What Kocho does

Kocho is a UK-headquartered identity-centric Microsoft managed services provider, founded in 2002 and operating as Kocho Group Ltd. from Cardiff with additional offices in Cape Town (South Africa) and India. The company delivers Microsoft-aligned security, identity management, and cloud transformation services to enterprise and mid-market organisations across financial services, legal, healthcare, retail, utilities, and professional services sectors. Named enterprise clients include Aviva, BDO, WPP, Bupa, Clifford Chance, Welsh Water, EDF Energy, Primark, Fidelity International, and UK Power Networks. The company was formed through the 2022 merger and rebranding of ThirdSpace and TiG Data Intelligence, with Mobliciti acquired the same year to extend mobility and wireless capabilities.

Kocho's technology stack is built entirely on Microsoft platforms, including Microsoft Entra ID (Azure AD), Microsoft 365, Microsoft Azure, Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune, Microsoft Purview, and Microsoft Copilot / Security Copilot. Proprietary service wrappers include XDR Rapid Protect (24/7 AI-powered managed XDR, 2024 Cloud Security Product of the Year), the ClearVue SecOps reporting dashboard, and the Alira Unified Access Portal. The company holds multiple Microsoft advanced specialisations (Cloud Security, Modernise Endpoints, Analytics on Azure), Microsoft verified MXDR status, is a member of the Microsoft Intelligent Security Association (MISA), and has won eight Microsoft Partner of the Year awards.

The business model centres on recurring managed services contracts (managed IT support, 24/7 managed security operations, managed phishing training, vulnerability management) typically billed annually, supplemented by project-based consultancy (Entra ID discovery workshops, M&A IT integration, virtual CISO, Cyber Essentials certification) and Microsoft licensing optimisation engagements. Kocho operates a sales-led enterprise field sales motion targeting CISO, CIO, and Infrastructure Architect personas, complemented by an event-driven content marketing strategy anchored on the annual Microsoft Identity Security Summit in London, vertical roundtables, and a Microsoft co-sell channel relationship.

Name

Kocho

Legal name

Kocho Group Ltd.

Website

https://kocho.co.uk

Company type

Private

Founded year

2002

Operating status

Operating

Headcount range

101–250 employees

Short description

Kocho is a UK-headquartered, identity-centric Microsoft managed services provider delivering security, identity governance, and cloud transformation to enterprise and mid-market clients across financial services, legal, healthcare, and retail sectors. It operates on Entra ID, Defender XDR, and Sentinel, with 8 Microsoft Partner of the Year awards and MSP 501 recognition.

Ownership category

akta.pro rank

Product category

Managed Security and Identity Services

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621), Custom Computer Programming Services (541511), Computer Systems Design and Related Services (5415)

SIC

Services-Computer Integrated Systems Design (7373), Services-Management Services (8741), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industry

Enterprise Application License Advisory, Vendor Management & Optimization (BPAEAGAO)

Keywords

• Managed security services
• Identity management
• Cloud transformation
• Microsoft security
• Managed it services

Headquarters

HQ city

Oxford

HQ country

United Kingdom

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed IT Services: Recurring managed services covering day-to-day IT support, Microsoft cloud solutions, Azure optimisation, Microsoft 365 optimisation, managed mobile, and business transformation. Delivered as ongoing retainer-style engagements with monthly or annual billing cadence.
2. Security Operations Services: Managed security operations including XDR, managed Sentinel, managed phishing training, vulnerability management, and penetration testing. Provided as 24/7 managed service with continuous monitoring.
3. Consultancy and Professional Services: Identity and access management consultancy, security posture assessments, Entra ID discovery workshops, merger and acquisition IT integration, virtual CISO, and Cyber Essentials certification services. Delivered as project-based or advisory engagements.
4. Microsoft Licensing Optimisation: Advisory and optimisation services helping clients maximise value from Microsoft 365 E3, E5, and E7 licensing. Revenue derived from consulting engagements that help identify underutilised capabilities and reduce third-party tool duplication.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels12 records

Core offering

Kocho is a Microsoft-focused managed services provider that designs, secures, and runs customer Microsoft environments spanning Entra ID, Microsoft 365, Azure, Defender, Sentinel, Intune, and Purview. Service offerings combine identity-first security, cloud transformation consulting, and 24/7 managed detection, response, and operational support. The firm wraps Microsoft's product stack with proprietary accelerators (XDR Rapid Protect, ClearVue SecOps, Alira) to accelerate onboarding and ongoing operations for clients.

Product overview

Kocho is an identity-centric Microsoft security and cloud transformation managed service provider operating a platform-plus-services model. The core offering centers on Microsoft Entra ID (Identity and Access Management), which underpins all access decisions, security controls, and cloud platforms. The product portfolio comprises identity management solutions (Identity Management, External Identity, Identity Governance, Identity Threat Protection, Secure Access Management, Alira Access Portal), endpoint and mobility solutions (Modern Desktop, Mobile Threat Defence, Secure Networking, Enterprise Wireless), cloud and AI services (AI & Data Analytics, Cloud Transformation, Cloud Security, Microsoft 365 Copilot), and security operations (Microsoft Sentinel, Extended Detection and Response, Microsoft Security Copilot, Information Protection). These are delivered through a suite of managed services including Managed IT Support, Managed Mobile, Managed Security Operations, Managed Phishing Training, Penetration Testing, Vulnerability Management, Cyber Essentials Certification, Virtual CISO, Azure Optimisation Manager, Microsoft 365 Optimisation Manager, Merger & Acquisition IT Integration, Business Transformation, Microsoft Cloud Solutions Provider, Microsoft Solution Support, and ClearVue SecOps Reporting. The offering is unified by Microsoft's integrated security ecosystem where identity serves as the foundational control plane connecting access, security, and platforms. The company expanded its capabilities through the 2022 acquisition of Mobliciti, adding enterprise mobility and wireless connectivity solutions to the portfolio.

Differentiator

Problem solved

Functional benefit

Products and services

• Managed Security Services 24/7 managed detection, response, and operational support for Microsoft Defender, Sentinel, and the broader Microsoft security stack, targeted at enterprise and mid-market organizations lacking in-house security operations capability.
• Identity and Access Management Services Design, deployment, and ongoing management of Microsoft Entra ID-based identity, access, and governance controls, including the proprietary Alira Access Portal, for organizations seeking identity-first zero-trust outcomes.
• Microsoft 365 Managed Services End-to-end operational management of Microsoft 365 environments, covering Exchange, SharePoint, Teams, and collaboration governance, delivered as a managed service for organizations standardizing on Microsoft productivity tooling.
• Azure Cloud Managed Services Ongoing management, optimization, and operational support for Microsoft Azure environments, including landing zones, cost optimization, and platform operations for cloud-hosted workloads.
• Endpoint Management with Intune Design and managed operation of Microsoft Intune-based endpoint management, covering device compliance, configuration, and application lifecycle for Windows and cross-platform endpoints.
• Cloud Transformation Consulting Strategic and technical consulting engagements that plan and execute Microsoft cloud, security, and identity transformation programmes, from initial strategy through to architecture design and migration delivery.
• Microsoft Licensing Advisory Advisory and procurement support for Microsoft licensing, including Enterprise Agreement optimization, Microsoft 365 E5 security SKU enablement, and ongoing license governance.
• XDR Rapid Protect Proprietary deployment accelerator that fast-tracks onboarding and baseline configuration of Microsoft Defender XDR, reducing time-to-value for extended detection and response capability rollouts.
• ClearVue SecOps Proprietary managed security operations platform that provides unified visibility, alerting, and workflow automation across Microsoft Defender and Sentinel environments for Kocho's managed SOC service.

Quantifiable outcome

• 14,000+ endpoints and 2,000+ servers secured within a defined timeframe for a global events group
• +4 more outcomes

Named customers24 records

Segments6 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration7 records

AI capability7 records

Feature3 records

Partnerships

Three partnerships are on record, tiered core and flagship.

• ZadaracoreTechnology or Integration · 3 February 2026Kocho selected Zadara as its sovereign AI cloud infrastructure partner to address escalating licensing costs and infrastructure complexity from VMware-Broadcom changes. By deploying Zadara's distributed edge cloud platform, Kocho transitioned from a traditional capital expenditure model to a consumption-based, OPEX-driven approach that enables scalable resources, multi-tenancy, and guaranteed data residency for its clients. The partnership allows Kocho's IT team to focus on application development while Zadara provides the underlying cloud infrastructure.
• MicrosoftflagshipStrategic or Co-development PartnerKocho is a Microsoft Solutions Partner with multiple advanced specialisations in Cloud Security, Modernise Endpoints, and Analytics on Azure. The company has been a Microsoft partner from the start, earning eight Microsoft Partner of the Year awards including five in Identity and Security categories. Kocho is a member of the Microsoft Intelligent Security Association (MISA), holds Microsoft verified MXDR solution status, and participates in Microsoft's co-sell and referral ecosystem. The company is deeply integrated into Microsoft's product roadmap, delivering services on Entra ID, Defender, Sentinel, Intune, Purview, and Copilot.
• MobliciticoreOthersKocho acquired Mobliciti, an enterprise mobility specialist, as part of its strategy to expand its cybersecurity and cloud transformation services. The acquisition enhances Kocho's service portfolio with added mobile management and security capabilities including enterprise mobility, mobile threat defence, and wireless connectivity solutions. Mobliciti was subsequently rebranded under the Kocho brand as part of brand integration efforts.

Scale indicators7 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• ANS Group: UK-based Microsoft-focused cloud and managed services provider with a strong Microsoft Azure and security practice. Directly comparable to Kocho as a UK Microsoft-centric MSP/MSSP serving enterprise and mid-market customers.
• Logicalis: Global IT solutions and managed services provider with strong Microsoft practice and security operations capabilities. Comparable to Kocho as a managed services and security provider for mid-market and enterprise Microsoft customers.
• Phoenix Software: UK Microsoft licensing and cloud services specialist serving enterprise customers. Comparable to Kocho's Microsoft 365 Optimisation Manager and licensing advisory practice.
• Bytes Software Services: UK-headquartered Microsoft-focused IT services and licensing provider with enterprise and public sector focus. Overlaps with Kocho on Microsoft licensing optimisation, managed services, and UK enterprise delivery.
• Trustmarque: UK-based Microsoft Gold partner delivering cloud, managed services and licensing advisory. Highly comparable to Kocho in Microsoft specialisation, managed service delivery model, and UK enterprise customer focus.

Broad incumbents

• Softcat: UK-listed IT reseller and services provider with substantial Microsoft practice. Comparable in UK enterprise customer base, but operates at significantly larger scale across a broader portfolio of vendors.
• Kyndryl: Global managed infrastructure services provider spun out of IBM with extensive Microsoft partnerships. Competes for the same large-enterprise Microsoft managed services and security opportunities as Kocho at much larger scale.
• Sopra Steria: European IT services and consulting group with significant Microsoft and security practices. Competes for UK and European enterprise managed services and security transformation deals, though at substantially larger scale.
• Computacenter: UK-headquartered global IT infrastructure and services provider with a sizeable Microsoft practice. Comparable in enterprise managed services and Microsoft specialisation, but with significantly larger scale and broader geographic footprint.
• SoftwareOne: Global software and cloud licensing specialist with Microsoft practice and managed services. Larger scale competitor to Kocho's licensing advisory and managed cloud optimisation offerings, with broader geographic reach.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/channel/UCHOE25nKeOJEyFTMOIk8M9w
• Facebookfacebook.com/kocho
• LinkedInlinkedin.com/company/kocho
• Xx.com/ThirdSpaceIT

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A1 record

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kocho