What Core to Cloud does

Core to Cloud is a UK-based managed cybersecurity services provider (MSSP) founded in 2016 by James Cunningham and Mark Liddle, headquartered at The Castle in Cirencester, Cotswolds, approximately 40 minutes from GCHQ's Cheltenham Cybersecurity Valley. The firm began as a cybersecurity technology reseller and around 2023 transitioned to an MSP model under the leadership of CEO James Cunningham, COO Mark Liddle, CTO Phil Howe, Finance Director Matt White, and Head of Cyber Security Laurence Bentley. It serves more than 150 organisations across the UK spanning NHS trusts, water utilities, manufacturing, banking/fintech, retail, higher education, and market research.

Core to Cloud delivers five integrated managed services: 24/7 Managed Detection and Response (MDR) from a UK-based Security Operations Centre; continuous Security Assurance (autonomous penetration testing); Dark Web Monitoring and threat intelligence; Cyber Crisis Simulation; and Third-Party Cyber Risk Management. The technology stack is vendor-agnostic, integrating across more than 25 named partners including Vectra AI (NDR, as the first UK Clarity Programme member), SentinelOne, Zscaler, Okta, AppOmni, Panorays, Illumio, iboss, Cylera, and Abnormal, and ingesting data from SIEM, EDR, cloud monitoring, Microsoft 365, Azure AD, and hybrid networks. AI capability is delivered through partner platforms — principally Vectra AI's NDR — combined with human analyst validation; the firm reports measurable SOC outcomes including a 62% reduction in Incident Containment Duration and 40%+ false positive reduction post-integration.

The business model is primarily subscription and managed-services recurring revenue via annual or multi-year contracts auto-renewing for successive 12-month periods, supplemented by third-party product resale (Vectra AI, SentinelOne, Zscaler, etc.) and bespoke crisis simulation engagements. Core to Cloud operates a sales-led, consultative GTM targeting CISOs, IT directors, and NHS security leads, combining direct sales, gated content (free dark web scans, free pen tests), thought leadership, and event-driven community engagement (including the Secure & Strong initiative with WITCH). The firm is ISO/IEC 27001:2022 certified and Cyber Essentials Plus certified, and remains privately held and founder-owned with no disclosed institutional capital.

Name

Core to Cloud

Legal name

Core To Cloud Ltd

Website

https://coretocloud.co.uk

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

Core to Cloud is a UK-based managed cybersecurity services provider serving 150+ organisations across NHS, manufacturing, banking, retail, and higher education with 24/7 MDR, continuous security assurance, dark web monitoring, crisis simulation, and third-party risk management from a Cirencester-based SOC.

Ownership category

akta.pro rank

Product category

Managed Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Computer Facilities Management Services (541513)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)

Keywords

• Managed detection response
• Security assurance services
• Dark web monitoring
• Cyber crisis simulation
• Third party risk management

Headquarters

HQ city

Faringdon

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Cybersecurity Services (MDR): Core to Cloud generates recurring revenue through managed cybersecurity services, primarily its 24/7 MDR offering. Services are delivered as fully managed solutions integrated with customers' environments, billed on a contractual basis (typically annual or multi-year contracts as per Terms of Business). Revenue is subscription-based recurring in nature, with contracts auto-renewing for successive 12-month periods unless terminated.
2. Security Assurance & Penetration Testing: Continuous security assurance and penetration testing services, offered in Standard (platform + guidance) and Enhanced (expert-led testing + hands-on fix planning) models. Revenue is generated through contracted engagements, likely billed on an annual or per-engagement basis.
3. Dark Web Monitoring: A fully managed dark web monitoring service delivering real-time threat intelligence. Revenue is bundled within managed service contracts or sold as standalone subscriptions.
4. Cyber Crisis Simulation: Crisis simulation and incident response testing delivered as a bespoke consultancy-style service, custom-built per organisation. Revenue generated through one-time or periodic engagement fees.
5. Third-Party Cyber Risk Management: Managed third-party risk monitoring service, offered in fully managed or guided assist models. Revenue is recurring through contracted service agreements.
6. Third-Party Product Resale: Core to Cloud resells third-party cybersecurity products (e.g., Vectra AI, Abnormal, AppOmni, Panorays, SentinelOne, Zscaler, etc.) as an authorised reseller. Revenue from product resale is generated through the markup on third-party products sold to customers, in addition to associated service delivery. This is governed by the Terms of Business EULA framework.

Pricing tiers

Go-to-market motion2 records

Distribution channels2 records

Marketing channels12 records

Core offering

Core to Cloud is a UK-based managed cybersecurity services provider (MSSP) operating a 24/7 Security Operations Centre from Cirencester. The company delivers a portfolio of five integrated services: Managed Detection & Response (MDR), Continuous Security Assurance (penetration testing), Dark Web Monitoring & Threat Intelligence, Cyber Crisis Simulation, and Third-Party Cyber Risk Management. Services are offered as fully managed or guided-assist engagements on annual or multi-year contracts, with AI-powered automation and partner technology integrated with customer environments.

Product overview

Core to Cloud is a UK-based managed cybersecurity services provider offering a portfolio of five integrated services: Managed Detection & Response (MDR) as the primary 24/7 SOC offering, Security Assurance Service for continuous penetration testing, Dark Web Monitoring for threat intelligence, Cyber Crisis Simulation for incident response training, and Third Party Cyber Risk Management for supply chain oversight. The services are designed to work independently or as a unified cybersecurity programme, with MDR enhanced through a strategic partnership with Vectra AI for AI-driven NDR capabilities.

Differentiator

Problem solved

Functional benefit

Brands

• Secure & Strong: Community-focused initiative by Core to Cloud dedicated to empowering women and supporting diversity in cybersecurity, including partnerships with WITCH.

Products and services

• Managed Detection & Response (MDR) A 24/7 managed security service delivered from a UK-based SOC that provides continuous threat monitoring, custom-built detections, proactive threat hunting, and rapid incident response. The service integrates with existing customer tools or deploys proven technology, tailored to customer workflows and risk profile.
• Security Assurance Service A continuous, autonomous penetration testing and vulnerability assessment service that simulates real-world cyberattacks to uncover exploitable attack paths. Moves beyond point-in-time tests to provide ongoing protection with real-time vulnerability insight, prioritised remediation guidance, and built-in fix verification.
• Dark Web Monitoring & Threat Intelligence A 24/7 managed service providing real-time monitoring of underground forums, criminal marketplaces, and encrypted chat channels to detect mentions of customer domains, IP addresses, emails, executives, and custom keywords. Delivers targeted threat alerts, stolen credentials detection, phishing monitoring, and actionable intelligence.
• Cyber Crisis Simulation An immersive, non-linear cyber crisis simulation service that puts organisations through realistic attack scenarios in a controlled environment. Involves cross-departmental teams in decision-based exercises, with expert facilitation, post-simulation debriefs, and comprehensive reports with recommendations.
• Third Party Cyber Risk Management A fully managed third-party risk monitoring service providing continuous visibility across supplier estates. Includes supplier onboarding, tailored questionnaires, ongoing monitoring, risk scoring, prioritised escalation, and executive reporting to maintain structured and repeatable third-party oversight.

Quantifiable outcome

• 62% reduction in Incident Containment Duration within first 60 days of Vectra AI integration
• +3 more outcomes

Named customers13 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability3 records

Feature6 records

Partnerships

14 partnerships are on record, tiered core, supporting and minor.

• HalcyoncoreStrategic or Co-development Partner · 20 January 2026Core to Cloud collaborated with Halcyon to develop a whitepaper titled 'From Defence to Resilience: A Strategic Framework for Ransomware Preparedness'. The framework provides organisations with a practical approach to building ransomware resilience, focusing on detection, incident response, recovery, and operational continuity. This is part of Core to Cloud's thought leadership and content co-creation strategy.
• ITSA Digital TrustsupportingOthers · 11 November 2025Core to Cloud partnered with ITSA Digital Trust — a Cheltenham-based charity focused on digital inclusion and sustainable technology. Core to Cloud donates decommissioned IT equipment to ITSA for secure refurbishment and redistribution to schools and communities in the UK and Africa. The partnership aligns with Core to Cloud's commitment to sustainability, responsible technology practices, and community engagement.
• Vectra AIcoreTechnology or Integration · 13 June 2025Core to Cloud deepened its strategic partnership with Vectra AI in June 2025, becoming the first UK partner to join the Vectra AI Clarity Programme for MSSPs. The partnership integrates Vectra AI's Network Detection and Response (NDR) technology into Core to Cloud's fully managed 24/7 SOC, delivering AI-powered threat detection across customer environments. Notable outcomes include 62% reduction in Incident Containment Duration, high-risk incident containment in under 35 minutes, and over 40% reduction in false positives.
• WITCH (Women in Tech & Cyber Hub)coreGTM or Marketing Partner · 13 June 2025Core to Cloud's community initiative 'Secure & Strong' partnered with WITCH — Women in Tech & Cyber Hub — to support WITCH's mission of fostering inclusive communities for women in cyber and tech, promoting diverse career pathways, and creating leadership visibility opportunities for women. The partnership includes joint events, mentorship, and collaborative content. Core to Cloud's Marketing Manager Emily Drakeley leads the partnership on the Core to Cloud side.
• Abnormal SecurityminorGTM or Marketing Partner · 13 June 2025Abnormal Security co-sponsored the Secure & Strong event hosted by Core to Cloud, alongside Immersive Labs and Panorays. The partnership represents joint marketing activity to build community in the UK cybersecurity market, particularly around women in cyber.
• Immersive LabsminorGTM or Marketing Partner · 13 June 2025Immersive Labs co-sponsored the Secure & Strong event hosted by Core to Cloud alongside Abnormal Security and Panorays. Immersive Labs provides cyber crisis simulation technology (used by Core to Cloud in its Royal Bolton NHS engagement) and the co-sponsorship strengthens the GTM relationship.
• PanorayssupportingTechnology or Integration · 13 June 2025Panorays co-sponsored the Secure & Strong event and is also a technology partner providing third-party risk management capabilities. Core to Cloud uses Panorays to deliver its managed third-party risk monitoring service.
• Searchlight CybercoreStrategic or Co-development Partner · 14 March 2025Core to Cloud and Searchlight Cyber produced a joint ransomware research report (Ransomware Report 2025), providing defenders with profiles of the five most prolific ransomware groups, insight into 'supergroups' such as Scattered LAPSUS$ Hunters, and practical pre-emption and containment strategies. The partnership also developed a Ransomware File Explorer tool to help identify compromised files earlier. The research found 7,458 ransomware victims globally in 2025 — a 30% increase on 2024.
• AppOmnisupportingTechnology or Integration · 12 February 2024Core to Cloud partnered with AppOmni to provide comprehensive SaaS security, giving organisations centralised visibility and in-depth control across SaaS applications as part of its managed security portfolio.
• SenseOnsupportingTechnology or Integration · 1 February 2024Core to Cloud entered a strategic arrangement with SenseOn to enable comprehensive NDR and SIEM security, allowing organisations to monitor identity, endpoint, network, and cloud from a single platform.
• IllumiosupportingTechnology or Integration · 1 June 2023Core to Cloud partnered with Illumio to help organisations stop breaches from spreading in the event of a cyber-attack, providing micro-segmentation capabilities as part of its managed security offering.
• ibosssupportingTechnology or Integration · 1 June 2022Core to Cloud partnered with iboss to bring Zero Trust Edge — a patented, purpose-built cloud security platform — to the UK remote workforce, enabling secure access to applications and data.
• CylerasupportingTechnology or IntegrationCore to Cloud partnered with Cylera to deliver a cyber alert dashboard for NHS trusts, providing a unified, user-friendly interface for IT and security teams to monitor and respond to alerts across NHS environments.
• 150+ Technology Partner Ecosystem (Abnormal, AppOmni, Barracuda, Cato, TrustLayer, Cylera, BeyondTrust, Duo Security, Delinea, iboss, Illumio, Immersive Labs, KnowBe4, Lacework, ManageEngine, Qualys, SentinelOne, Zscaler, Vectra, Panorays, Searchlight Cyber, Extreme Networks, Halcyon, Okta, Orca Security, Gytpol, Harmonic Security)supportingTechnology or IntegrationCore to Cloud's website showcases over 30 named technology partners spanning NDR/SIEM (Vectra, SenseOn), SaaS security (AppOmni), endpoint protection (SentinelOne), cloud security (Zscaler, Orca, Cato), identity (Okta, Duo, Delinea, BeyondTrust), email security (Abnormal), security training (KnowBe4, Immersive Labs), third-party risk (Panorays, TrustLayer), and others. This vendor-agnostic ecosystem enables Core to Cloud to recommend and integrate best-in-class technology per customer requirements rather than being tied to a single vendor.

Scale indicators5 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• NCC Group: UK-listed cybersecurity and resilience firm providing managed detection and response, penetration testing, threat intelligence, and consulting across global markets. Larger and broader than Core to Cloud, but overlapping in MDR and security assurance offerings for UK enterprises.
• Sophos Managed Threat Response: Global cybersecurity vendor offering fully managed 24/7 MDR (Sophos MTR) integrated with its own endpoint and network products. Broader portfolio and scale than Core to Cloud, but directly competes for UK mid-market MDR buyers.
• Trustwave: Global MSSP offering managed detection and response, security operations, penetration testing, and threat intelligence with a UK presence. Comparable service portfolio to Core to Cloud, but materially larger scale and broader geographic coverage.
• BAE Systems Digital Intelligence: UK-headquartered cybersecurity division of BAE Systems delivering managed security services, threat intelligence, and cyber defence to UK government, defence, and critical infrastructure customers. Comparable on UK regulated-buyer focus and MDR delivery; significantly larger and more capitalised.
• ReliaQuest: Large US-headquartered MDR provider delivering 24/7 SOC-as-a-service, GreyMatter platform, and managed detection across enterprise environments. Comparable on 24/7 MDR delivery and recurring managed service model; broader geographic reach and capital base.

Direct peers

• e2e-assure: UK-based pure-play MSSP offering managed SOC, threat detection, and incident response to UK mid-market and enterprise. Comparable as a UK-only, mid-market-focused MDR competitor with overlapping target buyers (UK CISOs, regulated industries).
• WithSecure: European-headquartered cybersecurity vendor and MSSP partner with managed detection and response (Countercept MDR), continuous pen testing, and incident response services. Comparable on MDR and security assurance services; serves UK and European regulated buyers.
• Pentest People: UK-based penetration testing and security assurance provider offering continuous testing, CREST-accredited pen tests, and managed security services. Directly comparable for Core to Cloud's Security Assurance Service line and UK CISO buyer base.
• Cybereason: Global MDR and EDR provider offering managed detection, response, and dark web monitoring via its own platform. Comparable on managed cybersecurity services, threat intelligence, and endpoint-led detection — competing for similar mid-market and enterprise buyers.
• Bridewell Consulting: UK-headquartered MSSP and cybersecurity consultancy delivering 24/7 SOC, MDR, penetration testing, and cyber advisory to UK regulated sectors (aviation, critical infrastructure, financial services). Directly comparable to Core to Cloud across MDR, security assurance, and UK CISO-targeted delivery.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/channel/UCUBhHpilaT1G-31JOl1sHCg
• LinkedInlinkedin.com/company/core-to-cloud-ltd
• TikToktiktok.com/@core_to_cloud
• Xx.com/coretocloud

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Core to Cloud