Forensic Control
Forensic Control is a London-based cyber security consultancy founded in 2008 that delivers IASME-accredited Cyber Essentials certification, eDiscovery, CREST penetration testing, vulnerability scanning, and digital forensics to UK financial services, legal, public sector, defence, and non-profit clients.
- Company typePrivate
- Founded2008
- HeadquartersLondon, United Kingdom
- Headcount1–10
- GTM typeB2B
- OfferingServices
What Forensic Control does
Forensic Control Limited is a privately held, London-based cyber security consultancy founded in 2008 by Jonathan Krause, a former New Scotland Yard Hi-Tech Crime Unit digital forensic investigator. The company delivers three core service lines: (1) Cyber Essentials certification — acting as a directly authorised IASME Certification Body for the UK government's Cyber Essentials, Cyber Essentials Plus (£1,350/year) and Duo (£1,800/year) schemes, with self-service e-commerce checkout via Stripe; (2) professional services including CREST-accredited penetration testing, continuous vulnerability scanning, and digital forensics built on the ACPO Good Practice Guide for Digital Evidence to produce court-admissible evidence; and (3) eDiscovery and litigation support, delivered through a strategic partnership with Advoco Legal Solutions and the Reveal document review platform following the EDRM framework, including DSAR management and expert witness testimony.
Underlying technology is methodology-led rather than a unified software platform: automation is concentrated in vulnerability scanning agents, while forensics and eDiscovery rely on process rigour (chain of custody, audit trails, EDRM workflow stages) and senior practitioner involvement. The go-to-market is dual-track — consultative, founder-led sales for regulated-enterprise engagements (financial services, law firms, public sector, defence supply chain) and a self-service purchase flow for SMB Cyber Essentials customers — supported by content marketing, earned media coverage in outlets such as BBC News and The Guardian, and an IASME directory listing.
The business model blends recurring annual certification fees (Cyber Essentials subscriptions plus 12-month bundled vulnerability scanning on Plus/Duo) with higher-margin, per-matter professional services revenue from eDiscovery, penetration testing, digital forensics, and expert witness work. Forensic Control reports protecting 400+ organisations since inception across financial services, legal, non-profit, public sector, MSPs and MoD supply chain verticals, but discloses no external funding and operates at a 1–10 employee scale consistent with a founder-led boutique consultancy.
Forensic Control firmographics
Firmographics- Name
- Forensic Control
- Legal name
- Forensic Control Limited
- Website
- https://forensiccontrol.com
- Company type
- Private
- Founded year
- 2008
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Forensic Control is a London-based cyber security consultancy founded in 2008 that delivers IASME-accredited Cyber Essentials certification, eDiscovery, CREST penetration testing, vulnerability scanning, and digital forensics to UK financial services, legal, public sector, defence, and non-profit clients.
- Ownership category
- akta.pro rank
Forensic Control industry classification
Industry- Product category
- Cybersecurity Consulting
- NAICS
- Investigation and Personal Background Check Services (561611), Investigation and Security Services (5616), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Detective, Guard & Armored Car Services (7381)
- akta.pro primary industry
- Digital Forensics & Evidence Collection (Endpoint, Mobile, Cloud) (BPAKAHAC)
- akta.pro secondary industries
- eDiscovery, Litigation Support & Expert Witness Services (BPAKAHAD), Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where Forensic Control is headquartered
LocationHeadquarters
- HQ city
- London
- HQ country
- United Kingdom
- HQ region
- Europe
Offices1 record
Markets served
Forensic Control business model
Business model- GTM type
- B2B
- Offering type
- Services
Revenue model
- Cyber Essentials Certification: Annual subscription-based certification services. Three tiers: Cyber Essentials (self-assessment from £450/yr), Cyber Essentials Plus (verified audit at £1,350/yr), and Cyber Essentials Duo (combined at £1,800). Revenue is recurring as certifications require annual renewal.
- eDiscovery Services: Managed eDiscovery for law firms, forensic accountants and in-house counsel. Covers forensic data collection, document review, DSAR management, and expert witness testimony. Priced per matter based on complexity, data volume and custodians.
- Penetration Testing: CREST-accredited penetration testing services simulating real-world cyber attacks. Scope defined per engagement based on client environment and risk profile.
- Vulnerability Scanning: Standalone vulnerability scanning service available independently or bundled with Cyber Essentials Plus. Automated continuous monitoring of devices and networks.
- Digital Forensics: Digital forensic investigation services for security incidents, legal proceedings, and compliance. Includes evidence recovery, chain of custody documentation, and court-ready reporting.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Cyber Essentials - Self Assessment |
| Subscription | Annual | Cyber Essentials Plus - Verified Audit |
| Subscription | Annual | Cyber Essentials Duo - Combined CE and Plus |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels4 records
Forensic Control product offering
Product offeringCore offering
Forensic Control is a London-based cyber security consultancy that delivers UK government-backed Cyber Essentials certification (Basic, Plus, and Duo tiers), CREST-accredited penetration testing, continuous vulnerability scanning, ACPO-compliant digital forensics investigation, and EDRM-framework eDiscovery and litigation support. Services are led by former New Scotland Yard digital forensic investigators and delivered as both annual subscription certifications and project-based professional engagements for regulated sectors.
Product overview
Forensic Control is a London-based cyber security consultancy offering a portfolio of services rather than a unified software platform. The core offerings center on Cyber Essentials certification (self-assessment, Plus, and Duo tiers), eDiscovery and litigation support, penetration testing, vulnerability scanning, and digital forensics. Cyber Essentials services range from £450-£1,800/year, with vulnerability scanning included free for 12 months with Plus packages. The eDiscovery practice follows the EDRM framework and is led by former New Scotland Yard investigators. All services are delivered directly by senior consultants without handoff to junior staff.
Differentiator
Problem solved
Functional benefit
Products and services
- Cyber Essentials Certification
- eDiscovery Services
Quantifiable outcome
- Prevents up to 80% of common cyber attacks (NCSC Annual Review 2025)
- +3 more outcomes
Companies that use Forensic Control
Customer profileNamed customers17 records
Segments7 records
Forensic Control technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
Forensic Control partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Advoco Legal SolutionscoreAdvoco Legal Solutions delivers specialist eDiscovery and managed document review in partnership with Forensic Control. Greg Deane, co-founder and director of Advoco, manages eDiscovery practice. Partnership extends Forensic Control's reach into law firms and corporate legal departments.
Scale indicators7 records
Recent moves6 records
Expansion highlights5 records
Forensic Control competitors and assessment
Company assessmentBroad incumbents
- IASME Consortium: UK-based organisation that licenses and oversees the Cyber Essentials scheme and manages the network of ~290 certification bodies including Forensic Control. Directly comparable as the authority body and ecosystem coordinator for Forensic Control's largest revenue line.
- NCC Group: Global cyber security and resilience firm offering penetration testing, vulnerability management, and digital forensics to UK enterprise and government. Overlaps with Forensic Control's pen-test and incident-response offerings at much larger scale.
- FTI Consulting: Global consulting firm with a strong technology and eDiscovery segment (including Ringtail and Relativity workflows). Comparable to Forensic Control's eDiscovery and expert witness offerings to legal and financial-services clients.
- Kroll: Global investigations, eDiscovery, and digital forensics firm serving law firms and corporations. Directly comparable to Forensic Control's eDiscovery and litigation support practice but at vastly greater scale across multiple jurisdictions.
Direct peers
- Cyfor: UK digital forensics and eDiscovery specialist providing investigation, litigation support, and expert witness services. Highly comparable niche UK peer competing for the same law firm and corporate counsel mandates.
- Secarma: UK-based cyber security firm offering CREST-accredited penetration testing, vulnerability assessments, and managed security. Overlaps with Forensic Control's pen-test and vulnerability scanning practices.
- Bridewell Consulting: UK-headquartered cyber security consultancy offering Cyber Essentials certification, penetration testing, and managed security services across regulated sectors. Closely comparable to Forensic Control's full cyber services portfolio and UK enterprise customer base.
Others
- Reveal: Technology-assisted review and eDiscovery platform that Forensic Control uses for document review workflows. Adjacent ecosystem participant/enabler rather than direct competitor, representing the broader eDiscovery tooling stack.
- Advoco Legal Solutions: UK specialist eDiscovery and managed document review firm co-founded by Forensic Control's eDiscovery lead Greg Deane. Formal partnership delivering joint eDiscovery services; functions as both partner and adjacent specialist.
Emerging players
- Convergent Risks: Specialist cyber security and digital forensics consultancy focused on legal, corporate, and high-net-worth clients in the UK. Comparable emerging competitor in the same eDiscovery and digital investigation niche.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Forensic Control social profiles
Digital presenceForensic Control financial estimates
Financial estimateRevenue estimate
Valuation estimate
Forensic Control leadership team
Management profileNumber of profiles
Forensic Control funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Forensic Control M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Forensic Control
What does Forensic Control do?
Forensic Control is a London-based cyber security consultancy that delivers UK government-backed Cyber Essentials certification (Basic, Plus, and Duo tiers), CREST-accredited penetration testing, continuous vulnerability scanning, ACPO-compliant digital forensics investigation, and EDRM-framework eDiscovery and litigation support. Services are led by former New Scotland Yard digital forensic investigators and delivered as both annual subscription certifications and project-based professional engagements for regulated sectors.
Is Forensic Control a public or private company?
Forensic Control is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Forensic Control founded?
Forensic Control was founded in 2008. It employs 1 to 10 people.
Where is Forensic Control based?
Forensic Control is headquartered in London, United Kingdom, in the Europe region.
How does Forensic Control make money?
Five revenue lines are on record. Cyber Essentials Certification is the primary driver. The others are eDiscovery Services, penetration Testing, vulnerability Scanning and digital Forensics.
Who are Forensic Control's main competitors?
Broad incumbents on record are IASME Consortium, NCC Group, FTI Consulting and Kroll. Direct peers are Cyfor, Secarma and Bridewell Consulting. Others are Reveal and Advoco Legal Solutions. Convergent Risks is listed as an emerging player.
Does Forensic Control have an API?
No public API is recorded for Forensic Control.
What industry is Forensic Control in?
Forensic Control's product category is Cybersecurity Consulting. Its primary akta.pro industry code is BPAKAHAC, Digital Forensics & Evidence Collection (Endpoint, Mobile, Cloud), with a secondary code of BPAKAHAD, eDiscovery, Litigation Support & Expert Witness Services. Its NAICS code is 561611 and its SIC code is 7381.