P3M Works
P3M Works is a UK cyber resilience consultancy founded in 2021, providing subscription advisory, programme delivery, and security technology implementation services to defence, government, critical national infrastructure, and SME clients.
- Company typePrivate
- Founded2021
- HeadquartersCheltenham, United Kingdom
- Headcount1–10
- GTM typeB2B
- OfferingServices
What P3M Works does
P3M Works is a UK cyber resilience consultancy founded in 2021 and headquartered in Cheltenham, the UK cyber industry's hub adjacent to GCHQ and the NCSC. The firm delivers advisory, managed resilience programmes, and security product implementation services to defence, government, critical national infrastructure (CNI), and SME clients. It is led by founder Jack Marley and Director Ben Rose, who bring 10+ years of experience in high-assurance cyber delivery. P3M Works holds Cyber Essentials Plus and JOSCAR accreditations, qualifying it for UK public-sector procurement.
The company's offering is structured around three service lines: Cyber Resilience Services (ongoing subscription advisory in Essential, Enhanced, and Embedded tiers, mapped to NIST CSF and NCSC CAF); Major Projects (programme and project leadership, delivery recovery, technical assurance, and governance for defence, government, and CNI initiatives, typically fixed-scope or time-and-materials); and Technology Partners (vendor-agnostic selection, deployment, and integration support across identity, endpoint, and resilience domains via partnerships with Akamai, CyberArk, Sophos, Microsoft, and others). A first-of-its-kind in-person bug bounty capability developed for a defence environment is a notable service differentiator.
P3M Works runs a hybrid go-to-market combining direct enterprise and government field sales (free 30-minute consultation, bespoke proposals) with technology vendor channel partnerships that extend reach into public-sector and enterprise accounts. Revenue is generated through monthly subscription retainers, professional-services engagements, and vendor partnership arrangements. The firm operates with 1–10 employees, has no disclosed institutional funding or revenue, and is UK-focused with global reach enabled through its Akamai partnership.
P3M Works firmographics
Firmographics- Name
- P3M Works
- Legal name
- P3M Works
- Website
- https://p3mworks.co.uk
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- P3M Works is a UK cyber resilience consultancy founded in 2021, providing subscription advisory, programme delivery, and security technology implementation services to defence, government, critical national infrastructure, and SME clients.
- Ownership category
- akta.pro rank
P3M Works industry classification
Industry- Product category
- Cyber Security Consultancy
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE)
- akta.pro secondary industries
- Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC), Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL)
Keywords
Where P3M Works is headquartered
LocationHeadquarters
- HQ city
- Cheltenham
- HQ country
- United Kingdom
- HQ region
- Europe
Offices1 record
Markets served
P3M Works business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales, Others
Revenue model
- Cyber Resilience Services: Ongoing advisory and consultancy engagements providing practical cyber resilience support. Delivered through tiered service tiers (Essential, Enhanced, Embedded) with monthly or quarterly engagement models. Services include governance, vulnerability management, incident management, compliance, training, and security tooling support.
- Major Projects Delivery: Programme and project delivery for defence, government, and CNI clients. Includes project leadership, delivery recovery, technical assurance, governance design, and transition/handover support. Typically structured as fixed-scope or time-and-materials engagements.
- Technology Partner Services: Implementation, integration, and deployment support for security technology platforms. Revenue generated through vendor partnership arrangements for technology selection, procurement support, and operational adoption services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Essential tier provides monthly advisory support with risk and vulnerability reviews |
| Subscription | Monthly | Enhanced tier adds proactive resilience roadmap management and incident readiness |
| Subscription | Monthly | Embedded tier provides deep strategic partnership for complex environments |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels4 records
P3M Works product offering
Product offeringCore offering
P3M Works is a UK cyber resilience consultancy that sells three core service lines: subscription-based Cyber Resilience Services (with Essential, Enhanced, and Embedded monthly advisory tiers), Major Projects delivery (programme leadership, technical assurance, and governance design for defence, government, and CNI clients), and Technology Partners (vendor-agnostic selection, deployment, and integration of trusted cyber security platforms across identity, endpoint protection, and resilience domains). All services are mapped to the NIST Cybersecurity Framework and delivered by consultants with experience in defence and government environments.
Product overview
P3M Works is a UK cyber resilience consultancy that delivers three core services: Cyber Resilience Services, Major Projects, and Technology Partners. Cyber Resilience Services provides ongoing, subscription-based support across three tiers (Essential, Enhanced, Embedded) with a Cyber Resilience Consultation as a low-friction entry point. Major Projects delivers programme management and delivery leadership for complex cyber and transformation initiatives in defence, government, and CNI environments. Technology Partners provides vendor-agnostic guidance on security platform selection, deployment, and optimisation across Identity & Access, Endpoint & Protection, and Resilience & Assurance domains. All services are mapped to the NIST Cybersecurity Framework.
Differentiator
Problem solved
Functional benefit
Products and services
- Cyber Resilience Services Ongoing cyber resilience support providing practical guidance across governance, security operations, assurance, compliance, and continuous improvement, mapped to the NIST Cybersecurity Framework. Delivered through subscription-based advisory engagements for organisations seeking to build and maintain cyber resilience.
- Major Projects
Companies that use P3M Works
Customer profileNamed customers8 records
Segments3 records
Ideal customer profiles3 records
P3M Works technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
P3M Works partnerships and signals
Strategic signalPartnerships
13 partnerships are on record, tiered core and supporting.
- Akamai TechnologiescoreStrategic partnership integrating professional services into Akamai's existing and new projects. P3M Works provides project delivery, cyber security, and digital transformation expertise to complement Akamai's technology portfolio. Collaboration aims to deliver comprehensive solutions for UK Public Sector and global clients.
- Cyber Runway (Plexal)supportingUK government-funded cyber accelerator programme delivered by Plexal and funded by Department for Science, Innovation & Technology. P3M Works joined grow cohort in September 2022 and graduated in February 2023. Programme covered product development, culture, sales, and storytelling.
- CyberArkcoreTechnology partner for identity and access management, privileged access security solutions. P3M Works supports selection, deployment, and integration of CyberArk platforms.
- SophoscoreTechnology partner for endpoint protection and managed detection and response. P3M Works provides deployment and operational adoption support.
- MicrosoftcoreTechnology partner for security platforms and enterprise security solutions. P3M Works supports implementation and integration.
- BlackwiredsupportingTechnology partner for cyber security platforms and solutions.
- OrnasupportingAI-powered end-to-end incident response automation technology partner for SME security solutions.
- OutbreachsupportingTechnology partner for security platforms and solutions.
- HexiosecsupportingTechnology partner for cyber security platforms and solutions.
- WeShapesupportingDigital transformation consultancy client and delivery partner. P3M Works supported WeShape on multiple programmes including ISO27001 certification, digital transformation recovery, and media pipeline delivery.
- NexorsupportingCyber security company partnered with P3M Works on government cyber programme delivery. P3M Works provided project management expertise to stabilise and recover delivery of a technically complex government programme.
- University of the West of England (UWE)supportingAcademic partner for Workforce of the Future programme. P3M Works joined UWE's panel of Digital Consultants to deliver cyber resilience consultancy to regional SMEs.
- Infosec PeoplesupportingCyber security recruitment specialist partnered with P3M Works to deliver bespoke cyber security training programmes to workforce clients.
Scale indicators5 records
Recent moves5 records
Expansion highlights6 records
P3M Works competitors and assessment
Company assessmentDirect peers
- Secarma: UK cyber security consultancy offering penetration testing, managed security services and compliance advisory to UK enterprise and public-sector buyers - a directly comparable small-to-mid sized UK cyber services competitor.
- Bridewell: UK-based cyber security consultancy of broadly similar profile, delivering advisory, managed security and resilience services to CNI, government and enterprise clients - the closest like-for-like comparator in size and service mix.
- Pentest Partners: UK-based penetration testing and security consultancy serving enterprise and public-sector clients - closely comparable on profile, geography and expertise-led, project-based delivery model.
- Cyberis: UK cyber security consultancy providing advisory, penetration testing and managed detection services to enterprise and government clients - similar size, breadth and UK-focused defence/CNI adjacency.
Broad incumbents
- NCC Group: Long-established UK cyber security and resilience consultancy listed on the London Stock Exchange; provides governance, risk, compliance, technical assurance and managed services across defence, CNI and enterprise - directly overlapping P3M Works' segments at larger scale.
- Mandiant (Google Cloud): Global incident response and cyber consulting arm of Google Cloud, with deep UK public-sector and CNI engagements - a much larger incumbent offering overlapping cyber resilience, GRC and programme recovery services.
- WithSecure (formerly F-Secure Consulting): Nordic-rooted cyber security consultancy providing managed detection, advisory and incident response to enterprise customers - comparable on expertise-led resilience service portfolio, though at significantly greater scale.
- BAE Systems Applied Intelligence: Defence-grade cyber security and intelligence division of BAE Systems, delivering cyber resilience, programme delivery and assurance to UK government, MoD and allied customers - the largest comparably positioned defence and CNI cyber incumbent.
Regional players
- Optiv Security: US-based large MSSP and cyber advisory firm delivering managed security, risk and compliance services - overlapping service categories but with a North American delivery centre of gravity and limited direct UK CNI footprint.
- Kroll Cyber Risk: Global cyber risk advisory and incident response practice headquartered in the US, serving enterprise and government clients across multiple geographies - comparable service portfolio but primarily competing in the UK via cross-border delivery teams.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
P3M Works social profiles
Digital presenceP3M Works compliance and trust
Trust signalCompliance2 records
P3M Works financial estimates
Financial estimateRevenue estimate
Valuation estimate
P3M Works leadership team
Management profileNumber of profiles
Profiles2 records
P3M Works funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
P3M Works M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about P3M Works
What does P3M Works do?
P3M Works is a UK cyber resilience consultancy that sells three core service lines: subscription-based Cyber Resilience Services (with Essential, Enhanced, and Embedded monthly advisory tiers), Major Projects delivery (programme leadership, technical assurance, and governance design for defence, government, and CNI clients), and Technology Partners (vendor-agnostic selection, deployment, and integration of trusted cyber security platforms across identity, endpoint protection, and resilience domains). All services are mapped to the NIST Cybersecurity Framework and delivered by consultants with experience in defence and government environments.
Is P3M Works a public or private company?
P3M Works is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was P3M Works founded?
P3M Works was founded in 2021. It employs 1 to 10 people.
Where is P3M Works based?
P3M Works is headquartered in Cheltenham, United Kingdom, in the Europe region.
How does P3M Works make money?
Three revenue lines are on record. Cyber Resilience Services are the primary driver. The others are major Projects Delivery and technology Partner Services.
Who are P3M Works's main competitors?
Direct peers on record are Secarma, Bridewell, Pentest Partners and Cyberis. Broad incumbents are NCC Group, Mandiant (Google Cloud), WithSecure (formerly F-Secure Consulting) and BAE Systems Applied Intelligence. Regional players are Optiv Security and Kroll Cyber Risk.
Does P3M Works have an API?
No public API is recorded for P3M Works.
What industry is P3M Works in?
P3M Works's product category is Cyber Security Consultancy. Its primary akta.pro industry code is HDADAIAE, Third-Party/Vendor Risk Management (TPRM/VRM), with a secondary code of HDADAJAC, Critical Infrastructure Protection (CIP) & NERC-CIP Compliance. Its NAICS code is 5415 and its SIC code is 7370.