CM Security

What CM Security does

CM Security Ltd is a London-based Managed Security Service Provider and Value Added Reseller founded in 2003, delivering co-managed cyber security services to UK mid-market and regulated-vertical clients including education, local authorities, manufacturing, insurance, law, financial services and community services. Its technical offering is anchored on the Fortress Security Platform, which combines Web Security, CASB, Email Security, Security Awareness Training and email Data Loss Prevention into a single machine-learning system for threat detection, alert and response, and is augmented by an Agentic AI Consultancy service that deploys and governs AI workflows for clients under an IAPP AIGP certified AI Governance framework aligned to GDPR and the EU AI Act.

The firm's portfolio spans 365 Offsite Encrypted Backup, Cloud App Security, Compliant Email Archive, Email Security, Web Security, Security Awareness Training and a Data Security Posture Management module, sourced through vendor partnerships with Barracuda, Censornet, Proofpoint, Abnormal Security, Bitdefender, KnowBe4, Acronis, Microsoft, WatchGuard, Varonis, Coro, Entrust, Boxphish and TrustLayer. Co-managed coverage includes EDR, MDR, 24/7 SOC and SASE with Zero Trust protections, supplemented by quarterly onsite client reviews.

Commercially, CM Security operates a hybrid model: subscription-style managed services retainers, technology resale margins through its VAR channel, professional services engagements for AI consultancy, and recurring security awareness training subscriptions. Distribution is direct to enterprise and mid-market clients in the UK, with G-Cloud Supplier accreditation unlocking public sector procurement. The firm holds ISO 20000 certification, lists 13+ year client tenures as evidence of embedded advisory status, and operates with a 1-10 employee headcount from its Dalton House, London head office.

Name

CM Security

Legal name

CM Security Ltd

Website

https://cmsecurity.co.uk

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

1–10 employees

Short description

CM Security is a London-based MSSP and Value Added Reseller, founded 2003, providing co-managed cyber security and AI consultancy services to UK mid-market and regulated-vertical clients through multi-vendor security partnerships.

Ownership category

akta.pro rank

Product category

Managed Security Services

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Management Services (8741)

akta.pro primary industry

Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)

akta.pro secondary industries

Security Operations Center (SOC) as a Service (BPAEADAB), Managed Detection & Response (MDR) & SOC Services (HDADAGAG), Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data) (HDADAFAG)

Keywords

• Managed security services
• Cloud security solutions
• Email security protection
• Cyber threat defense
• Security awareness training

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services (MSSP): Co-managed security services providing expert layer against machine-learning attacks with options like EDR, MDR, and 24/7 SoC coverage. Subscription-based managed services model.
2. Security Technology Resale: VAR model providing and implementing security solutions including Secure Web Gateway, Secure Email Gateway, and CASB solutions from vendor partners.
3. AI Consultancy Services: Agentic AI workflow design and governance consultancy with 4-stage deployment methodology covering design, delivery, testing, and deployment.
4. Security Awareness Training: Phishing simulations and security training courses to build human firewall defense for organizations.

Go-to-market motion2 records

Distribution channels4 records

Marketing channels4 records

Core offering

CM Security operates as a Managed Security Service Provider (MSSP) and Value Added Reseller (VAR) delivering co-managed cybersecurity services to mid-market and enterprise clients. Its offering combines the proprietary Fortress Security Platform (Web Security, CASB, Email Security, SAT, eDLP) with 24/7 SOC coverage, Zero Trust/EDR/MDR/SASE protections, and AI consultancy services, sourced and integrated from multiple best-of-breed vendors.

Product overview

CM Security is a Managed Security Service Provider (MSSP) offering a unified portfolio of co-managed security services built around Zero Trust, EDR, MDR, and 24/7 SOC coverage. The core offering comprises the MSSP service supplemented by specialized modules: 365 Offsite Encrypted Backup for Microsoft 365 data protection, AI Consultancy for agentic AI workflow deployment, Autonomous Fortress Security (an autonomous security platform combining Web Security, CASB, Email Security, SAT and eDLP), Cloud App Security (CASB), Compliant Email Archive, Email Security, Security Awareness Training with phishing simulations, and Web Security. These modules are delivered through technology partnerships with vendors including Acronis, Barracuda, Bitdefender, Proofpoint, KnowBe4, Varonis, and WatchGuard.

Differentiator

Problem solved

Functional benefit

Brands

• Fortress Security Platform: Autonomous security combination of Web Security, CASB, Email Security, SAT and eDLP, working as a machine-learning system to detect, alert and repel threats.

Products and services

• Managed Security Service Provider (MSSP) Co-managed security service providing an expert layer against machine-learning attacks with EDR, MDR, 24/7 SOC coverage, SASE, and Zero Trust protection. Includes tailored threat detection and vulnerability scoring, targeted at mid-market and enterprise organizations.
• 365 Offsite Encrypted Backup Backup and disaster recovery service for Microsoft 365 data protecting against outages, insider threats and ransomware. Features de-duplication, compression, indexing and encryption, delivered in partnership with Acronis.
• AI Consultancy Agentic AI workflow design and governance consultancy delivered through a 4-stage methodology covering automation alignment, specialist design, real-world testing, and documented deployment with GDPR and EU AI Act compliance.
• Autonomous Fortress Security Proprietary Fortress Security Platform combining Web Security, CASB, Email Security, Security Awareness Training and eDLP into a unified machine-learning system that detects, alerts and repels malware, spear phishing, CEO fraud and data theft.
• Cloud App Security (CASB) Cloud Access Security Broker service providing visibility into cloud apps, threat protection, file scanning with DLP templates, and compliance auditing for GDPR, PCI DSS and HIPAA.
• Compliant Email Archive Tamper-proof cloud-based email archiving with de-duplication, compression, indexing and encryption. Supports GDPR compliance, Subject Access Requests, and easy search/restore from any device.
• Email Security Email protection against phishing, social engineering, spoofing (SPF/DKIM/DMARC), deep fakes, ransomware, denial of service, and GenAI-driven misinformation. Delivered via vendor solutions from Abnormal Security, Barracuda, Censornet and Proofpoint.
• Security Awareness Training Employee education program with phishing simulations designed to build a human firewall, covering AI-driven phishing detection, PCI DSS/GDPR compliance, and security posture improvement.
• Web Security Web protection guarding users across cloud network platforms against AI-driven attacks, including BYOD device protection, hardware gateways, and cloud-based reporting for safeguarding compliance.
• Data Security Posture Management Data security posture management service sourced from a Gartner No. 1 choice provider, supporting governance of sensitive data across cloud and on-premise environments.

Quantifiable outcome

• Agentic AI workflows can raise productivity by as much as 85%
• +1 more outcomes

Named customers6 records

Segments8 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability8 records

Feature6 records

Partnerships

Seven partnerships are on record, tiered core.

• AcroniscoreTechnology or IntegrationTechnology partner for 365 Offsite Encrypted Backup services. Acronis provides data protection with over two decades of customer data protection experience, 700 employees, 300 engineers, operating across 145 countries in 15 languages.
• BarracudacoreTechnology or IntegrationSecurity technology partner providing email security and network security solutions recommended to clients.
• BitdefendercoreTechnology or IntegrationEndpoint protection and cybersecurity technology partner.
• KnowBe4coreTechnology or IntegrationSecurity awareness training and phishing simulation technology partner, providing one of the industry's leading platforms for human firewall development.
• MicrosoftcoreTechnology or IntegrationMicrosoft Partner providing integration with Microsoft 365 and Azure security solutions. Recommended alongside third-party email security.
• ProofpointcoreTechnology or IntegrationAdvanced email protection technology partner recommended for enterprise email security alongside Microsoft.
• WatchGuardcoreChannel Partner/ Reseller/ DistributorVAR partner for Secure Web Gateway solutions, providing network security infrastructure.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• e2e-assure: UK-headquartered MSSP providing 24/7 SOC, MDR, and managed detection across multi-vendor stacks for mid-market and enterprise customers. Directly comparable MSSP competitor with similar co-managed service model.
• ITC Secure (ITC Cyber): UK-headquartered MSSP delivering managed SOC, MDR, and advisory services to enterprise and public sector clients. Comparable across GTM (regulated verticals), service portfolio, and UK geographic focus.
• Huntress: Managed cybersecurity platform delivering EDR/MDR, SOC, and security awareness training targeted at SMB and mid-market customers via managed service partners. Comparable in service packaging and target segment.
• Bridewell Consulting: UK-based cybersecurity consultancy and MSSP offering co-managed SOC, MDR, and advisory services to mid-market and enterprise regulated-sector clients. Highly comparable in target market, service mix, and regulatory positioning to CM Security.
• PureCyber: UK MSSP offering managed SOC, MDR, penetration testing, and compliance services to SMB and mid-market customers. Comparable in size, target segment, and multi-vendor MSSP positioning.
• Redscan (now Bridewell): UK-based MDR and MSSP provider acquired by Bridewell, offering managed detection, penetration testing, and advisory to mid-market enterprises. Closely comparable in service mix and customer profile.

Broad incumbents

• Arctic Wolf: Large US-headquartered SOC-as-a-service and MDR provider with UK operations, serving mid-market and enterprise. Comparable across managed detection and 24/7 SOC, but at materially greater scale.
• Secureworks: Global MSSP offering managed detection, response, and 24/7 SOC services to mid-market and enterprise. Comparable as a broad incumbent MSSP with overlapping service portfolio.
• Sophos (MSSP/Services): Global cybersecurity vendor with extensive partner-delivered MSSP services, EDR/XDR, email, and managed threat response. Overlaps with CM Security across EDR/XDR and email security service lines.

Emerging players

• Censornet: UK-headquartered email, web, and cloud application security platform vendor. Comparable as a partner/technology supplier used in CM Security's stack, and as an emerging UK security SaaS competitor.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CM Security