NCC Group logo
Editor's Pick

NCC Group

Global cybersecurity consultancy with CREST, CHECK, and CBEST accreditation, renowned for deep technical research and comprehensive penetration testing services.

Best UK ProviderBest for EnterpriseResearch Leaders

About

NCC Group is one of the world's largest and most respected cybersecurity consultancies, headquartered in Manchester, United Kingdom. Founded in 1999, the company has grown into a global powerhouse with over 2,000 employees across offices in the UK, North America, Europe, and Asia-Pacific. NCC Group holds the highest tier of CREST accreditation and is one of a select few companies approved to conduct CHECK and CBEST assessments on behalf of the UK government and financial regulators.

Their penetration testing services span every domain, from web applications and network infrastructure to IoT devices, SCADA systems, and cloud environments. The firm is particularly well known for its deep research culture, with its team regularly discovering zero-day vulnerabilities and publishing cutting-edge research on hardware security, cryptography, and software exploitation. NCC Group also operates one of the largest dedicated escrow and software resilience businesses globally.

Their methodology is grounded in CREST, OWASP, and PTES standards, and their consultants hold certifications including OSCP, CREST CRT, CCT, and SANS GIAC. They serve clients in financial services, government, defense, healthcare, technology, and critical infrastructure, making them a top choice for organizations that require the highest levels of assurance.

Methodologies

OWASPPTESCRESTCBESTOSSTMMTIBER-EU

Team Activity

Active in CTF competitions
SC Awards Best Professional Services
Queen's Award for Enterprise
Speaker: Black Hat
Speaker: DEF CON
Speaker: 44CON
Speaker: BSides
Open source: ScoutSuite
Open source: Demiguise
Open source: ABPTTS
Open source: Winpayloads

Score Breakdown

75/100
Accreditations100/100 (30%)
Reviews0/100 (25%)
Team Activity100/100 (15%)
Experience100/100 (15%)
Service Breadth100/100 (15%)

Details

Headquarters
Manchester, United Kingdom
Founded
1999
Team Size
500+
Markets
Global, UK, North America, Europe, APAC
Geography
Global

Accreditations

CRESTCHECKCBESTISO 27001SOC 2Cyber Essentials PlusNCSC AssuredPCI QSACouncil of Registered Ethical Security Testers

Best For

EnterpriseGovernmentCritical Infrastructure
Visit NCC GroupWrite a Review

Related Providers

Nettitude logo

Nettitude

CREST, CHECK, and CBEST accredited UK consultancy within Lloyd's Register, delivering premium penetration testing for government and critical infrastructure.

64
Score
LOCLondon, United Kingdom
Web ApplicationNetworkMobile App+10
CRESTCHECKCBEST+2
Top UK ProviderElite TestersResearch-Driven
SECFORCE logo

SECFORCE

Leading UK offensive security consultancy based in Canary Wharf, delivering CREST-accredited penetration testing and adversary simulation to organisations with the most demanding security requirements.

95
Score
LOCLondon, United Kingdom
Web ApplicationNetworkMobile App+9
CRESTISO 27001Cyber Essentials
Bridewell logo

Bridewell

Fast-growing CREST and CHECK-accredited UK cybersecurity consultancy with deep expertise in critical national infrastructure sectors.

56
Score
LOCBristol, United Kingdom
Web ApplicationNetworkCloud+7
CRESTCHECKISO 27001+1
Best for Mid-MarketBest for Financial Services
NetSPI logo

NetSPI

Leading penetration testing firm with the Resolve platform for continuous attack surface management, trusted by nine of the top ten US banks.

60
Score
LOCMinneapolis, Minnesota, United States
Web ApplicationNetworkCloud+8
SOC 2ISO 27001CREST