What Cyber Security Awareness (CSA) does

Cyber Security Awareness (CSA) is a UK-based managed cybersecurity awareness provider operating as a trading brand of Infosec Cloud Ltd., a private limited company registered in England and Wales (company number 06035236) and headquartered at Shoreham-by-Sea. Established in 2016 with a 7-person team, CSA targets human risk inside organisations on the premise that most modern cyber attacks and data breaches originate with employees rather than purely technical vulnerabilities. Its core managed offering, the Security Awareness Training and Testing (SATT) service, combines phishing simulation with bespoke training content created in-house, and is sold on 36-month subscription contracts with monthly Direct Debit billing (12-month terms payable upfront are also offered) and annual CPI+3.9% price escalators.

The product portfolio extends SATT with complementary managed modules: GDPR Awareness Training, Phish999 (an AI-driven email phishing protection tool integrating with Microsoft 365 and Google Workspace), CyberSIGHT dark web monitoring, V-Scan monthly vulnerability scanning, V-PenTest automated penetration testing, Managed Policy Acknowledgement (MPAS), and a QR Code Phishing simulation service. Cloud-based delivery is hosted in UK-based Tier 3 data centres, and CSA maintains ISO 27001, Cyber Essentials Plus, and IASME GDPR certifications, which function as buyer-facing trust signals.

CSA sells exclusively through direct sales (website enquiry forms and a UK-based sales team) with no reseller or marketplace presence, targeting organisations across financial services, construction, public sector, housing associations, legal, and manufacturing verticals, alongside a horizontal "organisations of all sizes" segment. The company claims global reach supported by multi-language training, though its disclosed operating geography is the UK. No revenue, funding, M&A, or leadership data is disclosed in the available material.

Name

Cyber Security Awareness (CSA)

Legal name

Infosec Cloud Ltd.

Website

https://cybersecurityawareness.co.uk

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

1–10 employees

Short description

Cyber Security Awareness (CSA) is a UK-based, 7-person managed cybersecurity awareness provider under Infosec Cloud Ltd. It delivers bespoke phishing simulation, GDPR training, AI-powered email protection (Phish999), dark web monitoring, and vulnerability scanning on multi-year subscriptions to UK organisations.

Ownership category

akta.pro rank

Product category

Cybersecurity Awareness & Human Risk Management Services

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518), Other Computer Related Services (541519)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Cloud & SaaS Security Awareness (e.g., M365/Google Workspace) (EDABAGAG)

akta.pro secondary industries

Phishing, Social Engineering & Business Email Compromise (BEC) Training (EDABAGAB), Security Awareness, Training & Compliance Attestation (HDADAIAJ), Cybersecurity Training & Awareness Programs (BPAEANAF), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)

Keywords

• Security awareness training
• Phishing simulation services
• Managed penetration testing
• Vulnerability scanning services
• Dark web monitoring

Headquarters

HQ city

Shoreham-by-Sea

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Awareness Services: Monthly subscription-based managed services for security awareness training, phishing protection, GDPR training, dark web monitoring, vulnerability scanning, and penetration testing. Services are sold on 36-month contract terms with monthly fees payable by Direct Debit, or 12-month terms with annual upfront payment.
2. Policy Acknowledgement Management: Managed service for delivering and tracking corporate policy acknowledgements. Additional policies beyond the base service may incur extra charges as defined at quotation stage.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels6 records

Core offering

Cyber Security Awareness (CSA) provides fully managed cybersecurity awareness services designed to mitigate human cyber risk within organisations. Its core offering combines phishing simulation, bespoke security awareness training, and remedial learning (SATT), augmented by an integrated suite of add-on services including AI-driven phishing email protection (Phish999), GDPR awareness training, dark web credential monitoring (CyberSIGHT), monthly vulnerability scanning (V-Scan), automated penetration testing (V-PenTest), and managed policy acknowledgement (MPAS). All services are delivered and content-created in-house by CSA's expert engineering team as bespoke, tailored solutions sold on multi-year recurring subscriptions.

Product overview

Cyber Security Awareness (CSA) offers a portfolio of fully managed cybersecurity services designed to address human risk within organisations. The core offering is the Security Awareness Training and Testing (SATT) service, which combines phishing simulation with cybersecurity training. This core service is supplemented by integrated add-on modules including Phish999 (AI-powered email phishing protection), GDPR Awareness Training, Dark Web Monitoring (CyberSIGHT), Monthly Vulnerability Scanning (V-Scan), Automated Penetration Testing (V-PenTest), Managed Policy Acknowledgement (MPAS), and QR Code Phishing Service. All services are fully managed by CSA's in-house team of expert engineers and delivered as bespoke solutions tailored to each customer. The company was established in 2016 and operates from the UK.

Differentiator

Problem solved

Functional benefit

Brands

• Phish999: Email phishing protection service combining AI technology and user awareness experience for Microsoft 365 and Google Workspace.
• CyberSIGHT
• V-PenTest
• V-Scan

Products and services

• Security Awareness Training and Testing (SATT) Fully managed phishing testing and cybersecurity training service for organisations of all sizes. Includes bespoke phishing templates, tailored training content, monthly phishing tests, and remedial training for staff who interact with simulated attacks. Designed for organisations lacking in-house resources or expertise to run awareness programmes.
• GDPR Awareness Training Fully managed online course that trains all employees on GDPR legislation, including refresher training. Delivered and reported fully for the organisation, supporting ISO 27001, Cyber Essentials Plus, and GDPR compliance evidence.
• Phish999 AI-powered email phishing protection platform integrated with Microsoft 365 and Google Workspace. Provides active warning banners on suspicious emails explaining why messages were flagged, adaptive AI learning from user input, phishing alerts, and detailed email insight reporting for organisations relying on Microsoft 365 or G Suite for email.
• Dark Web Monitoring (CyberSIGHT) Continuous dark web monitoring service that searches for stolen corporate email credentials on compromised account marketplaces. Produces comprehensive reports and real-time breach alerts when evidence of compromise is found, with a free initial report offered to prospects.
• Monthly Vulnerability Scanning (V-Scan) Always-on open port and vulnerability scanning service that continuously exposes network vulnerabilities before they can be exploited. Assessments are completed within an hour on a monthly cadence, replacing ad-hoc point-in-time scans.
• Automated Penetration Testing (V-PenTest) Fully automated monthly penetration testing service delivering reports on points of weakness and exploits within network and IT infrastructure. Replaces annual one-off penetration exercises with continuous testing to keep customers up to date on exploitable vulnerabilities.
• Managed Policy Acknowledgement Service (MPAS) Fully managed service that delivers corporate policies to employees, records acceptance, and reports evidence in detail. Provides an alternative to costly HR systems for policy acknowledgement tracking and audit trails.
• QR Code Phishing Service Phishing simulation service that mimics QR code-based phishing attacks to train employees on the rising trend of QR code scams as part of the SATT awareness programme.

Quantifiable outcome

• 40-70% of staff click malicious links in simulated phishing emails within first minute of receipt before awareness training
• +2 more outcomes

Segments7 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability1 record

Feature6 records

Scale indicators3 records

Recent moves5 records

Expansion highlights5 records

Emerging players

• Hoxhunt: AI-personalised security awareness and phishing simulation platform with measurable behaviour-change outcomes; comparable technology positioning to CSA's Phish999 with stronger analytics orientation but higher price point.

Direct peers

• Terranova Security: Security awareness training and phishing simulation vendor with GDPR, PCI and other compliance content; comparable to CSA's SATT and GDPR Awareness Training services and similar fully-managed delivery model.
• KnowBe4: Market-leading security awareness and phishing simulation platform with global customer base; directly comparable to CSA's SATT offering, but operates at vastly greater scale (thousands of customers) with similar content + simulation + compliance reporting model.
• CybSafe: UK-headquartered SaaS security awareness and behaviour analytics platform; most direct geographic competitor to CSA with overlap on training, phishing simulation and GDPR-focused content for UK SMB and mid-market buyers.
• Cofense: Phishing defence and security awareness platform combining simulated phishing tests with human-reported phishing intelligence; overlaps with CSA's Phish999 and SATT services, especially in phishing-simulation-driven training.
• Proofpoint Security Awareness: Enterprise security awareness and phishing simulation product (formerly Wombat Security) sold alongside Proofpoint's email security stack; directly competes with CSA's Phish999 and SATT offerings in regulated verticals, particularly Financial Services.
• Lucy Security: Phishing simulation and security awareness platform with content customisation and managed-service options; overlaps with CSA's SATT offering with comparable bespoke approach and multi-language content delivery.

Broad incumbents

• Sophos Phish Threat: Phishing simulation and awareness training included within the broader Sophos cybersecurity suite; competes for the same end-user training budget as CSA, particularly among small/mid-market buyers using Sophos endpoint or email products.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks5 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/channel/UCL-xwgNFNgTmaw4i_Gs_euw
• LinkedInlinkedin.com/company/cyber-security-awareness-csa
• Instagraminstagram.com/cybersecurityawarenessuk

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyber Security Awareness (CSA)