The Cyber Scheme
The Cyber Scheme is a UK-based training and assessment body that certifies technical cyber security professionals through NCSC-recognised exams (CSTM, CSTL, Cyber Advisor, CSRTM), serving individual practitioners, employers, and government buyers.
- Company typePrivate
- Founded2012
- HeadquartersLondon, United Kingdom
- Headcount11–50
- GTM typeB2B
- OfferingServices
What The Cyber Scheme does
The Cyber Scheme is a privately held, UK-based training and assessment body for technical cyber security professionals, registered as The Cyber Scheme Ltd in England and Wales and operating from Eagle Tower, Cheltenham. Its portfolio centres on a multi-level certification ladder: the CSFL foundation course, the CSTM practitioner assessment (covering 319 topics across 12 knowledge domains, priced at £600+VAT), expert-level CSTL-INF (£1,600+VAT) and CSTL-APP exams, the CSRTM Red Team Manager credential, VA+ vulnerability assessment, and the NCSC-assured Cyber Advisor certification (£600+VAT). Supporting services include in-person and remote training courses, organisation training, and Professional Title assessment as a UK Cyber Security Council Licensed Body covering Associate through Chartered status. Candidates are issued digital certificates via a BlockMark system with QR-based validation, valid for three years.
The business operates a sales-led, exam-centric revenue model with low per-transaction prices, collecting fees upfront from individual professionals and corporate buyers, with corporate bookings on 30-day invoice terms and personal bookings payable within 72 hours. Demand is structurally driven by employer requirements under UK Government assurance schemes (CHECK, Cyber Essentials Plus) and by the UK Cyber Security Council's professional title framework. The company claims 85% market share of UK Government-scheme pen testers, 50% of UK Cyber Security Council registered professionals, and a 100% employment record for CSTM holders, supported by NCSC Assured Service Provider status, ISO 9001 and ISO 27001:2022 certifications, and Approved ELCAS Provider status for armed forces candidates. Its go-to-market relies on industry articles, conference participation, a National Cyber Awards partnership, and direct sales of assessment bookings rather than channel resellers.
The Cyber Scheme firmographics
Firmographics- Name
- The Cyber Scheme
- Legal name
- The Cyber Scheme Ltd
- Website
- https://thecyberscheme.org
- Company type
- Private
- Founded year
- 2012
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- The Cyber Scheme is a UK-based training and assessment body that certifies technical cyber security professionals through NCSC-recognised exams (CSTM, CSTL, Cyber Advisor, CSRTM), serving individual practitioners, employers, and government buyers.
- Ownership category
- akta.pro rank
The Cyber Scheme industry classification
Industry- Product category
- Cybersecurity Certification & Training
- NAICS
- Computer Training (61142), Computer Training (611420), Other Computer Related Services (541519)
- SIC
- Services-Educational Services (8200)
- akta.pro primary industry
- Penetration Testing, Red Team & Ethical Hacking (EDAOAIAH)
- akta.pro secondary industries
- Information Technology (IT) & Cybersecurity Certifications (EDAAANAA), Cybersecurity (EDAAAPAC), Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF)
Keywords
Where The Cyber Scheme is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Offices1 record
Markets served
The Cyber Scheme business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure
Revenue model
- Technical Certification Assessments: The primary revenue stream consists of fees for technical certification examinations including CSTM (£600+VAT), CSTL-INF (£1600+VAT), CSTL-Web App, Cyber Advisor (£600+VAT), CSRTM, CSFL, and VA+ assessments. Exam fees are paid in advance and certificates issued upon successful completion.
- Training and Mentoring Courses: Revenue from training courses including Foundation Level (CSFL), Practitioner Training (CSTM), and Advanced Mentoring (CSTL). Both face-to-face and remote training options are available. Training is offered as standalone courses or bundled with assessments.
- Professional Title Assessment: Fees for assessing and recommending individuals for professional titles through the UK Cyber Security Council, ranging from Associate to Chartered levels.
- ELCAS Learning Credits: Approved ELCAS provider enabling serving and ex-military personnel to use Ministry of Defence funding (£2,000 annually) for certifications and training.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | CSTM (Cyber Scheme Team Member) - Flagship certification exam |
| One time/ perpetual license | Pay-as-you-go | CSTL-INF (Cyber Scheme Team Leader Infrastructure) |
| One time/ perpetual license | Pay-as-you-go | Cyber Advisor (Cyber Essentials Implementation) |
| One time/ perpetual license | Pay-as-you-go | CSTM Training Course |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels6 records
The Cyber Scheme product offering
Product offeringCore offering
The Cyber Scheme is the UK's leading non-profit training and assessment body for technical cyber security professionals, delivering NCSC-recognised certification examinations and training across foundation (CSFL), practitioner (CSTM), expert team leader (CSTL-INF, CSTL-APP), red team manager (CSRTM), vulnerability assessor (VA+), and Cyber Advisor levels. It also operates as a Licensed Body for the UK Cyber Security Council, assessing and recommending candidates for professional titles from Associate through Chartered Cyber Security Professional.
Product overview
The Cyber Scheme is the UK's leading training and assessment body for technical cyber security professionals. Its offering is structured as a multi-level certification portfolio anchored by its flagship CSTM exam (covering 319 topics across 12 knowledge domains), complemented by foundation-level CSFL, expert-level CSTL in Infrastructure and Web Application, VA+ vulnerability assessment, CSRTM Red Team Manager, and Cyber Advisor certifications. Supporting these core assessments are training courses (CSTM Practitioner Training, CSTL Advanced Mentoring, Organisation Training), Professional Registration services as a UK Cyber Security Council Licensed Body (Associate through Chartered titles), ELCAS learning credits for armed forces personnel, and the National Cyber Awards as a brand extension. The portfolio is designed to take practitioners from entry level through to Chartered-level expertise, with certification renewable every three years.
Differentiator
Problem solved
Functional benefit
Products and services
- CSTM (Cyber Scheme Team Member) Flagship technical assessment for security testers, comprising 319 topics across 12 knowledge domains with written, practical, and interview components. Mandatory requirement for Practitioner Level Professional Title with the UK Cyber Security Council and meets NCSC/IASME standards for Cyber Essentials Plus Lead Assessor roles. Price: £600 + VAT.
- CSFL (Cyber Scheme Foundation Level)
Quantifiable outcome
- 100% employment rate for CSTM certified candidates
- +3 more outcomes
Companies that use The Cyber Scheme
Customer profileNamed customers4 records
Segments6 records
Ideal customer profiles6 records
The Cyber Scheme technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
The Cyber Scheme partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered core and minor.
- UK Cyber Security CouncilcoreThe Cyber Scheme was approved as a Licensed Body by the UK Cyber Security Council in 2023, allowing them to assess and recommend individuals for Professional Titles across multiple specialisms and titles, culminating in Chartered Cyber Security Professional status. They currently assess applications in multiple specialisms from Associate to Chartered level.
- NCSC (National Cyber Security Centre)coreThe Cyber Scheme delivers NCSC-Certified training and assessments for various Government schemes including CHECK and Cyber Advisor. They work closely with NCSC on the content of assessments and training courses, and are an NCSC Assured Service Provider for the Cyber Advisor Scheme.
- IASMEcoreThe Cyber Scheme is partnered with IASME for the Cyber Advisor Scheme and Cyber Essentials Plus assessments. They are the UK's only assessment provider for Cyber Advisor scheme, delivering in-person assessments nationwide in partnership with IASME.
- The National Cyber AwardsminorThe Cyber Scheme are Award Partners with The National Cyber Awards, helping to recognise and reward excellence in technical cyber security services. They have curated three technical categories specifically for the offensive cyber security community: SME Consultancy of the Year, MSP of the Year, and Enterprise Consultancy of the Year.
- CiiSEC (Chartered Institute of Information Security)coreThe Cyber Scheme works alongside CiiSEC as one of the first Licensed Bodies for Cyber Security Chartership. CEO Charles White is a Fellow of CiiSEC and collaborates regularly with the institute on professional standards and industry development.
- ELCAS (Enhanced Learning Credits Administration Scheme)minorThe Cyber Scheme is an Approved ELCAS Provider (Provider ID: 13341), enabling serving and ex-service personnel with at least six years of service to use Ministry of Defence funding (£2,000 annually) toward all technical qualifications including CSFL, CSTM, and CSTL.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
The Cyber Scheme competitors and assessment
Company assessmentDirect peers
- TigerScheme: UK university-based pen testing certification scheme developed in partnership with NCSC, providing CHECK-aligned team member and team leader certifications. TigerScheme competes head-to-head with CSTM and CSTL assessments for UK Government scheme accreditation.
- OffSec (Offensive Security): Commercial provider of the OSCP, OSWE, and other offensive security certifications globally. OffSec is the dominant international peer in penetration testing certification and competes for the same candidate pool, particularly those seeking portable, globally-recognised credentials.
- CREST: UK-based not-for-profit accreditation and certification body for technical information security professionals. CREST is the most directly comparable peer, competing on the same NCSC-recognised CHECK scheme accreditations and penetration testing certifications that form The Cyber Scheme's core offering.
- SANS Institute: Global cybersecurity training and certification organisation offering GIAC-aligned certifications including penetration testing (GPEN, GXPN) and red team credentials. SANS is a direct competitor in the technical training and certification space with substantially broader geographic reach.
- EC-Council: Provider of CEH (Certified Ethical Hacker), ECSA, and other offensive security certifications recognised globally. EC-Council competes for the same entry-to-practitioner cybersecurity certification candidates as The Cyber Scheme's CSFL and CSTM products.
Emerging players
- Hack The Box: Cybersecurity upskilling and certification platform offering practical hacking labs and the CPTS certification. HTB represents the digital-first, global challenger model that competes with traditional assessment bodies for entry-level to practitioner candidates.
- IASME: UK-based cyber security certification body operating the Cyber Essentials and IASME Governance schemes. IASME is both a partner (delivering Cyber Advisor with The Cyber Scheme) and a peer in adjacent SME-facing cyber assurance certification.
Broad incumbents
- APMG International: Global accreditation and certification management organisation that manages various scheme certifications including elements of UK Cyber Essentials. APMG operates overlapping scheme administration capability relevant to The Cyber Scheme's certification business model.
- (ISC)²: Global, non-profit membership association offering CISSP, CCSP, and other cybersecurity certifications. While broader in scope than The Cyber Scheme, (ISC)² is the incumbent benchmark for chartered cyber security professional status and competes for the same UK Cyber Security Council Chartered recognition.
Others
- CiiSEC (Chartered Institute of Information Security): UK chartered professional body for cyber security and a fellow Licensed Body for the UK Cyber Security Council. CiiSEC is both a strategic partner (CEO Charles White is a Fellow) and an adjacent professional body offering overlapping chartered-status pathways.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
The Cyber Scheme social profiles
Digital presenceThe Cyber Scheme compliance and trust
Trust signalCompliance2 records
The Cyber Scheme financial estimates
Financial estimateRevenue estimate
Valuation estimate
The Cyber Scheme leadership team
Management profileNumber of profiles
Profiles4 records
The Cyber Scheme funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
The Cyber Scheme M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about The Cyber Scheme
What does The Cyber Scheme do?
The Cyber Scheme is the UK's leading non-profit training and assessment body for technical cyber security professionals, delivering NCSC-recognised certification examinations and training across foundation (CSFL), practitioner (CSTM), expert team leader (CSTL-INF, CSTL-APP), red team manager (CSRTM), vulnerability assessor (VA+), and Cyber Advisor levels. It also operates as a Licensed Body for the UK Cyber Security Council, assessing and recommending candidates for professional titles from Associate through Chartered Cyber Security Professional.
Is The Cyber Scheme a public or private company?
The Cyber Scheme is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was The Cyber Scheme founded?
The Cyber Scheme was founded in 2012. It employs 11 to 50 people.
Where is The Cyber Scheme based?
The Cyber Scheme is headquartered in London, United Kingdom, in the Europe region.
How does The Cyber Scheme make money?
Four revenue lines are on record. Technical Certification Assessments are the primary driver. The others are training and Mentoring Courses, professional Title Assessment and ELCAS Learning Credits.
Who are The Cyber Scheme's main competitors?
Direct peers on record are TigerScheme, OffSec (Offensive Security), CREST, SANS Institute and EC-Council. Emerging players are Hack The Box and IASME. Broad incumbents are APMG International and (ISC)². CiiSEC (Chartered Institute of Information Security) is listed as an others.
Does The Cyber Scheme have an API?
No public API is recorded for The Cyber Scheme.
What industry is The Cyber Scheme in?
The Cyber Scheme's product category is Cybersecurity Certification & Training. Its primary akta.pro industry code is EDAOAIAH, Penetration Testing, Red Team & Ethical Hacking, with a secondary code of EDAAANAA, Information Technology (IT) & Cybersecurity Certifications. Its NAICS code is 61142 and its SIC code is 8200.