tranwall partnered to tackle global ATM Cashout fraud through combined cybersecurity expertise and fraud prevention solutions.
- Mico DigitalcoreMico Digital signed as an FGX-Web partner to resell and implement Foregenix's website security platform for eCommerce businesses.
- UnisyscoreForegenix and Unisys partnered to help clients fast-track advanced network segmentation security in Australia, New Zealand and the South Pacific region.
- AusPayNetcoreForegenix is an Affiliate of Australian Payments Network's Issuers and Acquirers Community (IAC), providing access to payment industry trends and scam mitigation insights.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Foregenix competitors and assessment
Company assessmentDirect peers
- Coalfire: US-headquartered cybersecurity advisory and PCI QSA/PFI firm with a comparable mix of compliance assessments, offensive security, and DFIR services targeting payments, financial services, and large enterprises.
- Trustwave: Long-standing QSA/PFI and managed security provider with overlapping PCI compliance, penetration testing, and DFIR offerings; the closest large-scale analogue to Foregenix's services portfolio.
- SecurityMetrics: PCI-focused assessor and payment-security vendor that competes directly with Foregenix on QSA services, ASV scanning, and merchant compliance tools for SMB through enterprise merchants.
- A-LIGN: Cybersecurity and compliance audit firm with PCI QSA credentials alongside SOC 2, ISO, and HITRUST — directly comparable in services mix, vertical focus, and size band to Foregenix.
- VikingCloud: PCI compliance, network security, and managed detection services provider (formerly ANX) competing for the same merchants, acquirers, and payment-service-provider clients as Foregenix.
- ControlCase: Compliance and cybersecurity services firm with PCI QSA status, GRC tooling, and managed compliance offerings that overlap Foregenix's compliance and risk assessment practice.
- Bishop Fox: Offensive-security specialist (penetration testing, red teaming, IoT/OT testing) that competes head-to-head with Foregenix's OrionX practice for sophisticated financial-services and payments engagements.
- IOActive: Specialist offensive-security and payment-hardware testing firm whose ATM, payment-terminal, and IoT testing capabilities overlap directly with Foregenix's OT/IoT and payment hardware assessment work.
Broad incumbents
- NCC Group: UK-listed cybersecurity and assurance firm with payment-industry, offensive security, and DFIR practices; a much larger incumbent competing in the same European and global markets as Foregenix.
Emerging players
- Schellman & Co: Top-tier US compliance assessor (PCI QSA, SOC 2, ISO, HITRUST) with a services-led model and similar size profile; a credible competitor for cross-border enterprise mandates where Foregenix also bids.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Foregenix social profiles
Digital presenceForegenix compliance and trust
Trust signalCompliance17 records
Foregenix financial estimates
Financial estimateRevenue estimate
Valuation estimate
Foregenix leadership team
Management profileNumber of profiles
Profiles9 records
Foregenix funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Foregenix M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Foregenix
What does Foregenix do?
Foregenix provides specialized cybersecurity services and assessor-led compliance engagements for the payment industry and broader enterprise market. Its core offerings include PCI DSS and adjacent payment compliance consulting (P2PE, PIN, 3DS, CPSA, SSF), Digital Forensics and Incident Response including PCI PFI investigations, offensive cybersecurity through the OrionX team (penetration testing, red/purple teaming, OT/IoT testing), SWIFT CSP assessments, and AusPayNet audits, supported by in-house technology platforms such as ThreatView, FGX-Web, and the Foregenix Portal.
Is Foregenix a public or private company?
Foregenix is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Foregenix founded?
Foregenix was founded in 2009. It employs 51 to 100 people.
Where is Foregenix based?
Foregenix is headquartered in Marlborough, United Kingdom, in the Europe region.
How does Foregenix make money?
Five revenue lines are on record. Cybersecurity Consulting Services are the primary driver. The others are digital Forensics & Incident Response, offensive Security Services (OrionX), assessment & Certification Services and software Subscriptions.
Who are Foregenix's main competitors?
Direct peers on record are Coalfire, Trustwave, SecurityMetrics, A-LIGN, VikingCloud, ControlCase, Bishop Fox and IOActive. NCC Group is listed as a broad incumbent. Schellman & Co is listed as an emerging player.
Does Foregenix have an API?
No public API is recorded for Foregenix.
What industry is Foregenix in?
Foregenix's product category is Cybersecurity Services and Compliance. Its primary akta.pro industry code is FSAGABAL, Risk, Fraud & 3DS Orchestration for Payments, with a secondary code of FSAGABAF, Tokenization, Network Vaults & Credential Management. Its NAICS code is 541512 and its SIC code is 7373.