CYBILITY CONSULTING LTD

What CYBILITY CONSULTING LTD does

Cybility Consulting Ltd is a UK-based cybersecurity consultancy founded in 2021 by Michala Liavaag and headquartered in London (registered office 27 Old Gloucester Street, WC1N 3AX). The firm operates a boutique, founder-led model with a stated headcount of 1–10, organised around three service pillars: (i) CybilityXP Live and CybilityXP Culture Chorus interactive cybersecurity training and security-culture programmes; (ii) Virtual CISO (vCISO) fractional CISO advisory on annual subscription and CISO Advisor ad-hoc Power Hour consultancy in call-off packages; and (iii) the Amply Assuring Assessor™ independent gap-analysis service against frameworks including NIST CSF, ISO 27001, Cyber Essentials, NCSC CAF, IASME Cyber Assured, and NHS DSPT. Underlying delivery is built on proprietary, unregistered common-law methodologies — The Cybersecurity Conductor's Companion™ (six-pillar resilience methodology plus Pragmatic Protection Protocol 6As), H.A.C.C.E.R.™ training principles, CyberDeck8D™ and CSIRTxp™ gamified crisis-rehearsal tools — supported by a Cybility Savvy podcast (29+ episodes) and a small Shopify merchandise store (the Cybility Collection).

The company sells directly to UK organisations — primarily C-suite executives, boards, and senior managers seeking cybersecurity leadership without a full-time CISO, plus charities, IT MSPs and consultancies (e.g., Layer7, PS Tech) that need complementary GRC and training services. Go-to-market is consultative and sales-led, with a free discovery call booking flow via the website, supplemented by event-driven and community-led motions anchored by the founder's speaking, podcasting and community roles (Charity IT Leaders SIG co-chair, South East Cyber Resilience Centre advisory board, NCSC CyberFirst Associate, Cisco Speaker 2023). Revenue is generated from professional-services training, recurring subscription advisory (vCISO annual, CISO Advisor multi-year call-off), structured mentoring, framework-based assessments, and a minor hardware-sales stream from the Cybility Collection; pricing is quote-based and not publicly disclosed. Recognised credentials include Crown Commercial Service supplier status, Living Wage Employer, Disability Confident Committed, and the GamiCon '26 award for Best Overall Use of Gamification in learning.

Name

CYBILITY CONSULTING LTD

Legal name

Cybility Consulting Ltd

Website

https://cybility.co.uk

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

1–10 employees

Short description

Cybility Consulting Ltd is a London-based, bootstrapped cybersecurity consultancy (founded 2021, 1–10 staff) selling gamified training, fractional Virtual CISO advisory, and framework-based gap-analysis services to UK executives, charities, and IT service providers.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting and Training Services

NAICS

Other Scientific and Technical Consulting Services (54169)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Cybersecurity & Identity Consulting (BPAHAEAG)

Keywords

• Cybersecurity consulting
• Security awareness training
• Virtual CISO services
• Incident response training
• Cybersecurity assessments

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. Cybersecurity Training & Workshops: Engaging live online or on-site training sessions delivered to organisations. Includes Level 1 Awareness for All, Incident Response Plan Workshop, and Incident Response Exercises. Sold as stand-alone sessions or packaged programmes. Education & Training format is 1-2 hours for 6-15 participants; workshops run half-day or full-day.
2. Virtual CISO (vCISO): Fractional CISO service providing experienced security leadership on an annual subscription basis. Provides strategy creation and implementation drive for organisations that lack a full-time CISO budget.
3. CISO Advisor (Power Hour): Ad-hoc consultancy service offering expert CISO advice in call-off packages and subscriptions. Available from as little as one hour up to four at a time. Affordable call-off packages and subscriptions provide expert advice as and when needed.
4. Mentoring Services: Structured mentoring for individuals transitioning into cybersecurity and for organisations looking to close the skills gap. Offered for individuals and organisations.
5. Cybersecurity Assessments & Gap Analysis: Amply Assuring Assessor service providing independent verification against frameworks including ISO 27001, NIST CSF, NCSC CAF, Cyber Essentials, IASME Cyber Assured, NHS DSPT. Includes table-top exercises and simulations.
6. Retail (The Cybility Collection): Sale of branded merchandise including Cyber Toon Tips Mouse Mats and other physical products through the Cybility Collection online store (cybility.myshopify.com).

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels8 records

Core offering

Cybility Consulting provides cybersecurity consultancy, advisory, and training services to UK organisations. Core offerings include Virtual CISO (vCISO) fractional leadership, CISO Advisor ad-hoc consultancy, gamified cybersecurity awareness training (CybilityXP Live and Culture Chorus), incident response workshops and exercises, independent assurance assessments against frameworks such as NIST CSF and ISO 27001, and structured mentoring for cybersecurity career transition.

Product overview

Cybility Consulting Ltd is a UK-based cybersecurity consultancy offering a portfolio of training, advisory, and assessment services organized around gamification and playful learning approaches. The core offerings include CybilityXP Live and CybilityXP Culture Chorus (interactive training services), The Cybersecurity Conductor's Companion™ framework (a six-pillar methodology for cyber resilience), and the H.A.C.C.E.R. principles (behavior change methodology). Advisory services encompass Virtual CISO (fractional CISO) and CISO Advisor (power hour consultancy), while assessment services include Amply Assuring Assessor™ for framework-based gap analysis. Supporting products include CyberDeck8D™ and CSIRTxp™ (gamified training tools), a suite of interactive cybersecurity games, mentoring services, and the Cybility Savvy podcast. The company differentiates through gamification and playfulness, with services delivered live online or on-site.

Differentiator

Problem solved

Functional benefit

Brands

• CybilityXP: Playful approach to reducing human risk through engaging training experiences.
• The Cybersecurity Conductor's Companion™
• H.A.C.C.E.R.
• Cybility Savvy
• CSIRTxp™ (Cyber Security Incident Response Team eXPerience)
• CyberDeck8D™
• Amply Assuring Assessor™
• Cybility Collection

Products and services

• Virtual CISO (vCISO) Fractional CISO service providing experienced cybersecurity leadership on an annual subscription basis. Creates and drives implementation of security strategy for organisations that cannot afford a full-time CISO.
• CISO Advisor (Power Hour) Ad-hoc consultancy offering expert CISO advice in affordable call-off packages and subscriptions, available from one to four hours at a time for organisations needing flexible access to senior cybersecurity leadership.
• CybilityXP Live Training Live interactive cybersecurity training delivered online or on-site, featuring gamified learning experiences designed to change employee behaviour and reduce human-factor security risk. Sold as stand-alone sessions or packaged programmes with three tailoring levels (Basic, Standard, Enhanced) for in-house delivery.
• CybilityXP Culture Chorus Cost-effective training solution delivered by cybersecurity and adult education consultants to help organisations adopt a security-risk mindset and integrate safer practices into their culture through a choir-based metaphor.
• Level 1 Awareness For All Foundational cybersecurity awareness training session designed for all staff members regardless of technical knowledge, delivered as a 1–2 hour engagement for 6–15 participants.
• Incident Response Plan Workshop Half-day or full-day workshop helping organisations investigate and plan their incident response ahead of a crisis, run by Cybility consultants.
• Incident Response Exercise Tabletop exercises and simulations that test and improve organisational incident response capabilities, delivered live online or on-site.
• Amply Assuring Assessor™ Independent cybersecurity assessment service that evaluates organisations against industry frameworks including NIST CSF, ISO 27001, Cyber Essentials, NCSC CAF, IASME Cyber Assured, and NHS DSPT, producing plain-English recommendations. Includes table-top exercises and simulations.
• Mentoring Services Structured mentoring for individuals transitioning into cybersecurity and for organisations looking to close skills gaps, offered through Mentoring for Individuals and Mentoring for Organisations programmes.
• CyberDeck8D™ Gamified card-deck tool for cybersecurity training and crisis rehearsal, enabling leaders to practise real-world decisions in a safe, game-like space. Designed and created by Cybility.
• CSIRTxp™ (Cyber Security Incident Response Team eXPerience) Gamified crisis rehearsal experience where leadership teams practise real-world incident response decisions in a safe environment without impacting live systems. Winner of GamiCon '26 Throwdown Showcase for Best Overall Use of Gamification.

Quantifiable outcome

• 74% of security incidents are due to the human factor — organisations need to invest in people and processes as well as technology
• +2 more outcomes

Named customers4 records

Segments4 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Partnerships

Four partnerships are on record, tiered supporting and core.

• Layer7supportingImplementation/ SI/ Consulting PartnerLayer7, an established cybersecurity consultancy, engaged Cybility's Amply Assuring Assessor service to perform a NIST CSF gap analysis for one of their clients. Cybility provides complementary GRC and training services to Layer7's technical cybersecurity offerings.
• PS TechsupportingImplementation/ SI/ Consulting PartnerPS Tech, an IT managed service provider, engaged Cybility's Amply Assuring Assessor service to perform a NIST CSF gap analysis for their charity sector client. Cybility provides complementary GRC and training services to PS Tech's managed IT services offering.
• South East Cyber Resilience CentrecoreStrategic or Co-development PartnerCybility is a partner of the South East Cyber Resilience Centre. Founder Michala Liavaag serves on the centre's advisory board, contributing to the region's cyber resilience mission and building trust and referral networks.
• Charity IT Leaders (CITL)coreStrategic or Co-development PartnerMichala co-chairs the CITL Cybersecurity Special Interest Group (SIG) alongside Phillip Edwards and Neil Edmonds. The SIG provides a space for IT and digital leaders in the charity sector to share challenges and strengthen cyber resilience. Michala also speaks at CITL's annual conference.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Hut Six: UK-based security awareness training provider focused on engaging, non-technical content for organisations. Comparable positioning to Cybility's human-centric, behaviour-change-led training philosophy.
• KnowBe4: Market-leading security awareness training and simulated phishing platform. Directly comparable to Cybility in targeting the human-factor risk problem, but at vastly greater scale and with a SaaS delivery model rather than live workshops.
• MetaCompliance: Security awareness, phishing, and policy management platform serving mid-market and public-sector buyers in the UK and Europe. Comparable product-led approach to human-risk reduction, with a broader SaaS stack than Cybility's workshop model.
• CybSafe: UK-based, behaviour-led security awareness and human risk platform. Closest direct competitor to Cybility in geography, customer base (UK mid-market), and emphasis on measurable behaviour change rather than compliance training.
• The Security Company (TSC): UK provider of security awareness training, e-learning, and phishing simulations for SMEs and charities. Comparable offering, comparable UK SMB/charity customer base, and similar mid-tier scale to Cybility.
• The Defence Works: UK-focused security awareness and training provider offering staff training, phishing simulations, and compliance content. Direct peer in targeting UK organisations with engaging, non-checkbox awareness programmes.
• Bridewell: UK cybersecurity consultancy providing advisory, managed security, and assurance services to critical infrastructure and regulated sectors. Comparable UK cyber consultancy footprint to a scaled-up Cybility, though much larger and broader in scope.

Broad incumbents

• NCC Group: Large UK-headquartered cybersecurity consultancy offering advisory, assurance, managed detection, and incident response. Comparable UK cyber consultancy domain but operates at enterprise scale with a much broader portfolio than Cybility's people-risk focus.
• SANS Institute: Global, established cybersecurity training and certification organisation. Overlaps with Cybility's training and awareness mission but at vastly larger scale, with formal certifications rather than bespoke workshops.

Emerging players

• Phished: Behavioural security awareness and phishing simulation platform targeting European SMEs. Comparable in human-risk focus and modern UX, though product-led rather than workshop-led like Cybility.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@cybility
• Facebookfacebook.com/cybilityconsulting
• LinkedInlinkedin.com/company/cybilityconsulting
• Instagraminstagram.com/michalacybilityconsulting

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CYBILITY CONSULTING LTD