What HEXIOSEC LIMITED does

Hexiosec Limited is a privately-held UK cyber security company, founded in 2018 and headquartered in Cheltenham, that was rebranded from RMT to Hexiosec in September 2024. The company develops and operates a portfolio of three interconnected products: Hexiosec ASM, an External Attack Surface Management platform that continuously scans internet-facing assets (domains, IPs, mail/web configurations such as SPF, DKIM, DMARC, MTA-STS) and exposes vulnerabilities, misconfigurations and risks via a public OpenAPI plus dashboards; Hexiosec Transfer, a secure file-transfer service offering true end-to-end encryption (AES-256) where even the vendor cannot decrypt file contents, organised around Files, Spaces and Forms modules; and Hexiosec Services, providing cyber security and digital-transformation consulting. All products are positioned as UK-sovereign, with data hosted within the UK and built by engineers drawn from UK Security and Defence sectors.

Hexiosec monetises through tiered subscription licensing for ASM (Free, Premium, Enterprise, MSP) and Transfer (Free, paid tiers), augmented by professional services revenue from cyber and DTX engagements and by channel partnerships with Managed Service Providers. Distribution combines a self-serve free-trial PLG funnel, an enterprise field-sales motion with request-a-demo CTAs, an MSP partner programme for resellers, and a marketplace listing through Jisc's Chest platform for the UK higher-education sector. Customer logos span UK central government, NHS, Formula 1 teams, BP, IONOS, Haas Automation, Which?, and smaller charities and tech firms, with certifications including NCSC Cyber Essentials and Cyber Essentials Plus, Crown Commercial Service, Home Office ACE framework, and JOSCAR registration.

The company holds NCSC Active Cyber Defence 2.0 Partner status — being one of ten providers selected to trial against the NCSC's EASM specification — and has positioned Hexiosec ASM as a direct replacement for the NCSC's retired Web Check and Mail Check services. Co-founders David Griffiths (CEO) and Rob Stemp lead a team including an Engineering Team Lead and Product Manager, with no disclosed external funding, revenue figures or headcount, indicating a bootstrapped founder-led SME with multiple public-sector procurement credentials rather than a venture-backed scale-up.

Name

HEXIOSEC LIMITED

Legal name

Hexiosec Limited

Website

https://hexiosec.com

Company type

Private

Founded year

2018

Operating status

Operating

Short description

Hexiosec Limited is a UK-based cyber security company offering Hexiosec ASM (External Attack Surface Management), Hexiosec Transfer (secure file transfer with true end-to-end AES-256 encryption), and Hexiosec Services (cyber consulting), serving UK government, defence, higher education, healthcare, legal and financial-services customers through direct, MSP and Jisc Chest channels.

Ownership category

akta.pro rank

Product category

Cybersecurity Software

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Attack Surface Management (EASM/CAASM) (HDADAHAC)

akta.pro secondary industry

Email Phishing & BEC Protection (HDADAKAB)

Keywords

• External attack surface management
• Secure file transfer
• Cyber security consulting
• Cloud asset discovery
• Vulnerability scanning

Headquarters

HQ city

Cheltenham

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Hexiosec ASM Subscription: Attack Surface Management platform offered across multiple licensing tiers (Free, Premium/paid tiers, Enterprise, MSP). Pricing increases with plan tier reflecting attack surface complexity of different organisation sizes. Additional fees may be charged for new features or functionality.
2. Hexiosec Transfer Subscription: Secure file transfer with end-to-end encryption, offered in free and paid tiers. Paid tiers provide additional user accounts and features. Available through direct purchase and Jisc Chest platform for education sector.
3. Cyber Security and DTX Services: Professional services encompassing digital transformation and cyber security consulting engagements, helping organisations strengthen security posture.

Pricing tiers

Go-to-market motion4 records

Distribution channels4 records

Marketing channels8 records

Core offering

Hexiosec develops and sells UK-sovereign cyber security software products including Hexiosec ASM, an External Attack Surface Management platform that continuously scans and monitors internet-facing assets for vulnerabilities, and Hexiosec Transfer, a secure file transfer platform with true end-to-end AES-256 encryption. The company also delivers cyber security and digital transformation consulting services through Hexiosec Services.

Product overview

Hexiosec is a UK-based cyber security company offering a portfolio of three interconnected products: (1) Hexiosec ASM - an External Attack Surface Management platform providing continuous monitoring of internet-facing assets, vulnerability detection, risk management, and cloud asset discovery across AWS/Azure/GCP; (2) Hexiosec Transfer - a secure file transfer platform with true end-to-end encryption (AES-256) for organisations sharing sensitive data, featuring Files, Spaces, and Forms modules; and (3) Hexiosec Services - cyber security consulting encompassing secure onboarding, compliance, virtual data rooms, digital transformation, and third-party risk assessment. All products are UK-sovereign and designed for organisations needing visibility of cyber risk exposure and secure data exchange.

Differentiator

Problem solved

Functional benefit

Brands

• Hexiosec ASM: External Attack Surface Management solution that provides visibility of online attack surface and vulnerability scanning for organisations.
• Hexiosec Transfer
• Hexiosec Services

Products and services

• Hexiosec ASM External Attack Surface Management (EASM) solution that scans and monitors an organisation's online attack surface, providing visibility of internet-facing assets, vulnerability detection, risk management with prioritised findings, and actionable remediation advice. Available in Free, Premium, Enterprise, and MSP tiers with daily scanning and OpenAPI-based public API access.
• Hexiosec Transfer Secure file transfer platform with true end-to-end AES-256 encryption where files are encrypted before leaving the sender's device and remain inaccessible to the platform itself. Offers Files (one-off transfers), Spaces (collaborative workspaces), and Forms (recipient file requests) modules with UK data sovereignty.
• Hexiosec Services Cyber security and digital transformation (DTX) consulting engagements including secure onboarding, compliance advisory, zero-knowledge virtual data rooms, technical due diligence, and third-party supply chain risk assessment, delivered by practitioners with government and defence backgrounds.

Quantifiable outcome

• Hexiosec ASM provides actionable insights with clear remediation advice for identified vulnerabilities and risks, enabling organisations to start improving security posture immediately.
• +2 more outcomes

Named customers13 records

Segments7 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration10 records

AI capability4 records

Feature7 records

Partnerships

Eight partnerships are on record, tiered core, flagship and minor.

• JisccoreChannel Partner/ Reseller/ Distributor · 1 May 2025Hexiosec Transfer is available for purchase through Jisc's Chest platform offering exclusive discounts and contract terms to Chest member institutions. This enables UK higher education institutions to procure Hexiosec Transfer through their existing Jisc membership. Hexiosec also collaborated with Jisc on a webinar about secure file transfer for UK higher education. The partnership was announced in May 2025.
• National Cyber Security Centre (NCSC)flagshipStrategic or Co-development Partner · 1 October 2024Hexiosec was selected as 1 of 10 providers to contribute practical EASM experience to the NCSC's Active Cyber Defence (ACD) 2.0 External Attack Surface Management activity. They worked alongside NCSC's public and private sector customers during trials, gathering feedback and refining their platform. Their experience informed the NCSC's official EASM buyer's guide. Hexiosec ASM aligns strongly with the core capabilities the NCSC recommends for EASM product selection.
• SynackminorStrategic or Co-development PartnerSynack logo displayed on Hexiosec website among clients and partners, suggesting an established working relationship or mutual customer relationship in the cyber security space.
• NHSminorOthersNHS logo shown among clients and partners on Hexiosec website.
• UK GovernmentcoreOthersUK Government logo shown among clients and partners on Hexiosec website. Listed on Crown Commercial Service procurement frameworks and ACE procurement framework.
• MSP Partner NetworkcoreChannel Partner/ Reseller/ DistributorPartner programme for Managed Service Providers to manage the security of their clients' businesses using Hexiosec ASM. MSPs can manage multiple customer scans with dedicated scan types and configurable scheduling.
• Crown Commercial ServicecoreOthersListed on Crown Commercial Service procurement frameworks enabling UK public sector organisations to procure Hexiosec products through government procurement channels.
• Home Office Accelerated Capability EnvironmentcoreOthersListed on Home Office's Accelerated Capability Environment (ACE) procurement framework, enabling procurement by government bodies for advanced cyber security capabilities.

Scale indicators5 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• Microsoft Defender EASM: Microsoft Defender External Attack Surface Management is a native EASM offering tightly integrated with the Defender and Azure ecosystems. It competes with Hexiosec ASM particularly for UK and global enterprise customers already standardised on Microsoft security tooling, often bundled into broader enterprise agreements.
• CrowdStrike: CrowdStrike Falcon Surface is an EASM module within the broader Falcon cybersecurity platform. CrowdStrike is a broad incumbent selling into the same UK and global enterprise accounts as Hexiosec, with ASM positioned as part of a larger endpoint, identity, and cloud security suite.
• Rapid7: Rapid7 offers ASM capabilities alongside its vulnerability management, SIEM, and managed detection and response portfolio. It is a broad incumbent serving the same mid-market and enterprise security teams as Hexiosec, competing for ASM budget as part of integrated security platform deals.
• Tenable: Tenable is a large incumbent vulnerability management platform with Tenable.asm (formerly CyCognito) for external attack surface management. It overlaps directly with Hexiosec ASM but bundles ASM within a much broader exposure management portfolio, serving the same enterprise security buyers with significantly greater scale.
• Palo Alto Networks: Palo Alto Networks' Cortex Xpanse provides External Attack Surface Management as part of its broader Cortex security platform. It competes with Hexiosec ASM for the same enterprise and government buyers but typically as part of a multi-product platform sale rather than a standalone ASM specialist.

Direct peers

• SecurityScorecard: SecurityScorecard is an attack surface management and cyber risk ratings provider focused on discovering external assets, monitoring vulnerabilities, and scoring third-party risk. It is a direct peer to Hexiosec ASM in category and target buyer, with strong overlap in supply chain risk monitoring use cases.
• Censys: Censys provides External Attack Surface Management built on internet-wide scanning data, helping organisations discover assets, assess exposure, and prioritise remediation. It is one of the closest direct comparables to Hexiosec ASM in terms of category focus (EASM-first), target buyer (security teams), and delivery model (SaaS).
• Detectify: Detectify is an External Attack Surface Management (EASM) specialist that continuously discovers and monitors internet-facing assets and vulnerabilities. Like Hexiosec, it serves as a focused ASM vendor with strong European roots and a developer-friendly product ethos, competing for the same mid-market and enterprise security buyers.
• Bitsight: Bitsight is an attack surface management and security ratings company focused on continuous external risk monitoring of internet-facing assets and third-party risk. It is a direct peer to Hexiosec ASM in category, customer base (security and risk leaders), and SaaS delivery model, with particular overlap in supply chain monitoring use cases.

Regional players

• WithSecure: WithSecure (formerly F-Secure) is a European-headquartered cybersecurity vendor offering vulnerability management, managed detection, and cloud security across Nordic and broader European markets. Like Hexiosec, it is a regional European cybersecurity specialist with strong public-sector and regulated-vertical DNA, competing for similar sovereign and compliance-driven buyers outside the UK.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/hexiosec
• LinkedInlinkedin.com/company/hexiosec

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about HEXIOSEC LIMITED