Britain has long provided fertile ground for technology companies, with London and the South East nurturing established names including email security leader Mimecast and University of Oxford spinout Darktrace.
Cyber security services constitute a vital component of the UK tech sector, encompassing software developers, penetration testing consultants, and managed security service providers (MSSPs).

Though cyber security has always been critical for business continuity across private and public sectors, its importance entered mainstream consciousness in 2017. The WannaCry ransomware attack paralysed businesses and public services globally, including the NHS, locking staff out of entire systems instantaneously.
Insurance broker Howden reports that cyber crime has cost UK businesses over £44bn in the past five years. Since that analysis, 2025 has witnessed a spate of high-profile cyber attacks, notably against Marks & Spencer, the Co-op, and Jaguar Land Rover (JLR).

The JLR supply chain attack caused approximately £1.9bn in damage and ranks among history's costliest hacks. Consequently, businesses are engaging data security experts and strengthening defences to prevent cyber attacks.

This analysis explores the economic value generated by cyber security companies using Gross Value Added (GVA) calculations.

Leading 10 UK Cyber Security Companies

10. Portswigger
Location: Cheshire East | Gross Value Added: £28.3m | Founded: 2008
This North West-based penetration testing software company tests web application security whilst providing cyber security training.

The business raised £88.4m in June 2024, has featured on two high-growth lists, and qualifies as a 20% scaleup. GVA contribution: £28.3m.

9. babble
Location: City of London | Gross Value Added: £28.7m | Founded: 2001
Trading as Babble Cloud Limited until 2020, babble delivers cloud-based technology services to businesses, including cyber security awareness training and managed IT support.

The company has completed over 30 acquisitions since 2018 and undergone two management buyouts, in 2017 funded by Lloyds Development Capital (LDC) and 2020 funded by Graphite Capital. GVA contribution: £28.7m.

8. 6Point6
Location: Manchester | Gross Value Added: £30.8m | Founded: 2012
This Manchester IT consultancy delivers services focused on big data and cyber security, including penetration testing and incident response management.

A 20% scaleup, 6Point6 was acquired by Accenture in January 2024. 2023 GVA contribution: £30.8m.

7. Focus Group
Location: Adur | Gross Value Added: £32.5m | Founded: 2003
Headquartered in Adur, Focus Group operates across telecommunications, IT maintenance, and internet network provision, offering dark web monitoring, email and endpoint security, and enhanced detection and response.

The company has completed one fundraising round and made ten acquisitions in 2024 alone. 2023 GVA
contribution: £32.5m.

6. S-RM
Location: City of London | Gross Value Added: £37.1m | Founded: 2015
This London cyber risk consultancy offers services ranging from crisis response to offensive security programmes simulating real-world threats.

Spun out from Salamanca Group in 2015, S-RM is a thought leader publishing articles and reports on cyber resilience and corporate risk management. Valued at £75.8m, GVA contribution: £37.1m.

5. Ultima
Location: Reading | Gross Value Added: £37.4m | Founded: 2019
Reading-based Ultima offers comprehensive cyber security services from business continuity to extended detection and response (XDR), plus public, private, and hybrid cloud services.

Acquired by client support and cloud services provider Just After Midnight in 2021, GVA has grown from £26.7m (2021) to £37.4m (2024).

4. Exponential-e
Location: Tower Hamlets | Gross Value Added: £149m | Founded: 2002
This London company delivers advanced business telecommunications, data centre services, and cyber security solutions, specialising in cloud computing and digital security with scalable, secure technology infrastructure.

As of January 2024, Exponential-e achieved £237m turnover, supported by a £100k fundraising round and one acquisition. GVA contribution: £149m.

3. Darktrace
Location: South Cambridgeshire | Gross Value Added: £166m | Founded: 2013
Based in South Cambridgeshire, Darktrace uses artificial intelligence to autonomously detect and respond to cyber threats, distinguishing itself within the SaaS and cyber security industries.

Darktrace raised £427m across seven rounds and went public in April 2021, raising £143m in its IPO. Private equity firm Thoma Bravo acquired the company in October 2024. GVA contribution: £166m.

2. Softcat
Location: Buckinghamshire | Gross Value Added: £372m | Founded: 1987
A giant in IT reselling, Softcat delivers IT infrastructure specialising in data centres and network security services, serving businesses via extensive partner programmes and public sector clients.

Experiencing significant early 2010s growth and appearing on four high-growth lists, Softcat completed its London Stock Exchange IPO in 2015 at a £472m valuation. Supported by £963m turnover (2023/24), GVA contribution: £372m.

1. Mimecast
Location: City of London | Gross Value Added: £2.17bn | Founded: 2003
Founded in 2003, this London email security company transformed the cyber security market throughout the 2010s.

Mimecast's web-based platform safeguards email inboxes whilst engaging users in identifying and mitigating cyber threats, revolutionising traditional cybersecurity training by empowering end users.
With five equity fundraisings including a 2015 NASDAQ IPO raising £50.7m, Mimecast tops our ranking with an extraordinary £2.17bn GVA contribution to the UK economy.

Sector Outlook

Whilst all industries experienced investment downturns since 2021, cyber security will continue growing due to constant adaptation requirements for emerging threats from malicious actors, state-sponsored hackers, and traditional social engineering via phishing.

The 2020s have witnessed key technological milestones in AI and quantum computing advancement. Both will accelerate productivity growth whilst introducing entirely new challenges for cyber security teams, explaining strong interest in companies like Darktrace.

In a world where hackers constantly seek advantage, cyber security firms will continue developing innovative methods for protecting personal and corporate data against such threats.

GS Verde Group: Strategic Advisory for Cyber Security Businesses

The UK's cyber security sector plays a critical role in protecting businesses from evolving digital threats whilst contributing billions to the national economy. As demonstrated by the companies featured here, the sector encompasses diverse specialisms from AI-driven threat detection to managed security services.

At GS Verde Group, we understand the unique challenges facing cyber security businesses, from rapid scaling and investment raising to acquisitions and regulatory navigation. Our integrated team of corporate finance, legal, tax, accountancy, and communications specialists work seamlessly under one roof to provide comprehensive advisory services throughout your business journey.

Whether you're an early-stage cyber security innovator seeking investment, an established MSSP planning strategic growth, or a tech company considering acquisition opportunities, GS Verde Group delivers the expertise needed to navigate complexity and achieve sustainable success.

Further insights: Explore the UK cyber security landscape at: https://www.beauhurst.com/blog/uk-cyber-security-companies/