Shearwater Group Plc

What Shearwater Group Plc does

Shearwater Group Plc is an AIM-listed UK organisational resilience group (founded 2004) that delivers cyber security, managed security and professional advisory services through three wholly-owned operating subsidiaries: Brookcourt Solutions (SIEM and cyber monitoring), Pentest (penetration testing and red teaming), and SecurEnvoy (tokenless two-factor authentication that integrates with customers' existing LDAP directories). The group also distributes complementary third-party technologies such as GeoLang Ascema for data discovery and BullWall's Ransomcare ransomware solution, and offers an AI-driven endpoint protection service branded Mind Security alongside its Security Operations Centre. Additional service lines include risk management advisory and an IR35 contractor compliance offering.

The business operates a hybrid revenue model combining recurring managed security subscriptions, software licensing (largely through 18 distributors and approximately 350 reseller partners), and project-based professional advisory work. Customer evidence is concentrated in enterprise and mid-market accounts across retail (John Lewis, Motor Fuel Group), financial services (Cirencester Friendly), telecoms (a global Telco via Brookcourt), and gaming (Ladbrokes Coral), with the Services Division reporting 359 customers and operations spanning roughly 50 countries.

Shearwater serves as a roll-up of specialist cyber and identity vendors monetised primarily through long-tail enterprise contracts, of which the most material disclosed is a c.£25 million five-year extension and expansion with a global telecommunications customer signed in July 2026. The group employs approximately 90 staff across 4 offices and pursues a stated strategy of converging its software assets into a Security-as-a-Service platform.

Name

Shearwater Group Plc

Legal name

Shearwater Group PLC

Website

https://theshearwatergroup.co.uk

Company type

Public

Founded year

2004

Operating status

Operating

Headcount range

51–100 employees

Short description

Shearwater Group Plc is an AIM-listed UK organisational resilience group delivering cyber security, managed security and professional advisory services through subsidiaries Brookcourt Solutions, Pentest, and SecurEnvoy, serving enterprise and mid-market customers across roughly 50 countries.

Ownership category

akta.pro rank

Product category

Cybersecurity Software & Managed Services

NAICS

Security Systems Services (except Locksmiths) (561621)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• Cyber security services
• Managed security services
• Identity access management
• Penetration testing
• Data discovery compliance

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Managed Security Services: Recurring managed security services including SOC operations, endpoint protection, and monitoring. Revenue is subscription-based with multi-year contracts (e.g., £25m five-year contract with global Telco).
2. Professional Advisory Services: Risk management advisory, assurance services, and consulting engagements for organisational resilience.
3. Software Licensing: Licensing of security software products including SecurEnvoy 2FA, data discovery tools, and SIEM solutions through flexible product licensing models.
4. Channel/Distribution Revenue: Revenue generated through 18 distributors and 350 reseller partners in the Software Division.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

Shearwater Group Plc provides organisational and digital resilience solutions spanning cyber security monitoring, identity and access security, penetration testing, data discovery, managed security operations, and risk management advisory. Offerings are delivered through three wholly-owned subsidiaries — Brookcourt Solutions, Pentest and SecurEnvoy — plus partner-led capabilities such as GeoLang Ascema and BullWall Ransomcare, sold to enterprise customers via direct engagement and a network of resellers and distributors.

Product overview

Shearwater Group Plc operates as an award-winning organisational resilience group providing a portfolio of cyber security and professional advisory solutions. The portfolio consists of three core subsidiary brands: Brookcourt Solutions (cyber security monitoring and SIEM), Pentest (penetration testing and red teaming), and SecurEnvoy (tokenless 2FA and identity access security). Additional offerings include GeoLang Ascema for data discovery and classification, Mind SecurityAI-driven endpoint protection, a Security Operations Centre, Risk Management Advisory services, and IR35 compliance solutions. The company offers both software products and managed services, serving approximately 350 reseller partners and operating across approximately 50 countries.

Differentiator

Problem solved

Functional benefit

Brands

• Brookcourt Solutions: Cyber security monitoring and SIEM solutions subsidiary
• Pentest
• SecurEnvoy

Products and services

• Brookcourt Solutions

Quantifiable outcome

• Eliminated physical token distribution costs and reduced administration overhead for 2FA deployments
• +2 more outcomes

Named customers5 records

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability2 records

Feature6 records

Partnerships

Three partnerships are on record, tiered core.

• McAfeecoreTechnology or IntegrationBrookcourt Solutions and McAfee have worked in partnership for over 8 years delivering SIEM expansions and the latest technologies. Partnership includes subscription renewals and McAfee training facilitation with UK's leading digital education and skills provider. Regular intelligence sharing on customer opportunities.
• GeoLang (Ascema)coreTechnology or IntegrationGeoLang provides Ascema Data Discovery platform for data discovery, monitoring and DLP. Ascema enables finding and classifying PII within unstructured data, with straightforward installation via Manager/endpoint agent deployment. Partnership enables GDPR compliance and data auditing capabilities.
• UK Renewable Energy SuppliercoreStrategic or Co-development PartnerSupporting strategic technology shift in UK's renewable energy sector, demonstrating cross-industry application of cyber security services.

Scale indicators8 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Sophos: UK-origin cybersecurity vendor (now owned by Thoma Bravo) selling endpoint, network, and managed detection through a large global channel of MSPs and resellers. Closely mirrors Shearwater's channel-led software model with 350+ reseller partners and comparable endpoint and IAM adjacencies.
• Bridewell: UK-based cybersecurity services firm providing managed detection, penetration testing, data security, and advisory to regulated UK enterprises. Highly comparable in geography, customer profile, and service portfolio to Shearwater's three subsidiaries.
• Mandiant (Google Cloud): Threat intelligence, incident response, and managed detection firm (now part of Google Cloud). Competes with Brookcourt's threat intelligence and Pentest's red team offerings for large enterprise and government mandates.
• Darktrace: UK-headquartered AI-driven cybersecurity company selling self-learning threat detection and managed detection into global enterprises. Overlaps with Shearwater's Brookcourt SOC/SIEM and Mind Security AI endpoint proposition, and competes for similar UK blue-chip and EMEA enterprise budgets.
• eSentire: Pure-play MDR and managed detection services provider selling 24/7 SOC, endpoint, and ransomware protection to mid-market and enterprise customers. Closely comparable to Shearwater's SOC and Ransomcare offerings in delivery model and target buyer.
• ReliaQuest: US-headquartered MDR/MSSP platform focused on enterprise SOC modernisation with AI-driven detection across endpoint, network, cloud, and identity. Overlaps with Brookcourt's SOC and Mind Security AI endpoint positioning in mid-to-large enterprise accounts.
• NCC Group: UK-listed cybersecurity services and penetration testing firm operating in the same UK enterprise/reseller market as Shearwater. Directly comparable on pen testing (Pentest subsidiary) and managed security/assurance services, and is also AIM-listed, providing a relevant listed-MSSP comp.
• Trustwave: Global MSSP and managed detection/response provider delivering SOC, threat intelligence, DLP, and penetration testing to enterprises. Direct competitor for the same multi-product managed security RFPs Shearwater pursues, though at significantly greater scale.

Broad incumbents

• BAE Systems (Applied Intelligence): UK-headquartered defence and security incumbent with a cyber security services division serving governments and large enterprises. Overlaps with Shearwater on SOC, threat intelligence, and managed security, but operates at vastly greater scale and with sovereign/defence customer access.
• Accenture Security: Global professional services firm's cybersecurity practice delivering managed security, IAM, data protection, and advisory to large enterprises. Competes for the same multi-product enterprise security RFPs and has the global delivery scale Shearwater lacks.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/shearwater-group-plc

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A4 records

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Shearwater Group Plc