Protection Group International

What Protection Group International does

Protection Group International (PGI) is a UK-headquartered cybersecurity and digital resilience services firm founded in 2013, with primary offices in London (Angel Gate, EC1V) and Bristol (Equinox South), and 51-100 employees. The company operates as an integrated professional services firm rather than a software vendor, organising its offering around four service lines: Cyber Security (penetration testing, red teaming, OT testing, phishing, social engineering, Generative AI pen testing), Regulation and Compliance (ISO 27001, PCI DSS, GDPR/DPA, NIS2, DORA, UK Cyber Resilience Bill, DCC Scheme), Digital Intelligence (threat actor intelligence, online harms monitoring, digital risk assessments, AI threat investigation), and Capacity Building (PGI Cyber Academy in Bristol, national workforce programmes, international academy partnerships). Underlying capability is expert human-led consulting supported by technology rather than a proprietary platform, with a portfolio of methodologies (Cyber Security Maturity Model, intelligence-led penetration testing) and cross-platform threat detection across 78 geographies and 62 languages.

PGI serves four primary segments: UK Government and Public Sector, Commercial Organisations, International Programmes and Development, and Online Platforms, delivering engagements through named teams of analysts and consultants rather than ticket-queue models. Revenue is generated entirely through quote-based professional services contracts including penetration testing, compliance consultancy, certification body work (Cyber Essentials, ISO, DCC), and bespoke training programmes. Distribution is primarily direct enterprise and government sales, supplemented by the UK G-Cloud framework and channel partnerships with Softcat, regional Cyber Resilience Centres, BTAS (Saudi Arabia), and Reload (GCC). The company is privately held with no disclosed external funding rounds, indicating it has been self-sustaining since founding. Notable credentials include CREST membership, PCI QSA status, NCSC Assured Service Provider for Cyber Incident Exercising, NCSC Assured Cyber Advisor, UKAS-certified ISO 27001/9001, Defence Cyber Certification Body authority, and CREST AI Charter founding signatory status.

Name

Protection Group International

Legal name

PGI – Protection Group International Limited

Website

https://pgitl.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

51–100 employees

Short description

Protection Group International (PGI) is a UK-based cybersecurity and digital resilience services firm, founded 2013, delivering integrated penetration testing, compliance consultancy, digital threat investigations, and cyber capacity-building programmes to UK government, regulated enterprises, international development programmes, and online platforms.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Investigation, Guard, and Armored Car Services (56161), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)

akta.pro secondary industry

Security Systems Monitoring & Dispatch (SOC/Remote Guarding) (IMAIAEAF)

Keywords

• Cybersecurity consulting services
• Penetration testing services
• Compliance advisory services
• Digital threat investigations
• Cyber capacity building

Headquarters

HQ city

Bristol

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Professional Services - Cybersecurity Consulting: Direct delivery of cybersecurity services including penetration testing, incident response, digital forensics, and security consulting to government and corporate clients
2. Training and Capacity Building Services: Delivery of cybersecurity training courses, professional development programs, and national workforce development initiatives through the PGI Cyber Academy
3. Compliance and Certification Services: Information assurance consultancy including ISO 27001, PCI DSS, GDPR, NIS2, DORA compliance support and certification body services
4. Digital Investigations: Threat research, online harms monitoring, and intelligence services for governments, platforms, and corporations

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

PGI is an integrated cybersecurity, digital intelligence and compliance services firm that helps governments, regulated industries and online platforms uncover digital threats, harden defences and meet regulatory obligations. Core revenue-generating offerings span CREST-accredited penetration testing, Cyber Essentials / Cyber Essentials Plus and Defence Cyber Certification (DCC) issuance, ISO 27001 / PCI DSS / GDPR / DORA / NIS2 compliance consultancy, digital threat investigations and online harms monitoring, incident response and digital forensics, AI threat investigation and AI red teaming, plus national workforce development through the PGI Cyber Academy.

Product overview

Protection Group International (PGI) offers an integrated portfolio of cybersecurity, compliance, and digital intelligence services. The core offering spans four interconnected service lines: Detect (digital threat investigations, threat actor intelligence, online harms monitoring), Protect (cybersecurity testing, incident response, compliance consultancy, information assurance), and Build (capacity building, training programmes, national workforce development). PGI provides specialised certification services including Cyber Essentials, Defence Cyber Certification (DCC), and ISO 27001 consultancy, along with AI-specific services such as generative AI penetration testing and AI red teaming. The company operates as a services firm rather than a software product company, delivering expert human-led cybersecurity solutions supported by technology to governments, regulated industries, and online platforms.

Differentiator

Problem solved

Functional benefit

Products and services

• Cyber Security Testing Services Comprehensive cybersecurity technical testing services including penetration testing, vulnerability assessments, red teaming, social engineering assessments, physical security assessments, and intelligence-led technical security testing to identify and remediate digital security vulnerabilities. For governments, regulated industries and online platforms.
• Penetration Testing CREST-certified ethical hacking service covering Active Directory assessment, build and configuration review, cloud review, external and internal infrastructure testing, operational technology, web application testing, wireless network assessment, and intelligence-led penetration testing.
• Cyber Essentials Certification UK Government baseline cybersecurity certification (Cyber Essentials and Cyber Essentials Plus) helping organisations implement fundamental technical controls to protect against common cyber attacks. PGI is a Certified Body under the IASME-managed scheme.
• Regulation and Compliance Services Compliance and regulatory consultancy services helping organisations navigate requirements including DORA, NIS2, ISO 27001, PCI DSS, GDPR, UK Cyber Resilience Bill, and Defence Cyber Certification. Includes gap analysis, maturity assessments, and Cyber Assurance as a Service.
• Information Assurance Governance, risk and compliance consultancy including gap analysis, ISO 27001 consultancy, PCI DSS consulting, GDPR & DPA consultancy, cyber security maturity assessments, and Cyber Assurance as a Service.
• Cyber Incident Preparedness and Response Incident response services including NCSC-Assured cyber incident exercising, emergency cyber incident response, digital forensics, business continuity management (ISO 22301), and crisis management planning.
• Digital Intelligence Services Threat investigation and analysis services including corporate intelligence, digital risk assessments, threat actor intelligence, novel risk intelligence, civic events monitoring, online harms monitoring, and AI threat investigation.
• AI Risk Management Services Services focused on managing AI-related risks including generative AI penetration testing, AI threat investigation, and AI red teaming to assess and secure AI systems.
• Defence Cyber Certification (DCC) Scheme UK Ministry of Defence certification scheme for defence supply chain suppliers, providing independent third-party validation of security posture from Level 0 through Level 3, with PGI acting as a licensed certification body.
• Capacity Building Services (PGI Cyber Academy) Training and capability development programmes including national digital resilience capabilities, international partnerships, national workforce development, cyber career conversion programmes, and PGI Cyber Academy training courses certified by GCHQ/NCSC and CompTIA.

Quantifiable outcome

• Over 80% of cyber attacks preventable with Cyber Essentials certification

Named customers10 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

14 partnerships are on record, tiered core and minor.

• Malaysia Digital Economy Corp (MDEC)coreStrategic or Co-development Partner · 9 February 2018MDEC partnered with PGI to build a cyber training academy at Asia Pacific University (APU) to protect and enhance Malaysia's digital economy. PGI installed Cyber Training infrastructure, delivered SOC Incident Responder training to 72 Malaysian delegates, and trained Malaysian trainers.
• IASME ConsortiumcoreTechnology or IntegrationPGI is a Certified Body for the Cyber Essentials Scheme managed by IASME Consortium. IASME licence the delivery of assessments to Certified Bodies including PGI, with each assessor required to undergo training and pass relevant assessments and exams.
• WeProtect Global AlliancecoreStrategic or Co-development PartnerPGI is a member of WeProtect Global Alliance which brings together governments, civil society organisations, and private sector to transform the global response to child sexual abuse and exploitation online.
• CRESTcoreTechnology or IntegrationPGI is a CREST member company. All CREST member companies have submitted policies, processes and procedures relating to service provision for CREST assessment, deemed fit for purpose.
• CompTIAcoreTechnology or IntegrationPGI is a CompTIA Platinum Partner using only CompTIA-approved curriculum with all instructors fully certified. Joining the programme involved rigorous audit on standards of course offerings, training provisions, facilities, and customer care.
• South West Cyber Resilience CentreminorChannel Partner/ Reseller/ DistributorPGI is a trusted partner of the South West Cyber Resilience Centre, part of national network funded by Home Office helping businesses and charities in South West region protect from cybercrime. Led by serving police officers in not-for-profit partnership.
• London Cyber Resilience CentreminorChannel Partner/ Reseller/ DistributorPGI is a trusted partner of the London Cyber Resilience Centre, part of national network funded by Home Office helping businesses and charities in London protect from cybercrime. Led by serving police officers.
• SESminorChannel Partner/ Reseller/ DistributorSES is a UK service partner, providing software escrow solutions. SES protect over 3,000 Software Developers, IP Owners, Distributors and End Users in over 45 countries.
• SoftcatminorChannel Partner/ Reseller/ DistributorSoftcat is a leading provider of technology solutions and services working across public and private sector. PGI has been their cyber security partner since 2015.
• BTASminorChannel Partner/ Reseller/ DistributorBTAS is official channel, reseller and delivery partner of BT Global Services in Saudi Arabia providing managed global IP services, convergence services, business continuity, security and risk resilience services.
• ReloadminorChannel Partner/ Reseller/ DistributorReload IT Services L.L.C is Emirati and GCC based security intelligence service provider headquartered in Dubai serving Middle East and India. Acts as Private CERT focusing on financial and telecom sectors.
• AGH University of Science and TechnologycoreStrategic or Co-development PartnerPGI and AGH have worked together since October 2017 to deliver cyber security training and develop a cyber academy in Poland. PGI training available at AGH with partnership providing foundation for research to enhance training and cyber security industry.
• JODDB Cyber Security Academy (KCSA)coreStrategic or Co-development PartnerJODDB (formerly KADDB) established JODDB Cyber Security Academy in partnership with PGI providing first-of-its-kind training programs in Jordan. Courses certified by GCHQ covering skills for cyber security careers.
• Asia Pacific University (APU)coreStrategic or Co-development PartnerMalaysia Digital Economy Corp (MDEC) partnered with PGI to build cyber training academy at APU. Partnership provides regional training centre reskilling people and supporting programmes across Asia-Pacific region.

Scale indicators8 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Pen Test Partners: UK CREST-accredited penetration testing firm offering ethical hacking, red teaming, and security assurance. Directly comparable to PGI's penetration testing, red teaming, and intelligence-led testing services.
• NCC Group: UK-listed cybersecurity and resilience firm offering penetration testing, incident response, managed detection, and compliance services to government and regulated enterprises. Directly comparable to PGI on service portfolio and UK government client base.
• S-RM: Global cyber security and intelligence consultancy providing incident response, digital forensics, threat intelligence, and advisory. Comparable to PGI's digital investigations and incident response practices for corporate and government clients.
• Bridewell Consulting: UK-based cybersecurity consultancy delivering managed security services, penetration testing, compliance, and threat intelligence. Closely comparable to PGI's integrated detect/protect/build model and UK regulated-sector focus.
• Nettitude: CREST-accredited UK cybersecurity firm offering penetration testing, incident response, GRC, and managed security services. Directly comparable to PGI across technical testing, compliance, and incident response.

Broad incumbents

• PwC UK Cybersecurity: Big Four cyber risk and regulatory compliance practice serving FTSE clients and UK government. Overlaps with PGI's compliance (ISO 27001, PCI DSS, GDPR, NIS2) and risk advisory work at greater scale.
• Mandiant (Google Cloud): Global incident response and threat intelligence leader (now part of Google Cloud) serving large enterprises and governments. Overlaps with PGI's digital investigations, threat intelligence, and incident response services at a much larger scale.
• BAE Systems Digital Intelligence: Defence-grade cyber, intelligence, and security services division of BAE Systems. Competes with PGI for UK government, defence, and national security cyber work, including threat intelligence and incident response.

Emerging players

• F-Secure (WithSecure): Nordic-origin cybersecurity firm (now WithSecure) providing consulting, managed detection, and incident response. Comparable to PGI in advisory-led cyber services with broader software heritage.

Regional players

• Witherslack Group / Reload (Reload IT Services): Emirati/GCC-based security intelligence service provider and channel partner of PGI. Comparable to PGI's regional capacity building and CERT-style service delivery in the Middle East and India.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/protectiongintl
• LinkedInlinkedin.com/company/protection-group-international
• Facebookfacebook.com/ProtectionGroupInternational

Compliance15 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles20 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Protection Group International