Cool Waters Cyber

What Cool Waters Cyber does

Cool Waters Cyber (legally Cool Waters Consulting Ltd) is a UK-based cybersecurity consultancy and managed services provider founded in 1999. The company delivers end-to-end cybersecurity services spanning recurring managed cyber security teams, project-based certification support (Cyber Essentials, IASME Cyber Assurance, ISO 27001, PCI-DSS, DCC), and ad-hoc security assessments including penetration testing, vulnerability scanning, and cloud security assessments. Its primary customers are UK SMEs and enterprises, with dedicated vertical programmes for charities, education, defence, and construction supply chains. The company is an NCSC Assured Service Provider and an IASME-accredited certification body, listed on the Crown Commercial Service framework, and holds ISO 27001, ISO 9001, ISO 14001, and B Corp certifications.

The company's core proprietary technology is the Cyber Swift Supply Chain Portal — a platform that tracks supplier cyber certifications (Cyber Essentials, IASME Cyber Assurance, ISO 27001), identifies compliance gaps, and produces supply chain risk reporting. It also distributes, as European channel partner, Blackwood Systems' MOMI performance monitoring software for HP NonStop Servers, providing local timezone support, local currency pricing, and specialist technical support. The operating model is consultancy-led, with direct enterprise field sales, free discovery consultations, and a multi-year managed-service subscription priced approximately 30% below the cost of equivalent in-house security staffing. Marketing is driven by thought-leadership content (blog, podcast, webinars), industry awards, and free tool funnels (Dark Web Scan, Supply Chain Risk Assessment).

Cool Waters operates from its headquarters in Penryn, Cornwall, with regional offices in Wiltshire and Wales, and an international office in New York, USA. The company is privately held, founder-led by CEO Mark Faithfull, with no external institutional investment disclosed. Revenue is generated through four streams: subscription managed security services, professional services certification projects, discrete assessment engagements, and software distribution/licensing.

Name

Cool Waters Cyber

Legal name

Cool Waters Consulting Ltd

Website

https://cool-waters.co.uk

Company type

Private

Founded year

1999

Operating status

Operating

Headcount range

1–10 employees

Short description

Cool Waters Cyber is a UK-based cybersecurity consultancy and managed services provider serving SMEs, enterprises, government, and sector-specific verticals with managed security teams, certification support (Cyber Essentials, ISO 27001, PCI-DSS), supply chain cyber risk monitoring via the Cyber Swift portal, and security assessments.

Ownership category

akta.pro rank

Product category

Cybersecurity Consultancy and Managed Security Services

NAICS

Other Computer Related Services (541519)

akta.pro industry

PRIMARYHDADAIAD

IT Risk Management (ITRM)

Hardware, Technology & Telecom/Cybersecurity/Governance, Risk & Compliance (GRC)

Keywords

• Cybersecurity consultancy
• Managed security services
• Cyber essentials certification
• Supplier cyber risk
• Penetration testing

Headquarters

HQ city

Penryn

HQ country

United Kingdom

HQ region

Europe

Offices5 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Managed Cyber Security Services: Recurring managed services providing an outsourced cyber security team, including compliance management, day-to-day security operations, and continuous monitoring. Billed on a subscription basis tailored to organisation size and complexity.
2. Certification and Compliance Projects: One-time or project-based engagements for certifications such as ISO 27001, Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, and PCI-DSS. Includes gap analysis, implementation support, and compliance-as-a-service.
3. Security Assessments: Ad-hoc security assessment services including penetration testing, vulnerability scanning, and cloud security assessments, delivered as discrete consulting engagements.
4. MOMI Software Distribution: European distribution of Blackwood Systems' MOMI performance monitoring software for HP NonStop Servers. Revenue derived from software licensing, evaluation copy distribution, and 60-day trial conversions.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels7 records

Core offering

Cool Waters Cyber is a UK-based cybersecurity consultancy delivering managed cyber security services, certification delivery (Cyber Essentials, IASME Cyber Assurance, ISO 27001, PCI-DSS, DCC), security assessments (penetration testing, vulnerability scanning, cloud security assessments), and advisory services (Virtual CISO, Cyber Advisor). The company also operates the proprietary Cyber Swift Supply Chain Portal for supplier cyber resilience monitoring and is the European distributor for Blackwood Systems' MOMI HP NonStop Server performance monitor.

Product overview

Cool Waters Cyber is a cybersecurity services company offering a comprehensive portfolio of security services, certification support, and technology solutions. The offering consists primarily of professional services including managed cyber security teams, advisory services (Virtual CISO, Cyber Advisor), and certification services (Cyber Essentials, IASME Cyber Assurance, ISO 27001, PCI-DSS). The company also provides specialized services for supply chain security with the Cyber Swift Supply Chain Portal platform for real-time supplier monitoring, along with security assessments, penetration testing, and vulnerability scanning. Additional services include cloud backup, Office365 security, secure IT support, and sector-specific offerings for charities, education, and defence. The company also distributes the MOMI NonStop Performance Monitoring product for HP NonStop Servers.

Differentiator

Problem solved

Functional benefit

Brands

• Cyber Swift: Supply Chain Portal platform for managing and monitoring supplier cyber resilience and compliance certifications including Cyber Essentials, IASME Cyber Assurance, and ISO 27001.
• MOMI

Products and services

• Cloud Backup Cloud-based data backup and recovery services to protect business-critical information for UK organisations.
• Office365 Complete Security Comprehensive security services for Microsoft Office 365 environments covering configuration, monitoring, and threat protection.
• Managed Cyber Security Team Fully outsourced cyber security team providing whole-team protection, compliance management, and day-to-day security operations for UK organisations.
• Cyber Advisor Expert cyber security advisory services guiding organisations through security challenges as an NCSC-assured Cyber Advisor service.
• Virtual CISO Virtual Chief Information Security Officer service providing senior leadership for cyber security strategy, governance, and board-level reporting.
• Cyber Governance Code of Practice Support Support for implementing the UK Cyber Governance Code of Practice for boards and directors.
• Supply Chain Security Real-time supply chain security and certification tracking service for construction, finance, healthcare, and public-sector organisations, backed by the Cyber Swift portal.
• Secure IT Support Managed IT support services with integrated security measures for UK businesses.
• Cyber Security for Charities Specialised cyber security services tailored for charitable organisations requiring affordable certification and compliance support.
• Cyber Essentials Government-backed Cyber Essentials certification helping organisations protect against common cyber attacks, delivered via IASME-accredited certification body status.
• IASME Cyber Assurance IASME Cyber Assurance certification providing enhanced cyber security, privacy and data protection assurance for organisations.
• PCI-DSS Compliance PCI-DSS v4 compliance services ranging from ad-hoc advice and gap analysis to fully managed compliance-as-a-service for payment-facing businesses.
• Cyber Essentials for Charities Cyber Essentials certification programme tailored specifically for charitable organisations.
• ISO 27001 Implementation and Certification Full ISO 27001 implementation and certification support services delivered by an ISO 27001-certified consultancy.
• Cyber Essentials for Education Cyber Essentials certification programme designed for educational institutions.
• Defence Cyber Certification (DCC) Defence Cyber Certification services for suppliers working in defence and public-sector projects requiring evidence of cyber resilience.
• Security Assessments Comprehensive security assessment services to identify vulnerabilities and risks across IT environments for UK organisations.
• Penetration Testing Professional penetration testing services to identify and exploit security vulnerabilities in client environments.
• Cloud Security Assessments Security assessments focused on cloud infrastructure and services, including AWS, Azure, and Google Cloud environments.
• Vulnerability Scans Automated vulnerability scanning services to identify security weaknesses across IT estates.
• MOMI NonStop Performance Monitoring European distribution of Blackwood Systems' MOMI performance monitoring software for HP NonStop Servers, with local timezone support, local currency pricing, and access to HP NonStop Server technical specialists.
• Cyber Swift Supply Chain Portal Proprietary real-time supply chain cyber security portal that monitors supplier certifications, tracks compliance status, and provides interactive dashboards for managing supplier cyber risk across construction, finance, healthcare, and public-sector supply chains.
• Free Dark Web Scan Free dark web scanning service to check whether organisation data has been compromised, used as a top-of-funnel lead generation tool.

Quantifiable outcome

• Organisations with Cyber Essentials are 92% less likely to make an insurance claim after a cyber incident
• +2 more outcomes

Named customers7 records

Segments6 records

Ideal customer profiles7 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature2 records

Partnerships

One partnership is on record.

• Blackwood Systems (USA)coreChannel Partner/ Reseller/ DistributorCool Waters Cyber is the European distributor for Blackwood Systems' MOMI — a performance monitoring solution for HP NonStop Servers. They provide local timezone support, local currency pricing, and HP NonStop Server technical specialists to support projects and daily operations. Free mini-MOMI evaluation copies are available direct from Blackwood Systems in the USA, while 60-day full trials and European/UK pricing are handled through Cool Waters Cyber.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• WithSecure (formerly F-Secure): European cybersecurity vendor with consulting, managed detection, and compliance services. Comparable in offering portfolio and European regulatory focus, but operates at much larger scale and is product-led.
• BAE Systems Digital Intelligence (Applied Intelligence): Large UK-based cyber defence and intelligence services provider serving government and critical infrastructure. Overlaps with Cool Waters Cyber's DCC and public-sector engagements but at massively greater scale.
• Darktrace: UK-based AI cybersecurity company offering threat detection and managed services. Comparable as a UK-founded cybersecurity firm but is a much larger, publicly listed entity with a fundamentally different product-led business model.
• Mandiant (Google Cloud): Global incident response, threat intelligence, and cybersecurity consulting firm. Comparable in advisory services and assessments but at enterprise scale and as part of Google Cloud.
• Sophos: UK-founded cybersecurity vendor with managed detection and response services. Comparable geographic origin and SMB-to-mid-market positioning, but a much larger product-led business with a different Go-to-market motion.
• Trustwave: Global cybersecurity consultancy and managed security services provider. Comparable in offering breadth (pen testing, MDR, compliance) but operates globally and competes primarily with larger enterprises.
• NCC Group: A larger UK-listed cybersecurity firm offering cyber assurance, managed detection and response, and compliance services. Overlaps with Cool Waters Cyber in compliance and pen testing but operates at significantly greater scale and across multiple geographies.

Direct peers

• Cyberis: UK-based cybersecurity consultancy offering penetration testing, managed security services, and compliance advisory. Highly comparable service mix and UK mid-market customer overlap.
• Quorum Cyber: UK-headquartered cybersecurity MSP providing managed SOC, incident response, and advisory services to mid-market and enterprise customers. Closely comparable in size, UK focus, and service portfolio.
• Bridewell: UK-based cybersecurity consultancy offering managed security services, compliance, pen testing, and NCSC-assured services. Directly comparable to Cool Waters Cyber across services, customer profile (UK mid-market and enterprise), and regulatory positioning.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/markfaithfull
• LinkedInlinkedin.com/company/cool-waters

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cool Waters Cyber