What CyPro does

CyPro is a UK-based cyber security consulting firm founded in 2021, headquartered at One Canada Square, Canary Wharf, and privately held as CyPro Consulting Ltd with no external investors disclosed. It targets high-growth UK companies (primarily mid-market and scaling SMBs, plus selected larger enterprises) with three service lines. "Build & Protect" delivers project-based, fixed-price cyber strategy, risk assessments, audits, ISO 27001/SOC 2/Cyber Essentials Plus certifications, and security training. "Run & Sustain" provides retained, monthly managed security services including virtual CISO, 24/7 Security Operations Centre monitoring, managed detection and response (MDR), vulnerability scanning, incident response, and digital forensics, packaged in some cases as "Cyber Security as a Service." "Talent & Transition" places interim or permanent cyber security consultants on a commission basis. Underlying technology combines automation (vulnerability scanning, security monitoring, security questionnaire automation) with expert analyst oversight, and the firm holds CREST, ISO 27001, Cyber Essentials and Cyber Essentials Plus certifications.

The business model is sales-led direct-to-client, with founding partners Rob McBride and Jonny Pelter (both ex-Deloitte; Jonny also ex-KPMG and a former advisor to NCSC/GCHQ) personally responding to inbound enquiries within 30-60 minutes and conducting 45-minute discovery calls. Proposals are typically issued three days after the introductory call, with multi-year contracts and project-based or monthly retained pricing; no standard rate card is published. The customer book spans professional services (Grant Thornton), universities (Open University, Glasgow, Southampton, Newcastle), banks (Danske Bank, Funding Circle, Flagstone), technology firms (Pactio, Mindszi, Slice), travel (Audley Travel), utilities (Wessex Water), chemicals (Syngenta), law (Brown Rudnick, Ruler), and more, with case studies emphasising certification delivery, post-incident remediation, and cyber maturity roadmaps. Marketing is content-led via the website, blog, and resource library, with no paid acquisition or channel partnerships. Geographic scope is the United Kingdom only, with over 90% of staff UK-based.

Name

CyPro

Legal name

CyPro Consulting Ltd

Website

https://cypro.co.uk

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

CyPro is a UK-based cybersecurity consulting firm founded in 2021 that serves high-growth companies with project-based security buildouts, managed security operations including a 24/7 SOC, and cyber talent placement, delivered by senior practitioners ex-Deloitte, KPMG and UK intelligence agencies.

Ownership category

akta.pro rank

Product category

Cyber Security Services

NAICS

Computer Systems Design and Related Services (5415), Security Systems Services (except Locksmiths) (561621), Other Scientific and Technical Consulting Services (54169)

akta.pro primary industry

Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

akta.pro secondary industries

Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG), Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)

Keywords

• Cyber security consulting
• Managed security services
• Compliance certifications
• Security operations centre
• Incident response services

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Professional Services - Build & Protect: Project-based consulting engagements including cyber strategy, risk assessments, audits, compliance certifications (ISO 27001, SOC 2, Cyber Essentials Plus), and security training. Fixed price delivery model.
2. Managed Services - Run & Sustain: Ongoing cyber security managed services delivered on a retained monthly basis. Includes virtual CISO, 24/7 monitoring, vulnerability scanning, and incident response capabilities.
3. Talent & Transition: Placement of cyber security consultants and experts on interim and permanent basis. Commission-based model for talent placement.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels4 records

Core offering

CyPro is a UK-based cyber security consulting firm providing end-to-end security services for high-growth companies. Its three core offerings are Build & Protect (project-based assessments, audits, risk remediation, and compliance certifications such as ISO 27001, SOC 2, and Cyber Essentials Plus), Run & Sustain (ongoing managed services including vCISO, 24/7 SOC monitoring, managed detection and response, incident response, and penetration testing), and Talent & Transition (placement of senior cyber security professionals on interim and permanent basis).

Product overview

CyPro is a UK-based cyber security consulting company offering three core service lines: Build & Protect (project-based security assessments, audits, compliance certifications, and risk remediation for scaling businesses), Run & Sustain (ongoing managed security services including vCISO, 24/7 monitoring, MDR, incident response, and penetration testing), and Talent & Transition (cyber security staffing and recruitment). The company provides end-to-end cyber security services for high-growth companies, from initial strategy and compliance certification (ISO 27001, SOC 2, Cyber Essentials Plus, ISO 42001) through continuous monitoring and incident response, to staff augmentation. Services are delivered by senior cyber security experts and are sized appropriately for small-to-medium businesses.

Differentiator

Problem solved

Functional benefit

Products and services

• Build & Protect Initial cyber security service that rapidly establishes controls appropriately sized for scaling or growing businesses. Includes strategic to deep technical project-based delivery at fixed prices, covering cyber maturity assessments, risk remediation plans, and tangible infrastructure changes.
• Run & Sustain Ongoing managed security services providing continuous peace of mind via scalable cyber security managed services. The CyPro team becomes the client's in-house cyber security team for identify, protect, detect, monitor, respond and recover operations delivered on a retained monthly basis.
• Talent & Transition Staffing service providing exceptional cyber security talent for delivering key security projects or finding specialist expertise, including interim and permanent staff placement from role definition to selection on a commission basis.
• Cyber Security as a Service (CSaaS) Subscription-based advanced cyber services at a fraction of the cost of an in-house team, including virtual CISO, penetration testing, security monitoring and staff training for organisations that need end-to-end cyber capability without building an internal team.
• Virtual CISO (vCISO) Flexible cyber security leadership and access to technical experts on a fractional basis, enabling compliance, risk management and security strengthening without the cost of a full-time CISO for growing UK businesses.
• Managed Detection & Response (MDR) Managed service combining advanced technologies and expert guidance to detect, analyse and respond to cyber threats swiftly and effectively, including proactive threat hunting to protect organisations from attacks.
• 24/7 Cyber Security Monitoring Real-time monitoring, threat detection and rapid incident response via a Security Operations Centre ensuring digital infrastructure stays secure all year round for organisations without in-house SOC capability.
• Penetration Testing Service identifying and fixing vulnerabilities in IT infrastructure by simulating real-world cyber attacks, providing tailored recommendations to strengthen defences for organisations seeking to validate their security posture.
• Cyber Incident Response Structured approach to managing and recovering from cyber attacks, identifying, isolating and mitigating threats in real time followed by post-incident analysis for organisations experiencing or preparing for incidents.
• ISO 27001 Compliance Service Expert guidance service for achieving ISO 27001 certification, from scoping through to passing the two-stage audit, managing the entire certification process for clients needing to demonstrate information security management maturity.
• SOC 2 Compliance Service Service helping clients achieve SOC 2 compliance to demonstrate secure management of customer data and adherence to industry trust standards, typically used by FinTech and technology firms seeking enterprise contracts.
• Cyber Essentials Plus Certification Service Certification service helping clients achieve Cyber Essentials Plus certification, demonstrating commitment to maintaining secure company practices with hands-on technical verification of cyber security controls.
• ISO 42001 AI Readiness Assessment Assessment enabling rapid understanding of current AI governance, identifying compliance risks and establishing a clear path to safe and fast AI adoption, aligned to the ISO 42001 standard for AI management systems.
• Due Diligence as a Service Service that shortens sales cycles by reducing response times to security and compliance questionnaires to 1-3 days rather than 1-3 weeks, primarily used by technology and FinTech sellers responding to enterprise procurement security questionnaires.

Quantifiable outcome

• Pactio achieved both ISO 27001 and SOC 2 compliance within 7 months
• +4 more outcomes

Named customers30 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature3 records

Scale indicators2 records

Recent moves5 records

Expansion highlights5 records

Broad incumbents

• ReliaQuest: Large US-headquartered managed detection and response provider with a strong UK presence — competes with CyPro's 24/7 SOC and MDR offering at the upper end of the mid-market and into enterprise.
• NCC Group: UK-listed, globally operating cyber security and resilience firm spanning managed detection, risk consulting, and software escrow — competes head-on with CyPro on enterprise cyber engagements while also serving much larger customers.
• Sophos: Global cyber security vendor with a large UK channel delivering managed detection and response, endpoint protection, and security services — competes with CyPro for mid-market managed security spend at a much larger scale.
• WithSecure (formerly F-Secure): European-headquartered cyber security vendor and managed service provider with a UK commercial business — competes with CyPro in managed detection, incident response, and vulnerability management.
• KPMG UK (Cyber practice): Big 4 advisory firm with a major UK cyber security practice spanning strategy, compliance, and managed services — directly comparable to CyPro's service portfolio and competes for many of the same mid-market and enterprise clients.

Direct peers

• Pentest People: UK cyber security specialist focused on penetration testing, managed security, and compliance certifications — directly overlaps CyPro's Build & Protect and Run & Sustain offerings for mid-market clients.
• Cyberis: UK-based cyber security consultancy delivering managed SOC, penetration testing, and compliance services to mid-market and enterprise customers — closely aligned with CyPro in scale, service mix, and target segment.
• e2e-assure: UK-focused Managed Security Service Provider (MSSP) offering 24/7 SOC, MDR, and threat intelligence to mid-market and enterprise customers — a near-direct competitor to CyPro's managed services line.
• DigitalXRAID: UK-based managed security services and cyber consultancy serving mid-market organisations with SOC, pen testing, and compliance services — closely comparable to CyPro in size and target customer.
• Bridewell: UK-headquartered cyber security consultancy of comparable size offering managed SOC, pen testing, compliance, and vCISO services to mid-market and enterprise clients — direct competitor across nearly all of CyPro's service lines.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/_cypro
• LinkedInlinkedin.com/company/cypro-uk

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CyPro