Dionach vs MDSec

Side-by-side comparison of Dionach and MDSec for penetration testing services. Compare their services, accreditations, compliance expertise, and pricing.

This is one of the tightest matchups in our directory. Both providers score within a few points of each other, so the decision here comes down to specific needs rather than overall quality. Both hold CREST accreditation, but their credentials diverge beyond that — Dionach additionally carries PCI QSA and NCSC Assured, while MDSec holds CBEST and Cyber Essentials. Both operate at a global level but from different home bases — Dionach in Oxford and MDSec in Southam — which can affect response times and familiarity with local regulatory environments. There's a meaningful size gap: Dionach (51-200 team) brings deeper bench strength and capacity for concurrent engagements, while MDSec (11-50 team) offers the smaller firm advantage of senior-led engagements and direct access to principal consultants.

DionachMDSec
HeadquartersOxford, United KingdomSoutham, United Kingdom
Founded19992011
Team Size51-20011-50
Pen Testers
GeographyGlobalGlobal
MarketsUK, Europe, North America, APAC, GlobalUK, Europe, Global
Pricing
Services
Web ApplicationNetworkRed TeamingPurple TeamingSCADA/ICSVulnerability AssessmentCloudAPIMobile AppConfiguration ReviewSocial Engineering
Web ApplicationNetworkCloudRed TeamingVulnerability AssessmentConfiguration ReviewSource Code ReviewSocial EngineeringPhysicalAssumed Breach
Accreditations
CRESTCHECKSTARISO 27001PCI QSANCSC Assured
CRESTCHECKCBESTSTARISO 27001Cyber EssentialsCyber Essentials Plus
Compliance
PCI DSSISO 27001GDPRNIS 2DORANIST CSF+1
ISO 27001PCI DSSGDPRNIS 2DORANIST CSF+1
Best For
EnterpriseGovernmentCritical Infrastructure
EnterpriseGovernmentCritical Infrastructure
MethodologiesOWASP, CREST, NIST, CBEST, STAROWASP, CREST, TIBER-EU, CBEST, STAR, NIST

Shared Services (7)

Web Application
Network
Red Teaming
Vulnerability Assessment
Cloud
Configuration Review
Social Engineering

Only Dionach (4)

Purple Teaming
SCADA/ICS
API
Mobile App

Only MDSec (3)

Source Code Review
Physical
Assumed Breach

Comparison FAQs

How does Dionach compare to MDSec?+

Dionach is headquartered in Oxford, United Kingdom and offers 11 services. MDSec is based in Southam, United Kingdom with 10 services. Both providers offer 7 services in common.

Which provider has more accreditations?+

Dionach holds 6 accreditations (CREST, CHECK, STAR, ISO 27001, PCI QSA, NCSC Assured), while MDSec holds 7 (CREST, CHECK, CBEST, STAR, ISO 27001, Cyber Essentials, Cyber Essentials Plus).

What services are unique to each provider?+

Dionach uniquely offers: Purple Teaming, SCADA/ICS, API, Mobile App. MDSec uniquely offers: Source Code Review, Physical, Assumed Breach Testing.

Have you worked with Dionach or MDSec? Help others decide.

More Comparisons