Goaco

What Goaco does

Goaco is a UK-headquartered digital and cyber security consultancy founded in 2010 (originally as Level 5, rebranded in 2023). The firm delivers digital delivery, cyber security, software development, data and AI, cloud, managed services, and user-centred design to UK central and local government departments, public sector bodies, and enterprise clients. It operates from offices in Dartford (Kent), Sheffield, and Dunoon (Scotland), with a Middle East regional headquarters in Dubai established in 2023 and relocated to larger premises in Sheikh Rashid Tower in January 2024. Customer concentration is anchored in UK government, with named engagements at the Cabinet Office, Ministry of Justice, National Library of Wales, and Scottish Courts and Tribunals Service, alongside enterprise work in Saudi Arabia (Lucidya).

The company's proprietary technology assets include Goidentity, a digital identity verification platform developed in partnership with Thales, and DFIR, a Digital Forensics and Incident Response managed service. Its technical stack spans the full digital delivery lifecycle, supported by a 24x7 ITIL4-aligned live services model, and includes an AI-driven human-in-the-loop document triage capability demonstrated in the Ministry of Justice engagement. Goaco maintains ISO27001, ISO9001, ISO14001, and ISO20000 certifications, is a Cyber Essentials Plus Certification Body, and is approved on G-Cloud 14, Technology Services 4, JOSCAR, the UK Police Industry Charter, and Constellia frameworks. Its ranking at #23 in the Tech200 2026 list and its inclusion in the Sunday Times Best Places to Work 2025 reflect meaningful scale and brand credibility within the UK technology sector.

Goaco operates a project-based professional services business model, generating revenue from consulting engagements, software development, cyber security assessments, and recurring managed service contracts, typically structured as multi-year agreements. Go-to-market combines direct enterprise and government field sales, government framework channels (Crown Commercial Service), strategic technology partnerships (notably Microsoft and Thales), export partnerships with the Department for Business & Trade, and event-led market activation at GITEX Global, GISEC, DigiGov Expo, and UK Parliament roundtables. Pricing is quote-based with no public disclosure. The company is privately held by its founder-director Gaurav Malhotra, with no disclosed institutional funding, parent entity, or M&A activity.

Name

Goaco

Legal name

Goaco Group Ltd

Website

https://goaco.com

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

51–100 employees

Short description

Goaco is a UK-headquartered digital and cyber security consultancy founded in 2010 serving UK government departments, public sector bodies, and enterprise clients across the UK and Middle East with digital transformation, cyber security, cloud, software, data and AI, and managed IT services.

Ownership category

akta.pro rank

Product category

IT Consulting and Digital Transformation Services

NAICS

Other Computer Related Services (541519), Computer Systems Design and Related Services (54151), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

Keywords

• Digital transformation consulting
• Cyber security services
• Managed IT services
• Cloud consulting
• Government technology services

Headquarters

HQ city

Gravesend

HQ country

United Kingdom

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Professional Services - Digital Consultancy: Consulting services spanning digital transformation, cyber security strategy, software development, and managed services. Revenue generated through project-based engagements with government and private sector clients, supplemented by ongoing managed service contracts.
2. Managed Services: 24x7 ITIL-aligned IT support and managed security services ensuring peak IT performance for clients. Recurring revenue from managed service contracts.
3. Software Development: Custom software development services from idea, concept, design and build to launch and live service delivery.
4. Cyber Security Services: Cyber security consulting, penetration testing, SOC 2 readiness assessments, Cyber Essentials certification body services, and managed detection and response.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels5 records

Core offering

Goaco is a digital and cyber security consultancy delivering organisation strategy, security, and scalable IT and digital solutions to the public and private sector. Its core services span Digital Delivery, Cyber Security Services, Software Development, Data and AI Services, Cloud Services, 24x7 Managed Services, and User-Centred Design. Two proprietary product offerings — Goidentity (digital identity verification platform developed with Thales) and DFIR (Digital Forensics and Incident Response) — are sold alongside these services.

Product overview

Goaco is a digital and cyber security consultancy offering a portfolio of products and services across the public and private sector. Their core products include Goidentity (a digital identity verification platform partnered with Thales) and DFIR (Digital Forensics and Incident Response). The company delivers 5 core services: Digital Delivery, Cyber Security Services, Software Development, Data and AI Services, and Cloud Services, supplemented by Managed Services and User-Centred Design. The company operates across UK and Middle East markets serving government departments and enterprise clients.

Differentiator

Problem solved

Functional benefit

Brands

• Goidentity: Digital identity verification platform, launched in partnership with Thales, offering digital identity verification solutions.
• GoAcademy
• DFIR

Products and services

• Goidentity Digital identity verification platform developed in partnership with Thales, enabling secure digital identity verification for government and enterprise clients.
• DFIR (Digital Forensics and Incident Response) Digital forensics and incident response service that helps organisations investigate security breaches, recover data, and respond to cyber incidents.
• Digital Delivery Service supporting the digital delivery lifecycle across portfolios using industry-standard methods from Waterfall to Agile.
• Cyber Security Services Comprehensive cyber security services covering strategy through managed security services, protecting organisations from digital threats; includes Cyber Essentials assessment, penetration testing, SOC 2 readiness, and Managed Detection and Response.
• Software Development Custom software development services spanning idea, concept, design and build through launch and live service delivery.
• Data and AI Services Data Engineering, Data Analytics and Artificial Intelligence services that transform services and improve decision-making.
• Cloud Services Cloud computing services with dedicated practitioners to accelerate business growth.
• Managed Services 24/7 ITIL-aligned IT support using industry-standard tools for reliability and user satisfaction, with integrated cyber security Managed Detection and Response.
• User-Centred Design Designing digital services that prioritise real user needs, accessibility (WCAG 2.2 Level AA), and seamless, intuitive user experiences.

Quantifiable outcome

• Open competitive tendering increasing from 27% to 41% under new UK Procurement Act (2025-2026)
• +1 more outcomes

Named customers7 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature5 records

Partnerships

Six partnerships are on record, tiered core.

• ThalescoreTechnology or Integration · 1 January 2025Goaco launched Goidentity, a digital identity platform, in partnership with Thales. The platform provides digital identity verification capabilities for government and enterprise clients, combining Goaco's implementation expertise with Thales's identity technology.
• MicrosoftcoreTechnology or IntegrationStrategic partnership with Microsoft enabling delivery of services across various UK Government organisations. The partnership confirms Goaco's role as a reliable provider of innovative solutions helping advance technology at scale.
• UK Government - Department for Business & TradecoreStrategic or Co-development PartnerPartnership with Department for Business & Trade for export of digital transformation and cyber security services abroad. Goaco collaborated as part of the Great.gov.uk export campaign, supporting UK digital exports to Middle East markets.
• Crown Commercial ServicecoreChannel Partner/ Reseller/ DistributorApproved supplier on multiple Crown Commercial Service frameworks including G-Cloud 14, Technology Services 4 (TS4), Digital Transformation Solutions and Enterprise Services Framework, and Cloud Compute 2 (RM6292).
• British Chamber of Commerce DubaicoreGTM or Marketing PartnerPartnership with British Chamber of Commerce Dubai to help businesses expand to the UAE market, leveraging the chamber's network and market expertise.
• Department for Business and TradecoreGTM or Marketing PartnerEngaged with the Department for Business & Trade to explore opportunities for exporting digital transformation and cyber security services abroad, particularly to the UAE and Middle East region.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• BJSS: UK IT and digital consultancy delivering software development, cloud, data, and cyber services to government and enterprise. Comparable in size, multi-office UK footprint, and broad digital transformation service mix.
• Made Tech: UK-headquartered digital and data consultancy focused on the UK public sector, delivering digital transformation, cloud, and data services to central government departments. Highly comparable in customer base, G-Cloud framework exposure, and service portfolio.
• FDM Group: UK-listed technology consultancy recruiting and deploying consultants across digital, cloud, and cyber work for government and enterprise. Comparable as a UK-headquartered services firm competing on similar framework lots.
• Netcompany UK: Nordic-headquartered digital transformation consultancy with a significant UK public sector practice. Comparable in serving UK government on large digital programmes and Crown Commercial frameworks.

Broad incumbents

• BAE Systems Digital Intelligence: UK-based cyber security and digital intelligence arm of BAE Systems serving government and defence. Comparable on cyber security services, DFIR-adjacent work, and UK public-sector security accreditations, but with substantially greater scale.
• CGI Federal/UK: Global IT and business consulting services firm with strong UK public sector presence across digital transformation, cyber, and managed services. Comparable in framework access and managed-service delivery, but far larger and more diversified.
• Capita: UK-headquartered outsourcing and digital services group with deep central government exposure. Directly competes for the same Crown Commercial framework work, but operates a far broader portfolio beyond Goaco's focus.
• Sopra Steria UK: Major European IT services group with a substantial UK public sector practice spanning digital, cloud, and cyber. Overlaps with Goaco on Crown Commercial frameworks but operates at much larger scale across a broader portfolio.
• KBR UK Government Solutions: Global government services and IT integrator with a UK practice delivering digital transformation and cyber work to central government. Comparable in customer segment and framework participation, but with significantly broader programme capabilities.
• Accenture UK: Global professional services firm with a large UK public sector digital, cloud, and cyber practice. Competes for the same G-Cloud, TS4, and Cabinet Office-style digital transformation engagements.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/goacodigital

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Goaco