Evolution Security

What Evolution Security does

Evolution Security (operating as Evolution Global Security Company) is a privately-held UK-based managed IT security services provider founded in 1990, headquartered in London with regional offices in Hong Kong and the Channel Islands. The company's core offering is the eSecure 360° platform, a unified managed security service that integrates eight modules — eSecure Systems Protect (host intrusion protection), eSecure Mail (email security), eSecure Web (web/IM security), eSecure Audit (vulnerability scanning and penetration testing), eSecure Monitor (network monitoring), eSecure Response (incident response), eSecure Passport (multi-factor authentication), and eSecure Checklist (compliance auditing) — accessible to clients through the proprietary Unified Digital Defence (UDD) portal.

Services are delivered 24/7/365 from global Network Operations Centres with multi-layer redundancy, five-nines uptime claims, and tier-1 carrier connections. The platform combines multi-vendor best-of-breed components (e.g., three leading antivirus engines, nine anti-spam systems) with proprietary integration layers. The company also offers DCAT (Data Compliance Audit Tracker), a cloud-based subscription product for GDPR and regulatory compliance management priced per employee, alongside standalone professional services for risk assessment, vulnerability scanning, penetration testing, security awareness training, PCI DSS QSA assessments, and TVRA aligned with Monetary Authority of Singapore guidelines.

Revenue is generated through three streams: recurring managed security service subscriptions under eSecure 360°, DCAT per-employee subscription, and professional services for PCI QSA engagements. Go-to-market is primarily enterprise field sales with consultative 'Free Consultation' CTAs, supplemented by top-tier vendor partnerships and a self-service portal for DCAT. The customer base spans financial services (banks, card processors, payment gateways, insurance), retail, legal, telecommunications, and eBusiness sectors, with a stated focus on international blue-chip clients across Europe and Asia.

Name

Evolution Security

Legal name

Evolution Security

Website

https://evolve-online.com

Company type

Private

Founded year

1990

Operating status

Operating

Headcount range

51–100 employees

Short description

Evolution Security is a privately-held UK-based managed IT security services provider, founded in 1990, delivering the eSecure 360° platform across email, web, network, and compliance security from global Network Operations Centres. It serves enterprise clients in financial services, retail, legal, telecom, and eBusiness sectors across Europe and Asia.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151), Custom Computer Programming Services (541511), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371), Services-Prepackaged Software (7372)

akta.pro primary industry

Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

akta.pro secondary industries

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG), Application Security Engineering (DevSecOps, AppSec Remediation) (BPAEAFAI), Insider Threat Program Design & Risk Assessments (BPAKADAM)

Keywords

• Managed security services
• Email security
• PCI compliance
• Vulnerability assessment
• Penetration testing

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Infrastructure, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Managed IT Security Services (eSecure 360°): Recurring managed security services covering email, web, network management, and regulatory compliance. Services are delivered 24/7 with continuous monitoring from Network Operations Centres. All solutions are tailor-made to integrate with existing client infrastructure.
2. DCAT Subscription: Cloud-based Data Compliance Audit Tracker priced on number of employees, ranging from single employee to enterprise size companies with no setup fee.
3. PCI QSA Services: Qualified Security Assessor services including Pre-assessment, Consultation and Remediation, Audit, and on-going Compliance Management for PCI DSS requirements.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels4 records

Core offering

Evolution Security delivers managed IT security services through its eSecure 360° platform, which combines eight eSecure modules (Systems Protect, Mail, Web, Audit, Monitor, Response, Passport, Checklist) into a unified managed service managed 24/7/365 from global Network Operations Centres. The company also provides the cloud-based DCAT Data Compliance Audit Tracker, plus standalone security services including Risk Assessment, Vulnerability Scanning, Penetration Testing, Security Awareness Training, and PCI QSA / TVRA regulatory compliance services.

Product overview

Evolution Security operates as a managed IT security services provider built around the eSecure 360° platform, which functions as a unified gateway for all IT security requirements. The platform combines eight integrated modules: eSecure Systems Protect (host intrusion protection), eSecure Mail (email security), eSecure Web (web/IM security), eSecure Audit (vulnerability scanning and penetration testing in three tiers), eSecure Monitor (network monitoring), eSecure Response (incident response), eSecure Passport (multi-factor authentication), and eSecure Checklist (compliance auditing). Additionally, the company offers DCAT (Data Compliance Audit Tracker) as a cloud-based GDPR compliance tool, along with standalone security services including Risk Assessment, Vulnerability Scans, Penetration Testing, Security Awareness Training, PCI DSS QSA services, and TVRA. All services are delivered 24/7 from global Network Operations Centres and clients access oversight capabilities through the Unified Digital Defence (UDD) portal. The company also provides regulatory compliance consulting for PCI DSS, ISO 27001/27002, Privacy Impact Assessment, and other standards.

Differentiator

Problem solved

Functional benefit

Brands

• eSecure: Managed IT Security Services brand covering email security (eSecure Mail), web security (eSecure Web), network monitoring (eSecure Monitor), incident response (eSecure Response), authentication (eSecure Passport), compliance auditing (eSecure Checklist), and system protection (eSecure Systems Protect)
• DCAT (Data Compliance Audit Tracker)
• Unified Digital Defence (UDD) Portal

Products and services

• eSecure 360° Managed Security Services Unified managed IT security services umbrella encompassing eight eSecure modules (Systems Protect, Mail, Web, Audit, Monitor, Response, Passport, Checklist) providing total depth in prevention, defence and response capabilities, delivered 24/7/365 and accessed via the Unified Digital Defence (UDD) portal. Targeted at enterprise clients needing comprehensive managed security.
• eSecure Systems Protect Proactive, behaviour-based host intrusion protection providing exploit prevention, system controls, monitoring, notification and auditing to ensure host integrity and compliance across heterogeneous platforms including Solaris, Windows, Windows NT, Linux, AIX, and HP-UX.
• eSecure Mail 360° managed email security service providing anti-spam (nine anti-spam systems), anti-virus (three leading AV engines), phishing prevention, email encryption via OpenPGP and S/MIME, content filtering, and regulatory compliance archiving.
• eSecure Web Fully managed service providing best-of-breed security against web browser and Instant Messaging-based threats, scanning all traffic for viruses, spyware and illicit content at the internet level before routing to destination.
• eSecure Audit IT security auditing service with three tiers: automated vulnerability assessment scanning, blind penetration testing by engineers, and coordinated mock attacks using bespoke tools. Includes comprehensive vulnerability reports and executive summaries.
• eSecure Monitor Centralized network management and monitoring service compatible with any TCP/IP-enabled device or service, providing real-time alerting via email/SMS/phone/fax, escalation management, and in-depth reporting on network and applications.
• eSecure Response Managed support and incident response service providing expert engineers available 24/7/365 from Global Network Operations Centre and regional NOCs, managing installation, configuration, and perimeter monitoring of security infrastructure.
• eSecure Passport Two-by-two authentication solution combining multiple authentication methods including two-factor authentication, one-time passwords via SMS, biometric authentication, and separate authentication zones for different resources (network, email, web applications).
• eSecure Checklist Regulatory and corporate governance compliance solution for standards including PCI DSS, BS7799, ISO17799, ISO27001, and Sarbanes-Oxley, providing automated scanning, gap analysis, and remediation services.
• DCAT (Data Compliance Audit Tracker) Cloud-based data compliance audit tracker designed by compliance auditors to manage DSAR requests, ICO breach notifications, asset risk categories, and resource allocation, with customisable dashboard and subscription-based per-employee pricing.
• Risk Assessment Security risk assessment service providing methodology covering discovery, control assessment, threat assessment, risk formulation, asset classification, vulnerability discovery, and impact and likelihood assessment to guide decision-making aligned with organisational risk posture.
• Vulnerability Scans Network and application vulnerability scanning service performing internal and external audits on premise, hosting centre and cloud environments, with active continuous scanning, remediation guidance, risk and compliance reporting.
• Penetration Testing Ethical hacking/penetration testing evaluating applications and networks against attack using the same tools and techniques as cybercriminals, targeting networks, applications and mobile solutions with manual exploitation by human engineers.
• Security Awareness Training Staff security training based on industry best practices covering information protection, social networking, virus protection, password security, web browser security, email security, and mobile security.
• PCI DSS Services Full range of PCI QSA (Qualified Security Assessor) services including pre-assessment, consultation, remediation, audit, and ongoing compliance management for merchants and service providers in the payment chain.
• TVRA (Threat and Vulnerability Risk Assessment) Threat and Vulnerability Risk Assessment service for financial institutions, aligned with Monetary Authority of Singapore (MAS) Technology Risk Management Guidelines, covering data centres in Singapore and overseas.

Quantifiable outcome

• eSecure services process more than 150,000 transactions an hour in some of the world's most secure environments
• +2 more outcomes

Named customers7 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

One partnership is on record.

• Leading Security Vendors (Unnamed)coreTechnology or IntegrationEvolution Security maintains top tier partnerships with leading vendors in all major fields of digital security. These long-term relationships allow close integration of products, frequently combining solutions from multiple vendors. Examples include eSecure Mail which always utilises a minimum of three Anti Virus scanning engines from the top 3 AV companies globally.

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Secureworks: Pure-play MSSP offering managed detection and response, vulnerability management, and 24/7 SOC services to mid-market and enterprise customers globally. Closely comparable in service scope (managed security, email/web/network protection, compliance support) and enterprise GTM motion.
• Trustwave: MSSP and PCI QSA-accredited firm delivering managed security, threat detection, database security, and compliance services (including PCI DSS QSA assessments). Comparable across both managed services breadth and PCI compliance practice.
• Alert Logic: Managed detection and response provider delivering 24/7 security monitoring, vulnerability scanning, and compliance support via cloud-based platform. Comparable as a managed security services specialist targeting enterprise and mid-market customers.
• eSentire: MDR-focused MSSP providing 24/7 threat monitoring, managed detection and response, and vulnerability management for mid-market and enterprise customers. Closely comparable in service model and customer segment.
• WithSecure (formerly F-Secure): European cyber security vendor offering managed detection, vulnerability management, and consulting services to enterprise customers. Comparable in scale and in the combination of managed services with a compliance/consulting overlay.

Broad incumbents

• NCC Group: UK-headquartered cyber security and assurance firm offering managed security, penetration testing, compliance, and incident response services globally. Larger incumbent with overlapping capabilities but broader portfolio including escrow and software resilience.
• Orange Cyberdefense: European-headquartered MSSP (subsidiary of Orange) operating global SOCs delivering managed detection, threat intelligence, and compliance services. Larger incumbent with multi-region footprint overlapping with Evolution Security's EMEA operations.
• Optiv Security: Large security solutions integrator and MSSP delivering managed security, consulting, and vendor-partner-led services across North America. Overlaps with Evolution Security's multi-vendor integration model but at significantly larger scale.

Emerging players

• Senseon: UK-based MDR provider offering AI-driven threat detection and managed security services to mid-market and enterprise customers. Comparable emerging player in the UK MSSP space.

Regional players

• Becrypt: UK-based cyber security specialist delivering endpoint protection, managed security, and compliance services primarily to UK government and enterprise customers. Comparable regional MSSP with overlapping UK enterprise customer base.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Evolution Security