Cyber Threat Defense SRL

Cybersecurity Servicesctdefense.com

CT Defense SRL is a CREST-accredited cybersecurity consulting firm headquartered in Cluj-Napoca, Romania, delivering 20+ penetration testing, red teaming, SOC, dark web, and GRC services to enterprise and mid-market clients across the UK, US, EMEA, and Middle East using a hybrid AI+human methodology.

Company typePrivate
Founded2017
HeadquartersLondon, United Kingdom
Headcount11–50
GTM typeB2B
OfferingServices

What Cyber Threat Defense SRL does

Cyber Threat Defense SRL (CTD / CT Defense SRL) is a CREST-accredited cybersecurity consulting firm founded in 2017 and headquartered in Cluj-Napoca, Romania, with a regional office in Abu Dhabi, United Arab Emirates. The company sells 20+ certified cybersecurity services spanning penetration testing (web, mobile, IoT, external/internal network, API, cloud), red teaming, social engineering, 24/7 Security Operations Center (SOC), dark web threat intelligence, forensics, governance/risk/compliance (GRC), PCI DSS compliance, secure code review, secure software development, and one-to-one cybersecurity training. Its technical delivery model is a hybrid AI+human methodology in which the PentX.ai platform is used for autonomous reconnaissance, CVE triage, configuration sweeps, and continuous validation, while senior OSCP, CEH, CISM, GIAC (GPEN/GXPN/GWAPT), and CREST-certified testers handle exploit chaining, business-logic abuse, and client-facing reporting.

Cyber Threat Defense SRL firmographics

Firmographics

Name: Cyber Threat Defense SRL
Legal name: CT Defense SRL
Website: https://ctdefense.com
Company type: Private
Founded year: 2017
Operating status: Operating
Headcount range: 11–50 employees
Short description: CT Defense SRL is a CREST-accredited cybersecurity consulting firm headquartered in Cluj-Napoca, Romania, delivering 20+ penetration testing, red teaming, SOC, dark web, and GRC services to enterprise and mid-market clients across the UK, US, EMEA, and Middle East using a hybrid AI+human methodology.
Ownership category
akta.pro rank

Cyber Threat Defense SRL industry classification

Industry

Product category: Cybersecurity Services
NAICS: Testing Laboratories and Services (541380), Testing Laboratories and Services (54138)
SIC: Services-Testing Laboratories (8734), Services-Computer Programming Services (7371)
akta.pro primary industry: Penetration Testing & Red Teaming (BPAKADAE)
akta.pro secondary industries: Vulnerability Management & Penetration Testing Services (BPAEADAD), Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG)

Keywords

Penetration testing services
Red team assessments
Managed security operations center
Cybersecurity compliance consulting
Threat intelligence monitoring

Where Cyber Threat Defense SRL is headquartered

Location

Headquarters

HQ city: London
HQ country: United Kingdom
HQ region: Europe

Offices2 records

Markets served

Cyber Threat Defense SRL business model

Business model

GTM type: B2B
Offering type: Services
Cost components: Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

Professional Cybersecurity Consulting Services: Penetration testing, red teaming, security assessments, and consulting engagements billed as project-based professional services. Services include Web Application Pentest, IoT Pentest, External/Internal Network Pentest, Cloud Security Assessment, Red Teaming, Mobile App Pentest, Social Engineering, API Audit, Security Operations Center, Threat Intelligence, Forensics, GRC, Cybersecurity Compliance (PCI DSS), Security Controls Audit, Secure Code Review, Secure Software Development, and Cybersecurity Training.

Go-to-market motion3 records

Distribution channels3 records

Marketing channels4 records

Cyber Threat Defense SRL product offering

Product offering

Core offering

Cyber Threat Defense is a CREST-accredited cybersecurity consulting firm that delivers certified penetration testing, red teaming, cloud and network security assessments, 24/7 managed Security Operations Center monitoring, dark-web threat intelligence, digital forensics, and Governance/Risk/Compliance services to mid-to-large enterprises. Engagements use a hybrid AI+Human validation methodology anchored on the PentX.ai platform, with senior OSCP/CEH/CISM/CREST/GIAC certified testers conducting manual exploit chaining and business-logic abuse testing. Complementary offerings include secure code review, secure software development consulting, PCI DSS/HIPAA/GDPR/NIS2/DORA compliance testing, and one-to-one practical cybersecurity training programs.

Product overview

Cyber Threat Defense is a CREST-accredited security consulting company offering certified cybersecurity services for clients in UK, US, EMEA and Middle East. The company provides a comprehensive portfolio of penetration testing services (web applications, IoT devices, external/internal networks, mobile apps, APIs), red teaming, social engineering, cloud security, and 24/7 Security Operations Center (SOC) monitoring. Additional services include threat intelligence and dark web monitoring, forensics and investigations, Governance Risk and Compliance (GRC), PCI DSS compliance, security controls audits, secure code review, secure software development, and one-to-one cybersecurity training programs. Services are delivered by certified experts holding OSCP, CEH, CISM, GIAC, and CREST certifications, using hybrid AI+human validation approaches for penetration testing.

Differentiator

Problem solved

Functional benefit

Products and services

Web Application Penetration Testing Manual penetration testing to identify and remediate web application security flaws, based on PTES, NIST, and OWASP standards; targets enterprises that need to validate web application security posture.
IoT Device Penetration Testing Assessment of vulnerabilities in smart devices and IoT systems through hardware, software, and server testing, including firmware reverse engineering, radio communication reversing, and hardware exploitation.
External Network Penetration Testing Testing of internet-facing applications, websites, servers, and network perimeter using PTES, NIST, and OWASP standards to identify exploitable vulnerabilities before real hacking incidents occur.
Internal Network Penetration Testing Internal network security testing including asset discovery, vulnerability assessment, manual exploitation, and remediation reporting to find weaknesses inside the corporate network perimeter.
Cloud Security Assessment Comprehensive assessment of cloud environments covering IAM and identity, CI/CD credential exposure, cloud-native data exposure, and trust/pivot paths across AWS, Azure, and GCP platforms.
Red Team Assessment Full-scope, no-limit hacking exercise offering realistic attack simulations including external infrastructure exploitation, web application attacks, phishing, social engineering, and physical security testing.
Android Application Penetration Testing Professional assessment of Android application vulnerabilities using static testing, dynamic testing, and server-side testing methodologies aligned with PTES, NIST, and OWASP standards.
Social Engineering & Phishing Testing of human vulnerabilities through phishing campaigns, vishing, impersonation, pretexting, and spear phishing using psychological manipulation techniques to assess employee security awareness.
API Services Audit Security assessment of APIs and web services to identify authorization issues, IDOR, injection flaws, and API business-logic bypass vulnerabilities.
Security Operations Center (SOC) 24/7 real-time security monitoring with certified engineers providing instant incident response, threat hunting, SIEM integration, and centralized log management across identities, endpoints, servers, databases, network applications, and websites.
Threat Intelligence Service Dark web monitoring and cyber intelligence service for detecting stolen credentials, session cookies, and authentication tokens from underground feeds before they are exploited.
Forensics and Investigations Digital forensics and incident investigation services for analyzing cybersecurity incidents and producing evidence suitable for incident response procedures.
Governance, Risk and Compliance (GRC) Cyber strategy and risk management consulting covering regulatory compliance, risk identification and mitigation, data protection, and third-party risk management across PCI DSS, GDPR, NIS2, DORA, HIPAA, ISO 27001, NIST, GLBA, FISMA, NYDFS and HITECH frameworks.
Cybersecurity Compliance (PCI DSS) PCI DSS penetration testing for payment processors, banking institutions, and financial services to maintain compliance with payment-card-industry security audit requirements.
Security Controls Audit Complex analysis of organizational security controls, investigating the level of security, regulatory compliance, and effectiveness of the security strategy.
Secure Code Review Detection and remediation of coding flaws using automated tool-based analysis and manual white-box analysis to identify security vulnerabilities before software is deployed.
Secure Software Development Integration of cybersecurity into client product development lifecycles, applying offensive-security experience to custom secure software development engagements.
Cyber Security Training One-to-one practical cybersecurity training programs including Beginner and Advanced Penetration Tester Professional Training, IT Security Manager Training, Secure Software Development Training, and general Cyber Awareness Training.

Quantifiable outcome

Standard SOC response time to alerts is 10 minutes or less
+1 more outcomes

Companies that use Cyber Threat Defense SRL

Customer profile

Named customers29 records

Segments3 records

Ideal customer profiles2 records

Cyber Threat Defense SRL technology and API

Technology

Technology focussed Yes

API detail

Has API: No
API docs
API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability6 records

Feature4 records

Cyber Threat Defense SRL partnerships and signals

Strategic signal

Partnerships

Five partnerships are on record, tiered core and minor.

CREST (Council of Registered Ethical Security Testers)coreTechnology or IntegrationCTD is a CREST Accredited Pentest Member, one of the key quality certifications in the penetration testing industry. This accreditation demonstrates compliance with CREST standards for penetration testing methodology, staff vetting, and deliverable quality. Listed on CREST's Service Selection Platform.
Cluj IT ClusterminorStrategic or Co-development PartnerCTD is a member of the Cluj IT Cluster, a Romanian IT business association. Cluj IT Cluster supports the local technology ecosystem and includes multiple member companies.
PentX.aicoreTechnology or IntegrationCTD uses PentX.ai AI pentest platform as in-the-loop tooling on live engagements and as the continuous validation layer between scheduled pentests. PentX is described as built on the methodology of senior offensive engineers. CTD is a channel/partner for this AI pentesting platform.
White Label PartnerscoreChannel Partner/ Reseller/ DistributorCompanies that add cybersecurity services to their portfolio and deliver CTD services under their own brand. CTD provides all methodologies, training, branded materials, and engineering resources. Partner manages client relationship.
Referral PartnersminorGTM or Marketing PartnerCompanies that refer clients to CTD in exchange for referral fees. Partner does not manage projects or client communication. Lower involvement than white label partners.

Scale indicators3 records

Recent moves6 records

Expansion highlights7 records

Cyber Threat Defense SRL competitors and assessment

Company assessment

Direct peers

Secarma: UK-based cybersecurity consultancy providing penetration testing, red team, and managed security services. Comparable to CTD as a smaller, CREST-aligned offensive security boutique serving UK and EMEA enterprises.
Bishop Fox: US-based offensive security specialist offering penetration testing, red teaming, and attack surface management. Comparable to CTD in its focus on elite human-led testing with proprietary tooling, and in serving large enterprise and financial services clients.
NetSPI: US offensive security firm delivering penetration testing, attack surface management, and breach and attack simulation. Comparable to CTD in pentesting depth, enterprise focus, and use of proprietary platforms to scale testing operations.
Pentest People: UK CREST-accredited penetration testing specialist with a service portfolio closely aligned to CTD's (web, network, mobile, cloud, IoT). Comparable as a similarly-sized offensive security firm targeting mid-market and enterprise customers in the UK.
Cyberis: UK-based penetration testing and security consulting firm with CREST accreditation and a focus on regulated industries. Comparable to CTD in service mix, CREST alignment, and enterprise/financial services customer profile.
NCC Group: UK-headquartered global cybersecurity consultancy and CREST-accredited penetration testing provider. Closely comparable to CTD in core offensive security services, CREST accreditation, and enterprise customer base across financial services.

Broad incumbents

WithSecure (formerly F-Secure): Nordic-headquartered cybersecurity vendor offering penetration testing, managed detection and response, and consulting. Comparable to CTD in offensive security services but operates at much broader scale across multiple product lines.
Orange Cyberdefense: Global cybersecurity services arm of Orange, offering pentesting, SOC, threat intelligence, and managed security. Comparable to CTD in service portfolio and Middle East presence, but vastly larger scale and broader geographic reach.
Trustwave: Global cybersecurity vendor and CREST-accredited provider of penetration testing, MDR, and managed security. Comparable to CTD in enterprise pentest delivery and CREST membership, with much broader service portfolio and global footprint.

Emerging players

Cobalt: Pentest-as-a-service platform connecting enterprises with a curated network of testers. Comparable to CTD in core pentest delivery but operates via an on-demand platform model rather than a traditional consultancy, with potential overlap and partnership opportunities.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Cyber Threat Defense SRL compliance and trust

Trust signal

Compliance27 records

Cyber Threat Defense SRL financial estimates

Financial estimate

Revenue estimate

Valuation estimate

Cyber Threat Defense SRL leadership team

Management profile

Number of profiles

Profiles5 records

Cyber Threat Defense SRL funding detail

Funding detail

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

Cyber Threat Defense SRL M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyber Threat Defense SRL

What does Cyber Threat Defense SRL do?

Is Cyber Threat Defense SRL a public or private company?

Cyber Threat Defense SRL is a private company. It is classified as founder individual operated bootstrapped and is currently operating.

When was Cyber Threat Defense SRL founded?

Cyber Threat Defense SRL was founded in 2017. It employs 11 to 50 people.

Where is Cyber Threat Defense SRL based?

Cyber Threat Defense SRL is headquartered in London, United Kingdom, in the Europe region.

How does Cyber Threat Defense SRL make money?

One revenue line is on record: professional Cybersecurity Consulting Services.

Who are Cyber Threat Defense SRL's main competitors?

Direct peers on record are Secarma, Bishop Fox, NetSPI, Pentest People, Cyberis and NCC Group. Broad incumbents are WithSecure (formerly F-Secure), Orange Cyberdefense and Trustwave. Cobalt is listed as an emerging player.

Does Cyber Threat Defense SRL have an API?

No public API is recorded for Cyber Threat Defense SRL.

What industry is Cyber Threat Defense SRL in?

Cyber Threat Defense SRL's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAKADAE, Penetration Testing & Red Teaming, with a secondary code of BPAEADAD, Vulnerability Management & Penetration Testing Services. Its NAICS code is 541380 and its SIC code is 8734.