WCRC

What WCRC does

The Cyber Resilience Centre for Wales (WCRC) is a not-for-profit organization structured as a company limited by guarantee without share capital, operating exclusively in Wales to provide accessible cyber security services to micro-businesses, small businesses, SMEs, charities, and third-sector organizations. The organization operates under a tripartite partnership model combining Welsh police forces (South Wales Police, North Wales Police, Dyfed-Powys Police, and Gwent Police), TARIAN Regional Organised Crime Unit, and Welsh universities, with additional support from the Welsh Government and private-sector partners including the Federation of Small Businesses and Chambers Wales. The legal entity is The Cyber Resilience Centre for Wales Limited, headquartered at South Wales Police Headquarters in Bridgend, and is operated by National CRC Group Limited (Company No. 13027672), which is owned by the Guildhall City of London Corporation.

WCRC's service portfolio spans a free core membership programme (providing national guidance, resources, toolkits, and regular cyber security updates) alongside a paid "Cyber PATH" service line that includes First Step Website Cyber Assessments, bite-size Cyber Security Awareness Training modules, and Vulnerability Scans with simulated breach testing. The Cyber PATH offering is delivered by students recruited from computing and cyber security courses at Welsh universities, supervised by national cyber security experts — an operating model that simultaneously delivers affordable services and functions as a cyber talent pipeline. The technology stack integrates NCSC guidance content, Police Protect Network resources, and Police CyberAlarm partnerships, distributed through the wcrcentre.co.uk website and active social channels (Twitter @CRCWales, Facebook, YouTube, LinkedIn).

The revenue model combines a freemium entry point (free core membership serving as customer acquisition, with no direct revenue generation) with paid professional services described as "affordable" but without publicly disclosed pricing tiers. Likely funding sources include Welsh Government grants, police force contributions, and revenue from Cyber PATH engagements. The GTM motion is hybrid: community-led through policing and university networks, sales-led for paid Cyber PATH services targeting Welsh SMEs, and event-driven through cyber resilience events and Police Protect Network/Police CyberAlarm engagements. The competitive proposition centers on law enforcement credibility, academic talent, and a plain-language approach targeting businesses with limited or no prior cyber knowledge.

Name

WCRC

Legal name

The Cyber Resilience Centre for Wales Limited

Website

https://wcrcentre.co.uk

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

The Cyber Resilience Centre for Wales (WCRC) is a not-for-profit partnership between Welsh police forces, universities, and the private sector that delivers accessible cyber security awareness training, website assessments, and vulnerability scans to Welsh micro-businesses, SMEs, charities, and third-sector organizations, using a freemium membership model and student-delivered Cyber PATH services.

Ownership category

akta.pro rank

Product category

Cyber Security Services

NAICS

Investigation and Security Services (5616)

SIC

Services-Business Services, Nec (7389)

akta.pro primary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

Keywords

• Cyber security services
• Cyber resilience support
• Vulnerability scanning
• Awareness training
• Cyber Essentials advisory

Headquarters

HQ city

Wales

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Free Core Membership: Free membership programme providing national guidance, resources, toolkits, and regular cyber security updates. Serves as entry point for customer acquisition with no direct revenue generation.
2. Cyber Security Services: Paid, specialist cyber security services including website assessments, awareness training, and vulnerability scans. Services review individual risk and provide bespoke advice. Delivered by supervised university students at affordable rates.
3. Partnership and Grant Funding: As a not-for-profit policing, private sector and academia partnership, WCRC likely receives funding from police forces, Welsh Government, and partner organisations to sustain operations.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

WCRC provides accessible cyber security services and resources to Welsh micro-businesses, SMEs, charities, and third-sector organisations through a free core membership programme offering national guidance and toolkits, combined with paid Cyber PATH services including First Step Website Cyber Assessment, Cyber Security Awareness Training, and Vulnerability Scans. Services are delivered by Welsh university students under the supervision of national cyber security experts, enabling affordable and practical cyber resilience support.

Product overview

WCRC operates as a not-for-profit cyber resilience centre structured around three core service pillars: Awareness (raising cyber security priority), Resilience (directly assisting businesses to strengthen cyber security), and Security (providing affordable foundational cyber security services). The organisation offers a tiered approach starting with a Free Core Membership Programme that provides guidance, resources, and toolkits, complemented by paid Cyber PATH services including First Step Website Cyber Assessment, Cyber Security Awareness Training, and Vulnerability Scans. The Cyber PATH programme is delivered through partnerships with Welsh universities, recruiting students supervised by national experts. The centre also provides Cyber Essentials advisory services for businesses seeking certification.

Differentiator

Problem solved

Functional benefit

Products and services

• Free Core Membership Programme A free membership programme providing national guidance, NCSC-aligned resources, toolkits, and regular cyber security updates and insights, designed as an entry point for Welsh micro-businesses, SMEs, charities, and third-sector organisations with limited or no cyber knowledge.
• First Step Website Cyber Assessment An initial light-touch website cyber security assessment that highlights risks and provides opportunities for further discussion with developers, IT, or host providers to bolster cyber security, targeted at Welsh businesses needing foundational website security guidance.
• Cyber Security Awareness Training Tailored training delivered in short bite-size modules using simple language and real-life examples to help users understand cyber risks, how they occur, and how to spot signs of potential cyber criminal activity, aimed at Welsh business employees and managers.
• Vulnerability Scans Expert assessment of company networks and systems performing simulated cyber breaches to identify potentially exploited weaknesses, with strict operational plans and protocols agreed in advance to minimise interaction with live systems, targeted at Welsh SMEs seeking external security reviews.
• Cyber PATH Advisory Programme An overarching cyber security assessment and advisory programme delivering independent overviews of organisations' cyber security arrangements, executed by computing and cyber security students from Welsh universities supervised by national experts.
• Cyber Essentials Advisory Guidance and support for Welsh organisations seeking Cyber Essentials certification, helping businesses achieve baseline cyber security standards through accessible advisory support.

Named customers3 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Ten partnerships are on record, tiered core and minor.

• South Wales PolicecoreStrategic or Co-development PartnerCore policing partner supporting WCRC operations. Provides law enforcement credibility and access to Police Protect Network and Police CyberAlarm resources.
• North Wales PolicecoreStrategic or Co-development PartnerCore policing partner contributing to WCRC's tripartite model. Supports cyber resilience initiatives across North Wales.
• Dyfed-Powys PolicecoreStrategic or Co-development PartnerCore policing partner in the WCRC network, supporting cyber resilience across the Dyfed-Powys region.
• Gwent PolicecoreStrategic or Co-development PartnerCore policing partner contributing to WCRC's mission to support Welsh businesses with cyber security.
• TARIAN Regional Organised Crime UnitcoreStrategic or Co-development PartnerRegional organised crime unit partner providing cyber crime expertise and resources to WCRC operations.
• Welsh UniversitiescoreStrategic or Co-development PartnerPartnership with Welsh universities to recruit top talent from computing and cyber security courses. Students deliver Cyber PATH services under supervision of national experts.
• National CRC Group LimitedcoreStrategic or Co-development PartnerParent organisation and operator of WCRC. Registered in England and Wales (Company No. 13027672), owned by Guildhall City of London Corporation.
• Chambers WalesminorChannel Partner/ Reseller/ DistributorChambers Wales member supporting the WCRC mission and helping distribute cyber resilience services to Welsh businesses.
• Federation of Small Businesses (FSB)minorChannel Partner/ Reseller/ DistributorFSB partnership to reach and support small businesses across Wales with cyber resilience resources.
• Welsh GovernmentcoreStrategic or Co-development PartnerGovernment support for WCRC, contributing to the not-for-profit cyber resilience mission for Welsh businesses.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Direct peers

• Scottish Business Resilience Centre (SBRC): Scotland's equivalent cyber and business resilience centre operating under a similar police-academia-private sector partnership model. Directly comparable as a regional UK cyber resilience hub serving SMEs and third-sector organisations.
• South East Cyber Resilience Centre: Another regional Cyber Resilience Centre in the UK CRC network, serving South East England SMEs with cyber security awareness, training, and advisory services under the same policing-partnered model.
• North East Business Resilience Centre (NEBRC): Regional UK Cyber Resilience Centre serving North East England SMEs with the same policing-academia-private sector model. Direct comparable as part of the UK CRC network, delivering cyber advisory, training, and student-led services to regional businesses.
• East Midlands Cyber Resilience Centre: Regional UK Cyber Resilience Centre serving East Midlands SMEs with cyber security services delivered through a similar police/university partnership framework. Direct peer in the UK CRC network.
• Cyber Resilience Centre for the West Midlands: West Midlands regional Cyber Resilience Centre, part of the UK CRC network, providing cyber awareness, training, and advisory to regional SMEs and charities using the same policing-led partnership model.
• Cyber Resilience Centre Group (National CRC): National umbrella body coordinating the UK Cyber Resilience Centre network, of which WCRC is a member. Operates as the parent/strategic coordinator for regional CRCs and is the direct parent operator of WCRC via National CRC Group Limited.

Broad incumbents

• IASME Consortium: UK-based cyber security certification body administering Cyber Essentials and Cyber Essentials Plus. Comparable because WCRC's Cyber Essentials advisory directly feeds into IASME's certification framework for Welsh SMEs.
• National Cyber Security Centre (NCSC): UK government authority on cyber security providing authoritative guidance, which WCRC integrates and disseminates to Welsh businesses. Comparable as the upstream authority whose guidance forms the basis of WCRC's content and training.
• Get Safe Online: UK-wide not-for-profit providing free cyber security advice, training, and resources to individuals and small businesses. Comparable as a national cyber awareness resource but broader in scope than WCRC's Wales-only services.

Others

• Cyber Aware (UK Government): UK Government cross-departmental cyber resilience campaign providing free cyber security advice to individuals and small businesses. Adjacent to WCRC as a public-sector cyber awareness channel targeting a similar SMB audience.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/CRCWales
• YouTubeyoutube.com/channel/UC_MYHvab4zp4k74hka3Foig
• Facebookfacebook.com/WalesCRC
• LinkedInlinkedin.com/company/cyber-resilience-centre-for-wales

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about WCRC