i-confidential

What i-confidential does

i-confidential is an Edinburgh-headquartered cyber security and technology risk consultancy that delivers expert-led advisory services to regulated enterprises, principally in UK financial services. The firm operates an Assess-Strengthen-Execute-Optimise delivery model and offers four core practices: Security Consultancy (maturity assessments, risk and control framework design, board-level metrics, regulatory compliance support under PRA/FCA), Talent Acquisition and Resourcing (specialist placement of cyber professionals on contract, permanent, and outcome-based engagements), Metrics and Continuous Controls Monitoring (the proprietary Metrics Capability Model, delivered jointly with partner Quod Orbis for near real-time CCM), and Third-Party Risk Management.

The firm's competitive positioning rests on codified proprietary frameworks — Metrics Capability Model, Third-Party Capability Assessment Framework, Cyber Assessment Framework, and Control Framework Development mapped to NIST, ISO, SoGP, SANS, CCA, and COBIT — developed through repeated engagement with large financial services organisations. It is structured as an employee-owned Scottish private limited company (SC384647) with 51–100 employees, (ISC)2-certified practitioners, and a leadership team that publicly emphasises tenure and practitioner depth. The company is positioned as a specialist alternative to Big 4 consultancies, with a documented 50% cost advantage in at least one engagement and primary case-study customer logos spanning HSBC, Lloyds Banking Group, and multiple unnamed global banks, insurers, and pensions providers.

Commercially, i-confidential runs a pure professional-services revenue model with two streams — cyber security consulting and talent resourcing — priced via project-based, quote-driven engagements sold through direct enterprise field sales. Geographies served include the United Kingdom, the United Arab Emirates, and Ireland. Distribution is relationship-driven, supplemented by thought-leadership content (website, blog, LinkedIn), flagship networking events (Cyber Connect London), and industry-conference participation (e.g., International Cyber Risk Symposium 2025). Sustainability credentials (Ecovadis Platinum 2024, Science Based Targets, CDP, Lloyds Emerald Standard 2025) and the 2024 Sunday Times Best Places to Work recognition are actively marketed to clients and recruits.

Name

i-confidential

Legal name

i-confidential Limited

Website

https://i-confidential.com

Company type

Private

Founded year

2008

Operating status

Operating

Headcount range

51–100 employees

Short description

i-confidential is an Edinburgh-based, employee-owned cyber security and technology risk consultancy serving UK financial services and other regulated enterprises with assessments, control frameworks, board metrics, and third-party risk support, plus in-house cyber talent resourcing.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting

NAICS

Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM)

akta.pro secondary industry

Cyber Defense & Information Security (National Security) (BPAIAHAE)

Keywords

• Cyber security consulting
• Risk management services
• Third-party risk management
• Control framework development
• Cyber talent resourcing

Headquarters

HQ city

Edinburgh

HQ country

United Kingdom

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Cyber Security Consulting Services: Professional consulting services delivered through assess, strengthen, execute, and optimise methodology. Services include security assessments, risk and control framework development, board metrics design, and regulatory compliance advisory.
2. Talent Acquisition & Resourcing: Specialist recruitment services for cyber security and technology risk professionals, providing contract, permanent, and outcome-based solutions. Services include short-term specialists and long-term support for security teams.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

i-confidential provides expert-led cyber security and information risk consultancy services for large enterprise clients in regulated industries, delivered through an Assess, Strengthen, Execute, and Optimise methodology. Offerings span security assessments, risk and control framework design, board metrics, third-party risk management, and specialist cyber security talent acquisition and resourcing, with deep focus on the UK financial services sector.

Product overview

i-confidential is a cyber security and technology risk consultancy offering expert-led services through four core practice areas: Security Consultancy (assessments, risk management, control frameworks, strategic advisory), Talent Acquisition & Resourcing (specialist cyber security recruitment), Metrics and Continuous Controls Monitoring (Metrics Capability Model advisory combined with Quod Orbis CCM platform partnership), and Third-Party Risk Management. The company operates an Assess, Strengthen, Execute, Optimise delivery framework and primarily serves regulated sectors including financial services, banking, and insurance. i-confidential is employee-owned and based in Edinburgh, Scotland.

Differentiator

Problem solved

Functional benefit

Products and services

• Security Consultancy Services Expert-led cyber security consultancy for large enterprise clients in regulated industries, covering security assessments, risk and control framework design, board metrics, and strategic advisory to help organisations reduce risk and build resilience.
• Talent Acquisition & Resourcing Specialist recruitment service placing cyber security and technology risk professionals in contract, permanent, and outcome-based roles, leveraging a trusted practitioner network built over years of consulting delivery.
• Metrics and Continuous Controls Monitoring (CCM) Advisory Advisory service pairing the firm's Metrics Capability Model for defining meaningful cyber security metrics with implementation support for Continuous Controls Monitoring platforms, enabling organisations to move from periodic assurance to near real-time, evidence-based control visibility.
• Third-Party Risk Management Structured third-party and supply chain cyber risk assessment and remediation programme design, using a proprietary capability framework covering governance, policy and standards, and operating model; engagements include large-scale reviews of third-party connections and remediation governance.

Quantifiable outcome

• 50% cost reduction compared to 'big 4' consultancy for comparable security transformation services
• +4 more outcomes

Named customers10 records

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

One partnership is on record.

• Quod OrbiscoreTechnology or Integrationi-confidential and Quod Orbis have partnered to combine advisory expertise with enabling technology. i-confidential brings the Metrics Capability Model for defining cyber security metrics, while Quod Orbis provides the Continuous Controls Monitoring platform for automating, monitoring, and evidencing metrics in near real-time. This partnership enables organisations to move from periodic assurance to continuous, data-driven visibility.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SureCloud: UK-based cybersecurity and risk advisory firm combining consulting services with GRC software, comparable in client base (regulated industries) and the consultancy-plus-tooling model i-confidential pursues with Quod Orbis.
• NCC Group: UK-listed cybersecurity services firm offering cyber advisory, managed detection, and risk consulting across financial services and other regulated sectors — a larger but adjacent UK cyber consultancy peer with overlapping FS clients.
• Bridewell Consulting: UK-headquartered cybersecurity consultancy providing advisory, managed security, and penetration testing to financial services, aviation, and critical infrastructure — a closely matched direct peer in size, geography, and FS vertical focus.
• Cyberis: Boutique UK cybersecurity consultancy specialising in penetration testing, security strategy, and managed services for enterprise and financial sector clients — comparable niche cyber advisory peer.
• Falanx Cyber Defence: UK-listed cybersecurity services provider offering advisory, managed SOC, and cyber resilience services to mid-market and enterprise clients in regulated industries.

Broad incumbents

• BAE Systems Applied Intelligence: UK-headquartered cyber and intelligence division of a major defence contractor providing cyber advisory, financial crime, and managed security to UK banks and government — broader incumbent in regulated-sector cyber services.
• Accenture Security UK: Global SI's UK cyber practice bundling cyber advisory and managed services into broader FS transformation programmes — a scale competitor competing for the largest, multi-region cyber deals.
• PwC UK Cyber and Privacy: Big 4 advisory practice offering cyber risk, resilience, and regulatory advisory across UK financial services — a key incumbent whose pricing i-confidential directly challenges on the 50% cost differential.
• Protiviti: Global risk consulting and internal audit firm with a sizeable technology risk and cybersecurity practice serving large banks and insurers — broader incumbent with overlapping FS cyber advisory offerings.
• KPMG UK Cyber Security Services: Big 4 firm's UK cyber practice delivering regulatory-driven cyber advisory, assessments, and transformation to the same HSBC, Lloyds, and UK FS clients that i-confidential serves — primary competitor on large mandates.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/i-confidential

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about i-confidential