2T Security
2T Security is an NCSC-accredited UK cyber security consultancy serving defence, CNI, central government, and telecoms with risk management, security architecture, and Advanced SOC services, plus a RiskTree SaaS risk-analysis platform.
- Company typePrivate
- Founded2013
- HeadquartersLeicester, United Kingdom
- Headcount11–50
- GTM typeB2B
- OfferingServices
What 2T Security does
2T Security is a UK-based cyber security consultancy founded in 2013 and headquartered in Leicester, operating as an NCSC Assured Cyber Security Consultancy serving defence, critical national infrastructure, central government, and telecoms. Its service portfolio spans three practice areas: Risk Management (Cyber Risk Reviews, CAF assessments, Cyber Risk Analysis), Security Architecture (Cross-Domain Architecture, SECRET-class Mobile Data Security aligned with NCSC's Advanced Mobile Solutions pattern, Security Architecture Design & Review, Virtual CISO Services), and Security Monitoring via an Advanced Security Operations Centre handling OFFICIAL-SENSITIVE and SECRET-classified data. The firm co-designed the AMS architecture with NCSC and holds accreditations that position it for classified government work.
The firm's commercial model combines consulting-led professional services, sold primarily through direct enterprise engagement and public sector framework agreements (CCS, DPS), with a subscription software product called RiskTree. RiskTree applies attack-tree methodology to quantify cyber risk, enabling organisations to map threats, visualise risk levels, and prioritise countermeasures; it is sold as a monthly subscription from £300 globally via a self-service channel. Notable engagements include security architecture for the UK Department for Work and Pensions' Universal Credit platform supporting 100,000+ endpoints, CAF-based cyber risk reviews for DCMS ahead of high-profile national events, and risk management for NHS Test & Trace and the Resilience Direct emergency-services platform.
2T Security has been bootstrapped since founding with no disclosed institutional funding, M&A activity, or senior leadership changes, and operates exclusively in the UK across defence, CNI, central government, and telecoms. Its strategic posture centres on deepening regulatory accreditation, expanding ecosystem partnerships with security vendors (Splunk, Tenable, Corelight, Endace), and extending its software product surface beyond the consulting labour base.
2T Security firmographics
Firmographics- Name
- 2T Security
- Legal name
- 2T Security Ltd
- Website
- https://2t-security.com
- Company type
- Private
- Founded year
- 2013
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- 2T Security is an NCSC-accredited UK cyber security consultancy serving defence, CNI, central government, and telecoms with risk management, security architecture, and Advanced SOC services, plus a RiskTree SaaS risk-analysis platform.
- Ownership category
- akta.pro rank
2T Security industry classification
Industry- Product category
- Cyber Security Consulting
- NAICS
- Investigation and Security Services (5616)
- akta.pro primary industry
- OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)
- akta.pro secondary industries
- Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Insider Threat Program Design & Risk Assessments (BPAKADAM), Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG)
Keywords
Where 2T Security is headquartered
LocationHeadquarters
- HQ city
- Leicester
- HQ country
- United Kingdom
- HQ region
- Europe
Offices1 record
Markets served
2T Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Cyber Security Consulting Services: Professional consulting services including risk assessments, security architecture design, virtual CISO services, and security monitoring. Services operate alone or in combination depending on customer challenges. Primarily B2B enterprise engagements with government and CNI organizations.
- RiskTree Software Subscription: SaaS subscription model for the RiskTree risk analysis platform. Provides unlimited nodes, files, and risk assessments per month. Sold as monthly subscription starting from £300 per month.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | RiskTree Subscription - £300 per month |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels5 records
2T Security product offering
Product offeringCore offering
2T Security is a UK cyber security consultancy providing risk management, security architecture, and security monitoring services to government, defence, CNI, and telecoms organisations. The company also develops and sells RiskTree, a subscription-based software platform that quantifies cyber risk using attack tree visualisation. Services include Cyber Risk Reviews, CAF-aligned assessments, Cross-Domain Architecture design, SECRET-level mobile security, Virtual CISO advisory, and Advanced SOC monitoring.
Product overview
2T Security is a cyber security consultancy and product company offering both professional services and a proprietary software product. The core product is RiskTree, a subscription-based risk analysis platform that quantifies cyber risk through attack tree visualisation. The company also offers three main service categories: Risk Management (Cyber Risk Reviews, Cyber Assessment Framework, Cyber Risk Analysis Services), Security Architecture (Cross Domain Architecture, SECRET Mobile Data Security Architecture, Security Architecture Design & Review, Virtual CISO Services), and Security Monitoring (Advanced SOC). RiskTree operates as the company's primary software product while professional services are delivered by expert consultants for government and critical national infrastructure organisations.
Differentiator
Problem solved
Functional benefit
Brands
- RiskTree: A risk analysis software platform that quantifies risk in minutes using attack tree visualization. Developed by 2T Security to help organisations manage complex and evolving threats. Pricing from £300 per month with unlimited nodes, risk assessments, and reporting capabilities.
Products and services
- RiskTree
Companies that use 2T Security
Customer profileNamed customers4 records
Segments4 records
Ideal customer profiles5 records
2T Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability1 record
Feature4 records
2T Security partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core and flagship.
- CorelightcoreTechnology partnership providing high-fidelity network visibility and ground truth data. Corelight's network detection capabilities complement 2T Security's monitoring and risk analysis services.
- EndacecoreTechnology partnership providing packet capture and network forensics capabilities. Endace platforms provide evidence-grade network data for security investigation.
- SplunkcoreTechnology partnership for security information and event management (SIEM). Splunk's analytics platform supports 2T Security's SOC operations and threat detection capabilities.
- TenablecoreTechnology partnership for vulnerability management and exposure analysis. Tenable's Nessus and platform solutions support risk-led prioritization in 2T Security's assessments.
- NCSC (National Cyber Security Centre)flagshipCo-authors of Advanced Mobile Solutions (AMS) architecture on behalf of NCSC. Trusted partner for government-grade security programmes. NCSC-assured services provider under the Assured Cyber Security Consultancy scheme.
Scale indicators5 records
Recent moves6 records
Expansion highlights5 records
2T Security competitors and assessment
Company assessmentDirect peers
- Bridewell: UK cyber consultancy specialising in CNI and critical infrastructure security, risk and managed detection, directly overlapping with 2T's CNI/government focus.
- Adarma: UK-focused cyber operations and SOC/managed detection provider serving large enterprises and regulated sectors, comparable to 2T's security monitoring and advisory work.
- Nettitude: UK-based cyber security consultancy delivering assessments, red teaming and SOC services to regulated and government clients, closely matching 2T's advisory and monitoring mix.
- Roke: UK technology and cyber firm serving defence, national security and CNI with high-assurance solutions, overlapping 2T's classified-environment and defence work.
- Actica Consulting: UK consultancy providing security architecture and cyber advisory to defence and central government, mirroring 2T's cleared, government-oriented consulting model.
Emerging players
- Everfox (formerly Forcepoint Federal): Specialist in cross-domain and high-assurance data movement for government, directly comparable to 2T's Cross-Domain Gateway and cross-domain architecture offerings.
Broad incumbents
- NCC Group: Large UK-headquartered cyber security consultancy and services provider whose assurance, risk and testing portfolio overlaps 2T but at far greater scale and breadth.
- QinetiQ: Defence and security technology group serving UK government and MOD, competing for high-assurance cyber and mission-critical programmes 2T also targets.
- BAE Systems Digital Intelligence: Large defence-grade cyber and intelligence integrator serving government and CNI, a prime competitor on the classified programmes 2T supports.
Regional players
- Templar Executives: UK cyber security advisory firm focused on governance, risk and boardroom-level assurance for government and CNI, overlapping 2T's risk management and vCISO services.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights6 records
Customer concentration
2T Security social profiles
Digital presence2T Security compliance and trust
Trust signalCompliance1 record
2T Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
2T Security leadership team
Management profileNumber of profiles
Profiles1 record
2T Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
2T Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about 2T Security
What does 2T Security do?
2T Security is a UK cyber security consultancy providing risk management, security architecture, and security monitoring services to government, defence, CNI, and telecoms organisations. The company also develops and sells RiskTree, a subscription-based software platform that quantifies cyber risk using attack tree visualisation. Services include Cyber Risk Reviews, CAF-aligned assessments, Cross-Domain Architecture design, SECRET-level mobile security, Virtual CISO advisory, and Advanced SOC monitoring.
Is 2T Security a public or private company?
2T Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was 2T Security founded?
2T Security was founded in 2013. It employs 11 to 50 people.
Where is 2T Security based?
2T Security is headquartered in Leicester, United Kingdom, in the Europe region.
How does 2T Security make money?
Two revenue lines are on record. Cyber Security Consulting Services are the primary driver. The others are riskTree Software Subscription.
Who are 2T Security's main competitors?
Direct peers on record are Bridewell, Adarma, Nettitude, Roke and Actica Consulting. Everfox (formerly Forcepoint Federal) is listed as an emerging player. Broad incumbents are NCC Group, QinetiQ and BAE Systems Digital Intelligence. Templar Executives is listed as a regional player.
Does 2T Security have an API?
No public API is recorded for 2T Security.
What industry is 2T Security in?
2T Security's product category is Cyber Security Consulting. Its primary akta.pro industry code is BPAKAHAN, OT/ICS & Critical Infrastructure Cybersecurity Services, with a secondary code of BPAEADAG, Network Security Managed Services (Firewall/IDS/IPS/SASE). Its NAICS code is 5616.