What Corsaire does

Corsaire operates as A&O Corsaire, the dedicated cybersecurity division of A&O IT Group, a privately-held UK IT services group founded in 2000 and headquartered in Maidenhead. The division delivers technology-agnostic cybersecurity services spanning four pillars: Cyber Consultancy (strategy development, incident response planning, M&A cybersecurity due diligence, virtual CISO), Cyber Assurance (penetration testing across network, mobile and physical surfaces, red teaming, social engineering, vulnerability assessments, IoT and ICS/SCADA/IIoT assessments, third-party risk management, Cyber Essentials certification, and awareness training with phishing simulation), and Cyber Operations (managed SOC and managed detection & response with 24/7 monitoring plus risk assessment).

The business is built on a professional services model: revenue is generated primarily through bespoke, quote-based engagements on multi-year contracts, supplemented by a recurring managed SOC/MDR annuity. The company self-reports 100+ global customers, 100k+ tested applications, 10M+ protected users, and 23+ years of cyber experience, and positions itself as a trusted advisor to FTSE 100 organisations while explicitly serving SMEs through accessible offerings such as Cyber Essentials certification. Customer mix is horizontal across banking, insurance, recruitment, retail, and utilities, with deliberate extension into industrial and critical infrastructure via OT/ICS services.

Go-to-market is direct enterprise field sales with consultative 'Speak to an expert' and 'Get a quote' CTAs, supported by content marketing through a Knowledge Hub, case studies, and PR in outlets such as Computer Weekly, InfoSecurity Magazine, and Help Net Security. Competitive defensibility rests on a layered accreditation stack (CREST Approved, Cyber Essentials Plus, ISO 27001, ISO 9001, JOSCAR registered, SafeContractor approved) and senior practitioner expertise rather than proprietary technology, and the offering is explicitly technology-agnostic across platforms. The parent A&O IT Group additionally operates adjacencies in managed IT services, modern work, AI solutions, and cloud platforms, providing potential cross-sell runway into the cyber franchise.

Name

Corsaire

Legal name

A&O IT Group

Website

https://corsaire.com

Company type

Private

Founded year

2000

Operating status

Operating

Headcount range

11–50 employees

Short description

Corsaire, operating as A&O Corsaire, is the cybersecurity division of UK-based A&O IT Group, delivering technology-agnostic penetration testing, red teaming, managed SOC, and cyber advisory services to FTSE 100 enterprises, SMEs, and industrial clients across banking, insurance, retail, utilities, and recruitment sectors globally.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Management Consulting Services (54161)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Cybersecurity & Identity Consulting (BPAHAEAG)

akta.pro secondary industries

Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Cybersecurity Operations Outsourcing (SOC / SecOps) (BPAEAMAG)

Keywords

• Penetration testing services
• Cybersecurity assurance
• Managed SOC services
• Vulnerability assessments
• Red teaming assessments

Headquarters

HQ city

Bracknell

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Cybersecurity Consulting Services: Professional services revenue from cybersecurity consultancy including strategy development, incident response planning, M&A cybersecurity due diligence, and virtual CISO services
2. Cyber Assurance Services: Recurring and project-based revenue from penetration testing, vulnerability assessments, red teaming, social engineering, compliance advisory, and certification services
3. Managed SOC Services: Recurring revenue from 24/7 monitoring and managed detection & response services
4. Training Services: Revenue from cybersecurity awareness training and phishing simulation services

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

Corsaire (A&O Corsaire) provides professional cybersecurity services spanning assurance, consultancy, and operations. Its assurance portfolio includes penetration testing, red teaming, social engineering, vulnerability assessments, IoT and ICS/SCADA/IIoT assessments, third-party risk management, and Cyber Essentials certification; its consultancy work covers cybersecurity strategy, incident response planning, M&A cyber due diligence, and virtual CISO; its operations arm delivers 24/7 managed SOC and managed detection and response services for organisations ranging from SMEs to multinational corporations.

Product overview

A&O Corsaire is a cybersecurity services division offering a comprehensive portfolio of security testing and assurance services. The core offerings include penetration testing (network, mobile, physical), red teaming, social engineering, and vulnerability assessments. Supporting services include IoT and ICS/SCADA/IIoT security assessments, third-party risk management, compliance advisory, Cyber Essentials certification, and cybersecurity awareness training. The portfolio also includes managed detection and response services for ongoing 24/7 monitoring. All services are technology-agnostic and scalable, designed to grow with business needs from SMEs to multinational organizations.

Differentiator

Problem solved

Functional benefit

Products and services

• Penetration Testing Simulated cyber attack service that tests networks, software, applications, and websites to identify vulnerabilities before malicious actors can exploit them; offered to organisations from SMEs to multinationals across industries.
• Red Teaming Advanced adversary simulation service that uses sophisticated cyber attacker tactics to perform realistic simulated attacks against organisations, validating detection and response capabilities.
• Social Engineering Assessment Service that uses tools and techniques to prevent social engineering attacks targeting employees, including phishing simulation and security awareness components.
• Vulnerability Assessments Comprehensive 360-degree assessment of an organisation's security posture and network/application vulnerabilities with actionable remediation guidance.
• ICS / SCADA / IIoT Assessments Security assessments for Industrial Control Systems, SCADA environments, and Industrial Internet of Things to identify risks and strengthen defences in operational technology estates.
• IoT Device Security Assessments Security assessments for Internet of Things devices including access systems, thermostats, and cameras deployed in office environments.
• Third Party Risk Management Service for assessing and managing risks associated with external parties, suppliers, vendors, and contractors that have access to an organisation's systems or data.
• Cyber Essentials & Cyber Essentials Plus Certification Certification service helping businesses understand and address cyber vulnerabilities through the UK government-backed Cyber Essentials and Cyber Essentials Plus frameworks, delivered as an IASME Consortium certified provider.
• Cybersecurity Awareness Training & Phishing Simulation Training service that educates employees about online safety, best practices, and how to protect themselves and their company from cyber threats, paired with phishing simulation exercises.
• Cybersecurity Consultancy Services Consultancy offerings covering cybersecurity strategy development, cyber incident response planning, M&A cybersecurity due diligence, and Virtual CISO services for organisations seeking senior cyber leadership on demand.
• Managed SOC Services 24/7 managed Security Operations Centre service providing proactive monitoring of an organisation's digital assets and information to detect and respond to cyber threats on a recurring basis.
• Managed Detection & Response 24/7 managed detection and response service that proactively monitors digital assets and information to protect businesses from cyber threats, delivered as a recurring managed engagement.
• Risk Assessment Operational cyber risk assessment service that evaluates an organisation's cyber risk posture as part of the Cyber Operations portfolio.

Quantifiable outcome

• Protected organisations across banking, insurance, recruitment, retail, and utilities sectors
• +3 more outcomes

Named customers5 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Three partnerships are on record, tiered core.

• IASME ConsortiumcoreOthersA&O IT Group is a member and certified provider through IASME Consortium, offering Cyber Essentials and Cyber Essentials Plus certifications to clients. IASME is a cybersecurity certification body providing industry-recognised standards.
• CRESTcoreTechnology or IntegrationCREST Approved penetration testing and cybersecurity assessment provider. CREST is an international not-for-profit accreditation body representing the technical information security industry.
• BSI (British Standards Institution)coreTechnology or IntegrationISO 27001 and ISO 9001 certified through BSI, the business improvement and standards company. BSI provides certification services for information security and quality management systems.

Scale indicators9 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Trustwave: Global managed security services provider offering managed SOC, MDR, penetration testing, and advisory. Comparable as a full-stack MSSP and consulting competitor in the enterprise segment.
• WithSecure: Finnish-headquartered cybersecurity firm combining consulting services with managed detection and response. Comparable as a European-headquartered services-led cyber firm with multi-tier customer targeting.
• Bridewell: UK-based private cybersecurity services company providing consulting, pen testing, managed SOC, and threat intelligence across critical infrastructure and regulated industries. Closely comparable mid-market UK peer.
• NCC Group: UK-listed cybersecurity services firm offering penetration testing, managed detection and response, and GRC advisory to enterprises and FTSE clients. Most directly comparable on geography, service mix, and enterprise customer profile.
• Pentest Limited: UK pure-play penetration testing firm offering CREST-accredited security testing and assurance services. Comparable as a UK specialist in the assurance portion of Corsaire's portfolio.

Emerging players

• Darktrace: UK-based AI-driven cybersecurity company offering autonomous detection and response. Comparable as a UK-headquartered cyber firm targeting enterprise and critical infrastructure, though positioned around proprietary AI rather than services-led delivery.

Broad incumbents

• Deloitte Cyber: Big 4 cybersecurity practice offering strategy, GRC, incident response, and managed services globally. Comparable as a broader-portfolio incumbent competing for the same FTSE-level consulting mandates.
• BAE Systems Applied Intelligence: UK-headquartered cyber and intelligence division of BAE Systems delivering large-scale cyber security services to governments, defence, financial services, and critical infrastructure. Comparable on UK presence and regulated client base.
• Mandiant (Google Cloud): Now part of Google Cloud, Mandiant provides incident response, threat intelligence, managed defence, and cyber assurance at global scale. Overlaps with Corsaire's IR planning, red teaming, and consulting offerings.
• KPMG Cyber Security Services: Big 4 cyber consulting practice covering strategy, transformation, pen testing, and managed services for large enterprises and regulated industries. Comparable as an incumbent in the GRC and assurance advisory market.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/corsaire
• LinkedInlinkedin.com/company/a&o-it-services
• Facebookfacebook.com/corsaireltd

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Corsaire