infosecurity people ltd | managed it security

What infosecurity people ltd | managed it security does

InfoSecurity People Ltd is a privately held, UK-based boutique managed security services provider (MSSP) founded in 2017 by James Naylor. The firm is headquartered in Boston Spa, West Yorkshire, and operates a 24x7 Security Operations Centre from a second office in Leeds. It targets UK small and medium enterprises that lack dedicated in-house security resources, offering a unified suite of managed security, professional consulting, and compliance services.

The core of the offering is the 'Secure Endpoint' managed platform, which bundles 24x7 monitoring, multi-layer malware protection, patch management, managed encryption (Bitlocker/FileVault), cloud backup, and enterprise single sign-on. This sits inside a broader managed-security portfolio that includes vulnerability scanning, managed firewall/IDS, managed wireless intrusion detection (WIPS), and a fully managed SIEM with SOC monitoring. Professional services — Penetration Testing (via Pentest People), Cyber Essentials and Cyber Essentials Plus accreditation, ISO 27001 consultancy, PCI DSS QSA services, GDPR/data protection (via sister company Data Protection People), and Asset Discovery audits — are sold alongside, often as the entry point into the managed-services bundle. Underlying technology is sourced from a multi-vendor stack rather than built in-house: Fortinet and Cisco Meraki for perimeter and wireless, AVG/Avast for endpoint malware detection with AI-driven behavioural assessment, Centrify for identity, and Barracuda, WatchGuard, Netskope, Infrascale and RapidSpike for adjacent security layers.

The business model combines recurring monthly subscriptions for managed services with project-based professional services fees and usage-based cloud subscriptions (e.g. PCI ASV scanning, Pay-As-You-Go Cloud Archive). Pricing is quote-based and not publicly disclosed. The go-to-market is sales-led and direct, with phone, email, and a 'free IT security quote' lead magnet, supported by content marketing (blog, Twitter, Facebook) and a Verified Trustindex rating on Google. The firm holds Cyber Essentials Plus accreditation and is a PCI Security Standards Council-authorised QSA Company, credentials that materially shape its compliance-led SME value proposition.

Name

infosecurity people ltd | managed it security

Legal name

InfoSecurity People Ltd

Website

https://infosecuritypeople.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Ownership category

akta.pro rank

Product category

Managed IT Security Services

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Cybersecurity Architecture & Security Integration (BPAEAAAL)

akta.pro secondary industries

Cybersecurity & Identity Consulting (BPAHAEAG), Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Vulnerability Management & Penetration Testing Services (BPAEADAD), Cybersecurity Support Operations (SOC Triage, Incident Intake) (BPAAACAF)

Keywords

• Managed security services
• IT security consulting
• Vulnerability scanning
• Penetration testing
• Compliance consultancy

Headquarters

HQ city

Boston Spa

HQ country

United Kingdom

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: Recurring managed security services including Secure Endpoint monitoring (24x7), Vulnerability Scanning, Managed Firewall/IDS/IPS, Managed Wireless Intrusion Detection (WIPS), and SIEM. Delivered as subscription-based services with flexible licensing options that scale with customer needs.
2. Professional Services: One-time professional services including Penetration Testing, Cyber Essentials certification, ISO 27001 consultancy, PCI DSS consultancy (QSA), GDPR compliance services, and Asset Discovery Audits.
3. Cloud Subscription Services: Pay-as-you-go cloud services including PCI ASV Scanning, Website Vulnerability Scanning, and Cloud Archive solutions with flexible consumption-based pricing.
4. Cloud Archive Solutions: Automatic backup services with incremental backup mechanisms, supporting bare metal server snapshots, Exchange/SQL databases, with local, cloud, or hybrid storage options and multiple retention policies.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

InfoSecurity People provides outsourced managed IT security services for UK small and medium enterprises, centered on a 24/7 Security Operations Centre in Leeds. Its core offering combines managed endpoint protection, managed firewall/intrusion detection, SIEM, vulnerability scanning, patch management, managed encryption, and cloud backup, delivered as recurring subscriptions. Professional services — penetration testing, Cyber Essentials, ISO 27001, PCI DSS QSA consultancy, and GDPR compliance — are sold alongside as standalone or bundled engagements.

Product overview

InfoSecurity People is a boutique managed security services provider offering a unified portfolio of managed security services alongside professional consulting services. The core managed services platform, branded around 'Secure Endpoint' and 'Managed Security' umbrella categories, provides 24x7 monitoring and protection across endpoints, networks, and cloud environments. The offering is structured as a platform-plus-modules architecture: Secure Endpoint serves as the central managed endpoint service (combining malware protection, patching, encryption, and backup), which integrates with modular add-on services including Managed Firewall/IDS, Managed WIPS, SIEM, Vulnerability Scanning, Cloud Archive, Patch Management, Cloud Subscription Services, Secure Laptop, Enterprise SSO, and Asset Discovery. Professional Services are offered as separate but complementary engagements covering Penetration Testing, Cyber Essentials, GDPR, ISO 27001, and PCI DSS consultancy. The company delivers these services from a Leeds-based Security Operations Centre and partners with technology vendors including Fortinet (perimeter/network security), Cisco (wireless), AVG/Avast (malware), and Pentest People (penetration testing).

Differentiator

Problem solved

Functional benefit

Products and services

• Secure Endpoint Managed endpoint protection service that keeps laptops, workstations, and mobile devices healthy, patched, and continuously monitored 24x7 from a Leeds-based SOC, combining multi-layer malware protection, patch management, managed encryption, cloud backup, enterprise single sign-on, and remote support. Targeted at UK SMEs that lack dedicated in-house security teams.
• Penetration Testing Consultant-led penetration testing delivered in partnership with Pentest People, covering internal, external, and web application security testing, with live engagement and vulnerability tracking via the SecurePortal platform. For organisations seeking to identify and remediate network vulnerabilities.
• Vulnerability Scanning as a Service Managed vulnerability assessment service that runs automated scans, provides consultant-led interpretation of results, performance scoring, telephone debriefs, and prioritised action plans to drive remediation. Designed to plug the gap between annual penetration tests and provide continuous monitoring for SMEs.
• Cyber Essentials Certification Government-backed cybersecurity certification service providing self-assessment and Cyber Essentials Plus accreditation, with three-step certification process and independent verification by a Certifying Body. For UK SMEs seeking to demonstrate baseline cyber hygiene to customers and partners.
• SIEM - Security Information and Event Management Fully managed cloud SIEM solution with 24x7 SOC monitoring, advanced threat intelligence, real-time correlation of security events, compliance reporting (ISO 27001, PCI, GPG13), and proactive breach prevention. Priced as a low monthly fee with no long-term commitment.
• GDPR Compliance Services Data protection consultancy including gap analysis against GDPR and the Data Protection Act, deep dive assessments, consent data flow mapping, and flexible managed data protection services including outsourced Data Protection Officers. Delivered in partnership with sister company Data Protection People.
• Managed Firewall and Intrusion Detection Managed next-generation firewall and intrusion prevention service with expert configuration, continuous monitoring, policy tuning, and flexible scaling, delivered by an approved Digital Enterprise supplier. Targets SMEs needing advanced threat detection including botnets, zero-day exploits, and targeted attacks.
• Perimeter and Network Security Managed perimeter and network security solutions using Fortinet next-generation firewalls and Cisco Meraki wireless, providing unified threat management, application-aware firewalling, and cloud-first security architecture that adapts to evolving threats.
• Multi-Layer Malware Protection Enterprise-grade anti-malware protection using AVG/Avast technology with multi-step inspection including known pattern matching, controlled emulator testing, and AI-driven behavioural assessment, with real-time cloud and local threat determination and Crowd Intelligence updates.
• Pay As You Go Cloud Archive Cloud backup and archive solution providing automatic scheduled backups for endpoints and servers, including bare metal server snapshots and large database files (Exchange, SQL), with encryption in transit and at rest, and flexible local, cloud, or hybrid storage options.
• Robust Patch Management Automated patch management service for operating systems and middleware across diverse customer network environments, providing dashboards, reporting, patch scheduling, and compliance demonstration to reduce exposure from known vulnerabilities.
• Cloud Subscription Services Cloud scanning and subscription services including PCI ASV scanning for up to 20 IP addresses and website vulnerability scanning, delivered in partnership with leading cloud providers on a pay-as-you-go basis.
• Managed Encryption Remote deployment and management of Windows Bitlocker and Mac OS X FileVault full-disk encryption, with policy-based mass deployment, client-side wizard, remote device location and lock/wipe (RemoteKill), and audit records for compliance.
• Managed Wireless Intrusion Detection (WIPS) 24x7 wireless intrusion detection and prevention service that detects and prevents rogue access points, evil twin attacks, ad-hoc networks, and misconfigured access points, supporting compliance with security regulations.
• Asset Discovery Audit Network asset discovery service that installs as an appliance or virtual machine to proactively identify connected devices, inventory hardware and software, detect misconfigurations, and monitor for new device connections on the network.
• Secure Laptop Remote working cybersecurity service that encrypts laptop hard disks, forces automatic encrypted VPN connectivity, monitors device baseline security, and supports remote lock and wipe for lost or stolen devices.
• Enterprise Single Sign-On (ESSO) Single sign-on service unifying identity management, mobile device management, and application management across Windows, Mac, iOS, and Android devices, with multifactor authentication and Active Directory integration. Delivered in partnership with Centrify.
• ISO 27001 Consultancy ISO 27001 certification consultancy covering gap assessments, policy and procedure development, ISMS implementation and integration, scope assessment, and ongoing maintenance support, delivered by ISO/IEC 27001 Lead Auditor qualified consultants.
• PCI DSS Consultancy (QSA) PCI DSS compliance consultancy delivered by a PCI Security Standards Council-authorised Qualified Security Assessor (QSA) Company, including gap analysis, Report on Compliance, Self Assessment Questionnaires, and formal Attestation of Compliance issuance.

Quantifiable outcome

• None of our customers got hit by WannaCry because their patching was up to date
• +1 more outcomes

Segments1 record

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability3 records

Feature5 records

Partnerships

13 partnerships are on record, tiered core and supporting.

• Avast / AVG BusinesscoreTechnology or IntegrationPrimary antivirus and malware protection partner providing multi-layer security technology. AVG Business by Avast delivers AI-driven behavior assessment, emulation testing, and Crowd Intelligence threat sharing. Over 70% of malware samples are unique to target organisations, making AVG's advanced detection capabilities essential to InfoSecurity People's endpoint protection offerings.
• CentrifycoreTechnology or IntegrationPremier Partner relationship for identity and access management solutions. Provides Enterprise Single Sign-On (ESSO) capabilities that eliminate password complexity while enabling secure access to SaaS and mobile applications.
• Cisco MerakicoreTechnology or IntegrationNext-generation wireless and network security solutions partner. Cisco Meraki technology underpins the company's wireless security offerings and cloud-managed networking capabilities.
• Barracuda NetworkscoreTechnology or IntegrationWeb and email security gateway solutions partner providing essential network protection and email security services to customers.
• FortinetcoreTechnology or IntegrationNext-generation firewall and gateway security partner. Fortinet solutions provide robust, cloud-first perimeter security that adapts to evolving threat landscapes.
• WatchGuardsupportingTechnology or IntegrationTechnology partner providing additional network security and unified threat management capabilities.
• NetskopesupportingTechnology or IntegrationCloud security partner for securing cloud applications and data access, supporting the company's cloud-first security strategy.
• InfrascalesupportingTechnology or IntegrationCloud backup and disaster recovery solutions partner supporting the company's Pay As You Go Cloud Archive services.
• Pentest PeoplecoreStrategic or Co-development PartnerStrategic penetration testing partner offering Infrastructure Penetration Tests (internal and external), Web Application Security Testing, and Cyber Essentials+ certification. Delivers consultant-led security assessments through SecurePortal platform. Also Certifying Body for Cyber Essentials+ accreditation.
• Data Protection PeoplecoreStrategic or Co-development PartnerSister company providing specialist Data Protection Governance and Information Security consultancy. Partnership enables InfoSecurity People to offer integrated GDPR compliance services, ISO 27001 consultancy, and PCI DSS QSA services. Joint delivery of information governance and security solutions.
• RapidSpikesupportingTechnology or IntegrationWebsite monitoring and vulnerability scanning partner supporting cloud security offerings.
• Pentest People - SecurePortalsupportingTechnology or IntegrationLive platform for customers to engage with and manage penetration testing results. Features real-time vulnerability tracking, automatic alerts for new threats, and intuitive data filtering.
• Data Protection People - QSA ServicescoreStrategic or Co-development PartnerPCI Security Standards Council-authorised QSA Company able to issue formal Attestations of Compliance. Team includes PCI Qualified Security Assessor and other industry qualifications.

Scale indicators2 records

Recent moves5 records

Expansion highlights4 records

Direct peers

• Pentest People: Pentest People is a UK-based cybersecurity testing and assurance provider that is also an explicit strategic partner of InfoSecurity People. Both firms target UK SMEs with penetration testing, vulnerability management, and Cyber Essentials certification, and share the SecurePortal platform, making them directly comparable boutique MSSPs.
• Data Protection People: Data Protection People is the sister company of InfoSecurity People, offering specialist Data Protection Governance and Information Security consultancy. Together they deliver integrated GDPR, ISO 27001, and PCI DSS services, making them a directly comparable peer in the UK SME compliance market.
• CyberSmart: CyberSmart is a UK-based cybersecurity platform focused on SMEs, offering automated Cyber Essentials certification and continuous compliance. It targets the same UK SME customer segment with a more software-led approach but overlapping compliance and security assurance services.
• Bridewell: Bridewell is a UK-based cybersecurity services provider offering managed security, penetration testing, and compliance consultancy across sectors. It serves a broader client base than InfoSecurity People but competes for the same UK mid-market and regulated-customer contracts.
• Secarma: Secarma is a UK-based cybersecurity consultancy and MSSP offering penetration testing, managed security, and incident response. Like InfoSecurity People, it positions as a boutique UK cybersecurity firm targeting SMEs and mid-market clients.
• Bulletproof Cyber: Bulletproof is a UK-based managed security services provider offering 24/7 SOC, penetration testing, and compliance services. It is a comparable MSSP competitor for InfoSecurity People with overlapping SME and mid-market targeting.

Broad incumbents

• NCC Group: NCC Group is a large UK-listed cybersecurity firm providing assurance, managed security, and software resilience services. It is a broad incumbent operating at much greater scale than InfoSecurity People but competes for overlapping UK compliance and security testing engagements.
• Sophos: Sophos is a global cybersecurity vendor providing endpoint, network, and managed detection and response solutions. It is a broad incumbent that InfoSecurity People partners with at the endpoint layer and competes against indirectly when SMEs evaluate direct vendor relationships.

Regional players

• Convergent Technology Solutions: Convergent Technology Solutions is a regional UK IT services provider offering managed IT and security services. It overlaps with InfoSecurity People's SME-focused IT security and managed services portfolio in a similar geographic band.

Others

• MWR InfoSecurity (now F-Secure Consulting): MWR InfoSecurity, now operating as F-Secure Consulting, is a UK-origin cybersecurity consultancy focused on advanced offensive security. It is an adjacent peer in the penetration testing and security advisory space where InfoSecurity People also competes.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xtwitter.com/infosecurityppl
• Facebookfacebook.com/infosecppl
• LinkedInlinkedin.com/company/infosecurity-people-limited

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about infosecurity people ltd | managed it security