CHESS CYBERSECURITY LIMITED

What CHESS CYBERSECURITY LIMITED does

CyberLab Security Limited (formerly Chess Cybersecurity Limited; England & Wales company number 02962709), trading as 'CyberLab', is a UK-based cyber security consultancy and managed security services provider operating from six offices — Macclesfield (HQ), London, Manchester, Glasgow, Belfast and Duxford. The firm's services span CREST- and CHECK-accredited penetration testing, red teaming and purple-team exercises, 24/7 managed detection and response delivered through a Sophos Taegis-powered Security Operations Centre, Identity Threat Detection and Response (ITDR), incident response, and compliance certification across Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, PCI DSS and NIST CSF 2.0. It also implements and resells endpoint, cloud, network, gateway, SASE and Zero Trust solutions from a broad vendor stack anchored by Sophos (Titanium Status; Public Sector Partner of the Year 2026) and Microsoft.

Underlying technology comprises CREST/CHECK testing methodologies, a proprietary in-house SOC, an AI-powered risk-monitoring platform branded HackRisk (dark-web, vulnerability, attack-surface and supply-chain telemetry packaged as credit-score-style reports) and a newly launched Agentic SOC positioning for the AI era. The go-to-market is consultative enterprise field sales led by expert consultants, engineers and ethical hackers, targeting eight primary UK verticals — Finance, Healthcare, Public Sector, Emergency Services, Retail and E-Commerce, Education, Local Government and Housing Associations.

The business model is a hybrid of professional services (penetration testing, compliance audits, consultancy, incident response retainers) and recurring managed security services (SOC/MDR subscriptions, security support contracts). Pricing is bespoke and quote-based with annual billing. Revenue is split across more than 1,200 UK organisations including 350+ Public Sector bodies, 110+ Education, 100+ Financial, 75+ Retail and E-Commerce, 60+ NHS Trusts and 35+ Housing customers; the firm reports 1,500+ Cyber Essentials certificates delivered and 14,000+ hours of security testing completed in 2025 alone.

Name

CHESS CYBERSECURITY LIMITED

Legal name

CyberLab Security Limited

Website

https://chesscybersecurity.co.uk

Company type

Private

Founded year

1994

Operating status

Operating

Headcount range

1–10 employees

Short description

CyberLab Security Limited is a UK-based CREST- and CHECK-accredited cybersecurity consultancy serving 1,200+ organisations across healthcare, public sector, finance and education with penetration testing, 24/7 managed detection and response, compliance certification, and the proprietary HackRisk AI risk-monitoring platform.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Testing Laboratories and Services (54138), Other Computer Related Services (541519), Computer Systems Design and Related Services (54151)

SIC

Services-Testing Laboratories (8734), Services-Computer Programming Services (7371)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industries

Vulnerability Assessment, Security Audits & Compliance Testing (BPAKAHAG), Security Awareness, Training & Compliance Attestation (HDADAIAJ)

Keywords

• Penetration testing
• Managed detection response
• Vulnerability assessment
• Cyber essentials certification
• Security operations centre

Headquarters

HQ city

Macclesfield

HQ country

United Kingdom

HQ region

Europe

Offices6 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring managed security services including SOC monitoring, MDR, and security support contracts
2. Professional Security Consulting: Consultancy services including penetration testing, red teaming, security posture assessments, incident response, and compliance consulting
3. Compliance Certification Services: Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, PCI DSS, and NIST CSF 2.0 assessment and certification services
4. Security Solution Resale: Resale and implementation of security solutions including endpoint, cloud, network, and gateway security from vendor partners

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels10 records

Core offering

CyberLab Security Limited provides expert-led cyber security consultancy and managed security services to UK organisations, including CREST- and CHECK-accredited penetration testing, 24/7 Managed Detection and Response (MDR) delivered through the Sophos Taegis platform, Security Operations Centre (SOC) monitoring, incident response, red teaming, and vulnerability assessments. The firm also serves as a certification body for Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, PCI DSS, and NIST CSF 2.0 compliance, and offers a proprietary AI-powered cyber risk monitoring platform called HackRisk.

Product overview

CyberLab Security Limited (formerly Chess Cybersecurity Limited) is a CREST-, CHECK-, and NCSC-accredited cyber consultancy and managed service provider offering a comprehensive portfolio of security services. The core offering comprises expert-led penetration testing (accredited by CREST and CHECK), compliance certification services (Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance, PCI DSS, NIST CSF 2.0), and 24/7 managed detection and response through Sophos MDR partnership. The proprietary HackRisk platform provides AI-powered cyber risk monitoring with dark web scanning, vulnerability scanning, attack surface monitoring, and supply chain security capabilities. Additional services include Security Operations Centre (SOC), incident response, red teaming, vulnerability assessment, cloud security, zero trust solutions, SASE, ransomware protection, and specialized sector-focused solutions for finance, healthcare, public sector, emergency services, retail, education, housing, and local government. The portfolio is delivered through a consultative approach with 30+ years of combined expertise, supporting over 1,200 UK organizations.

Differentiator

Problem solved

Functional benefit

Products and services

• Penetration Testing CREST- and CHECK-accredited penetration testing services identifying vulnerabilities across infrastructure, web applications, cloud environments, and human factors before exploitation by attackers. Targeted at UK organisations requiring accredited security testing.
• Sophos Managed Detection and Response (MDR) Managed Detection and Response service delivered in partnership with Sophos, providing 24/7 real-time environment monitoring, threat response, and global threat intelligence via the Sophos Taegis platform. Targeted at organisations without round-the-clock in-house SOC coverage.
• Security Operations Centre (SOC) AI-powered Security Operations Centre providing visibility and governance over the cyber landscape, with always-on monitoring and incident response capabilities. Targeted at organisations requiring round-the-clock security operations without building in-house capability.
• Incident Response Cyber incident response services including tabletop exercises, purple team engagements, social engineering tests, and incident response planning to build organisational capability. Targeted at organisations needing readiness validation and breach response support.
• Cyber Essentials Certification Cyber Essentials certification body service guiding organisations from initial assessment through certification. Targeted at UK organisations seeking the NCSC-backed baseline cyber security certification.
• Cyber Essentials Plus Certification Advanced Cyber Essentials Plus certification with hands-on technical verification, covering vulnerability scanning and security configuration validation. Targeted at organisations requiring a higher-assurance UK government-backed certification.
• PCI DSS Consultancy Payment Card Industry Data Security Standard consultancy helping organisations achieve and maintain PCI DSS compliance. Targeted at retailers, financial institutions, and any organisation handling payment card data.
• NIST CSF 2.0 Assessment

Quantifiable outcome

• Trusted by 1,200+ organisations across the UK
• +8 more outcomes

Named customers13 records

Segments8 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability6 records

Feature4 records

Partnerships

Ten partnerships are on record, tiered core and secondary.

• SophoscoreTechnology or IntegrationSophos is a key technology partner providing the MDR (Managed Detection and Response) platform. CyberLab holds Sophos Titanium Status and was named Sophos Public Sector Partner of the Year 2026. They deliver Sophos Taegis MDR services with 24/7 monitoring backed by Sophos global threat intelligence.
• MicrosoftcoreTechnology or IntegrationMicrosoft is a key vendor partner for cloud and productivity security solutions. CyberLab offers Microsoft 365 Security Assessment services.
• ProofpointcoreTechnology or IntegrationProofpoint is a vendor partner for email security and data protection solutions.
• VicariuscoreTechnology or IntegrationVicarius is a vendor partner for vulnerability assessment and protection solutions.
• ForcepointsecondaryTechnology or IntegrationForcepoint is a vendor partner listed for security solutions.
• ForescoutsecondaryTechnology or IntegrationForescout is a vendor partner for device security and network security solutions.
• MimecastsecondaryTechnology or IntegrationMimecast is a vendor partner for email security and continuity solutions.
• SecurEnvoysecondaryTechnology or IntegrationSecurEnvoy is a vendor partner for secure authentication solutions.
• EgresssecondaryTechnology or IntegrationEgress is a vendor partner for email security and data loss prevention.
• GuardsixcoreTechnology or IntegrationGuardsix (formerly Logpoint) is a technology partner for SIEM and security analytics solutions. CyberLab announced the Logpoint becoming Guardsix rebrand to customers.

Scale indicators5 records

Recent moves7 records

Expansion highlights6 records

Others

• F-Secure (legacy consumer business): Consumer and SMB endpoint security vendor; relevant as adjacent to the security vendor ecosystem CyberLab partners with (Sophos, Microsoft, Proofpoint), and as a potential partner or competitive reference point for MDR delivery.
• Sophos: Primary technology partner whose Taegis MDR platform underpins CyberLab's managed detection offering; also a competitor in the MSSP/marketplace layer and therefore a strategically dual-edged comparable.

Direct peers

• NCC Group: UK-headquartered cyber security and resilience firm offering CREST-accredited penetration testing, managed detection and response, and compliance services to large enterprises and public sector — directly comparable to CyberLab across pen testing, MDR and UK regulated customer base.
• Bridewell: UK-based cyber security consultancy delivering managed detection and response, penetration testing, and compliance services across CNI, financial services and public sector — overlapping with CyberLab's core services and UK regulated vertical mix.
• DigitalXRAID: UK-based managed security services provider offering SOC, MDR, pen testing and compliance services to mid-market and public sector — directly comparable to CyberLab across the UK MSSP/pen testing stack.
• WithSecure (formerly F-Secure): European-headquartered cyber security vendor offering managed detection and response, vulnerability management and pen testing services to mid-market and enterprise customers — comparable to CyberLab's MDR/SOC and vulnerability assessment capabilities.

Broad incumbents

• CrowdStrike: Global MDR/EDR platform incumbent competing for the same managed detection and 24/7 SOC spend that CyberLab delivers via Sophos Taegis; relevant as both a competitive threat and a possible future partner.
• BAE Systems Applied Intelligence: Large defence-grade cyber security and intelligence business offering managed security, compliance and pen testing primarily to government and regulated enterprises in the UK — competes with CyberLab for the same public-sector and financial-services wallet.
• Deloitte UK Cyber Risk: Big-4 cyber consulting practice delivering managed detection, pen testing and regulatory programmes to UK and global clients — comparable as a large incumbent CyberLab competes against for enterprise mandates.
• PwC UK Cyber Practice: Big-4 cyber advisory offering pen testing, managed security, compliance and incident response to large UK enterprises and public sector — competes with CyberLab for higher-end engagements and reference deals.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xtiktok.com/@cyberlab_
• YouTubeyoutube.com/@CyberLabUK
• LinkedInlinkedin.com/company/cyberlabconsulting
• Instagraminstagram.com/cyberlabpeople

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CHESS CYBERSECURITY LIMITED