Salus

What Salus does

Salus (legal entity Salus Digital Security Limited) is a UK-based cybersecurity consultancy headquartered in Cheltenham, the self-described 'cyber-capital of the United Kingdom'. Founded in 2017, the company delivers a comprehensive portfolio of cybersecurity services organised across five categories: Advisory and Strategy (including CISO as a Service, cyber security roadmaps, network architecture, and AI advisory); Assurance and Compliance (ISO 27001, NIST frameworks, PCI DSS QSA, Defence Cyber Certification, data protection, and policy development); Incident and Response (incident response, forensics, exercising, and business continuity); Security Operations Centre (managed SOC, managed SIEM, MDR, XDR, EDR, threat intelligence, and SOC maturity assessment); and Penetration Testing (including Penetration Testing as a Service, AI penetration testing, cloud security, red teaming under the NCSC CyAS scheme, and social engineering). The company operates with 11-50 employees and is founder-owned and bootstrapped, with no disclosed venture capital or private equity backing.

The firm's competitive positioning is anchored by NCSC-backed CHECK accreditation (achieved September 2021) and CREST international accreditation (achieved August 2021), which collectively authorise Salus to conduct penetration testing and IT health checks on UK public sector and Critical National Infrastructure systems — a regulatory prerequisite that excludes non-accredited competitors. Supporting certifications include ISO 27001 (information security management), ISO 9001 (quality management), Cyber Essentials Plus, Defence Cyber Certification Level 1, and NCSC Cyber Advisor Assessment Provider status. Salus serves clients across Government (DEFRA, Companies House), Defence (an unnamed Global Defence Prime), Sports and Entertainment (West Ham United FC under a multi-year Official Cyber Security Partnership), Financial Services (Shaype), Healthcare (Festival Medical Services), Education (University of Gloucestershire), and non-profit sectors (The Nelson Trust).

Salus generates revenue primarily through bespoke, project-based professional services engagements scoped per client requirements, supplemented by recurring managed services revenue (managed SOC, MDR, EDR, XDR, SIEM). Pricing is quote-based and not publicly disclosed; engagements are contracted on multi-year bases. Distribution is conducted via direct enterprise field sales through the company website, phone, and email channels, with no apparent reseller or self-service motion. Geographic operations are confined to the United Kingdom, where the website is explicitly directed. A 2021 strategic alliance with RSM (a leading audit, tax, and consulting firm) extends channel reach into RSM's enterprise client base. Marketing relies on content (Insights blog), industry event presence (CyberUK 2025), and high-visibility partnership marketing through the West Ham United relationship at London Stadium.

Name

Salus

Legal name

Salus Digital Security Limited

Website

https://saluscyber.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

Salus is a UK-based, founder-owned cybersecurity consultancy headquartered in Cheltenham, delivering CHECK and CREST-accredited penetration testing, managed SOC, advisory, compliance, and incident response services to Government, Defence, and enterprise clients.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting & Managed Security Services

NAICS

Computer Facilities Management Services (541513), Security Systems Services (56162)

SIC

Services-Business Services, Nec (7389)

akta.pro primary industry

Remote Monitoring & Management (RMM) Services (BPAEABAA)

Keywords

• Cybersecurity services
• Penetration testing
• Security operations centre
• Incident response
• Compliance advisory

Headquarters

HQ city

Cheltenham

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Cybersecurity Consulting Services: Advisory and strategy services including CISO as a Service, cyber security roadmaps, network architecture, and secure by design consulting
2. Assurance and Compliance Services: Compliance services including ISO 27001 certification support, NIST frameworks, PCI DSS QSA services, data protection, policy development, and security awareness training
3. Penetration Testing Services: Comprehensive penetration testing including application testing, infrastructure testing, cloud security, AI penetration testing, red teaming (CyAS), social engineering, and vulnerability management. Delivered via PTaaS model
4. Managed SOC Services: Ongoing managed security operations centre services including MDR, EDR, XDR, managed SIEM, managed hybrid SOC, and threat intelligence
5. Incident Response Services: Incident response, incident forensics, incident response exercising, and business continuity & disaster recovery planning

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels5 records

Core offering

Salus is a cybersecurity consultancy delivering five core service lines: Advisory & Strategy (including CISO-as-a-Service and security roadmaps), Assurance & Compliance (ISO 27001, NIST, PCI DSS, DCC), Incident & Response, managed Security Operations Centre (SOC) services, and Penetration Testing. Services are tailored, scoped per engagement, and delivered to UK enterprises, government departments, defence contractors, and critical national infrastructure operators.

Product overview

Salus is a cybersecurity consultancy offering a comprehensive portfolio of advisory, assurance, incident response, SOC, and penetration testing services. The service structure consists of five main categories: Advisory & Strategy (including AI advisory, CISO as a Service, and security roadmaps), Assurance & Compliance (including ISO 27001, NIST frameworks, PCI DSS, and data protection), Incident & Response (including incident response, forensics, and business continuity), Security Operations Centre (SOC) services (including managed SOC, SIEM, MDR, XDR, and threat intelligence), and Penetration Testing (including PTaaS, AI pen testing, cloud security, and red teaming). The company is headquartered in Cheltenham, UK, and serves clients across multiple industries including sports (West Ham United), government (DEFRA, Companies House), education (University of Gloucestershire), and finance (Shaype).

Differentiator

Problem solved

Functional benefit

Products and services

• Advisory & Strategy Strategic cybersecurity advisory covering CISO-as-a-Service, AI advisory, cyber security roadmaps, cyber security strategies, network architecture, secure-by-design consulting and general cyber consultancy for organisations building or maturing their security posture.
• Assurance & Compliance
• Incident & Response
• Managed Security Operations Centre (SOC)
• Penetration Testing

Quantifiable outcome

• 30% annual reduction in cyber vulnerabilities at West Ham United
• +1 more outcomes

Named customers9 records

Segments6 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

Five partnerships are on record, tiered core and minor.

• West Ham UnitedcoreStrategic or Co-development Partner · 19 July 2024Salus serves as Official Cyber Security Partner to West Ham United FC. Partnership began in 2024 and expanded multi-year in September 2025. Services include penetration testing, NIST consultancy, data privacy enhancements, cyber training, and managed security solutions. Salus branding appears on match-day LED systems at London Stadium and club digital platforms. Partnership has delivered measurable results: 30% annual reduction in cyber vulnerabilities and 40% faster remediation turnaround.
• ShaypecoreStrategic or Co-development PartnerShaype is a trusted partner receiving CISO services and strategic security advisory from Salus. Salus advises on all strategic security decisions and provides expertise that enriches the organisation's security professionals.
• University of GloucestershirecoreStrategic or Co-development PartnerUniversity of Gloucestershire is a trusted partner receiving cybersecurity services and support from Salus.
• Companies HousecoreStrategic or Co-development PartnerCompanies House is a trusted partner receiving cybersecurity services from Salus.
• RSMminorStrategic or Co-development PartnerStrategic alliance announced in 2021 with leading audit, tax and consulting firm RSM. Collaboration expands Salus service reach through RSM's existing client relationships.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SureCloud: UK-based provider of cybersecurity services and GRC platforms including penetration testing, compliance (ISO 27001, PCI DSS) and managed security — overlapping directly with Salus's assurance, compliance and pen testing lines.
• NCC Group: UK-listed cybersecurity consultancy with deep CHECK/CREST accreditation heritage and a comparable portfolio of penetration testing, managed detection and incident response services for government and enterprise customers. Direct competitor in the same niche Salus serves.
• Pentest People: UK-based penetration testing specialist with a PTaaS delivery model, CREST and CHECK accreditations, and a similar mid-market/enterprise customer base. Direct competitor for offensive security engagements.
• F-Secure (WithSecure): European cyber security provider combining managed detection and response services with offensive security capabilities. Comparable in offering managed SOC plus penetration testing to mid-market and enterprise customers.
• Bridewell: UK-headquartered cyber security consultancy offering CHECK-accredited penetration testing, managed SOC, and cyber advisory across CNI, financial services and government — overlapping directly with Salus's service lines and target customers.
• Cyberis: UK cyber security consultancy offering penetration testing, managed security services, and incident response with CREST accreditation. Operates in the same UK mid-market and enterprise niche as Salus.

Broad incumbents

• Accenture Security: Global consultancy's cyber security practice offering managed security, pen testing and compliance at scale. Competes with Salus for large enterprise and government customers and often sub-contracts smaller UK firms.
• BAE Systems Applied Intelligence: Global defence prime's cyber arm offering large-scale managed security, threat intelligence, and CHECK/CREST-accredited services to UK government and CNI. Larger incumbent competing for many of the same public-sector contracts Salus targets.
• CrowdStrike: Global endpoint security and MDR platform leader whose services and partner ecosystem compete with parts of Salus's SOC and pen testing portfolio, particularly at the larger enterprise and public-sector end of the market.

Emerging players

• Arctic Wolf: Fast-growing MDR provider with a UK presence, offering managed SOC capabilities that overlap with Salus's managed SOC, MDR and SIEM services for SMEs and mid-market customers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/salus-cyber

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Salus