Identity & Access Management

Ory

Open source identity infrastructure providing OAuth2, OIDC, and permission management for cloud-native apps.

Osirium

Privileged access management and cybersecurity automation software company based in Reading.

Oso

Authorisation as a service platform providing fine-grained access control built on relationship-based access control.

Overt Software Solutions Ltd

Overt Software Solutions is a Worcester-based software company specialising in single sign-on and learning management systems. It provides identity federation using Shibboleth, Azure AD and ADFS, alongside MFA and federated access support. Its LMS services cover hosting, VLE administration, custom development and MIS integration. Using open-source tools to avoid vendor lock-in, it serves education providers and enterprises, with customers including the University of Dundee.

PDR IT Solutions

PDR IT Solutions Limited provides managed IT services to businesses in London and Southeast England, offering proactive monitoring, cybersecurity, and technology alignment to improve productivity, operational efficiency, and decision-making. They serve clients seeking trusted IT partnership with clear reporting and accountability, focusing on tailored solutions rather than templates.

Paragon Routing

Fleet route planning and optimisation software for UK logistics and distribution operations.

Permify

Open source fine-grained authorisation service inspired by Google Zanzibar for building scalable RBAC and ABAC.

Pixel Fusion

Pixel Fusion is a custom software development firm building bespoke applications, including mobile apps, CRM and ERP systems and cloud-based software, for a range of industries.

PropelAuth

Managed authentication platform for B2B SaaS providing user auth, org management, and enterprise SSO.

Quod Orbis

Continuous controls monitoring and cyber risk management platform providing automated security posture visibility.

ReliaQuest GreyMatter

ReliaQuest exists to Make Security Possible. GreyMatter allows security teams to detect threats at the source, contain, investigate, and respond in less than 5 minutes – eliminating Tier 1 and Tier 2 security operations work.

RevBits

RevBits sells cyber security software to enterprise companies and public sector organisations. Its products cover email security, endpoint security, deception technology, zero trust networking and privileged access management, offered as a single platform with supporting services and consulting. The company runs a partner programme and offers trial software on request. RevBits has announced a partnership with the Ethos Lab at Stony Brook University's Department of Computer Science, which will use the full RevBits product suite in the classroom so that students can practise against modern threats in a contained environment.

SOCIETYWORKS

SocietyWorks designs and delivers public-facing digital solutions, including fault reporting, waste services, licence applications and Freedom of Information systems. A social enterprise subsidiary of mySociety, the organisation provides purpose-built civic technology for local authorities, councils and other public sector entities across the United Kingdom.

SQR

SQR provides a digital onboarding platform combining biometric KYC, AML screening, sanctions checks and reusable credentials, delivered through API and white-label integrations. The company is certified to the UK Digital Identity and Attributes Trust Framework and operates under ISO 27001 and ISO 9001 standards. SQR's verify-once, reuse-everywhere approach allows regulated businesses to reduce repeated manual onboarding checks across subsequent customer interactions. Target sectors include fintech, telecommunications, events and employment.

Salt Cybersecurity

Salt Cybersecurity provides authentication and payment security products and services to financial institutions. The company's products authenticate B2B payments and user identities for ten major UK banks, underpinning the UK batch payment system and global core MFA authentication for electronic banking. Salt Cybersecurity's technical expertise covers cryptographic systems, authentication technologies and Hardware Security Modules (HSMs), offering organisations deep-level support alongside software and hardware products. The company provides 24/7 customer support covering both hardware and software.

Seamfix

Seamfix builds digital identity ecosystems that connect governments, enterprises and individuals across Africa and other regions. Its technology bridges national and enterprise identity systems to enable access to credit, healthcare, education and essential services. Seamfix supports national identity programmes, automated eKYC and digital onboarding for financial services, compliant SIM registration for telecommunications operators, academic credential verification for education institutions, and compliance dashboards for regulators. The company has served more than 350 million end customers across five or more countries from nine or more locations.

Sechpoint Tech

Select ID

Select ID provides a digital identity verification platform for customer onboarding in the United Kingdom. A single integration connects businesses to a choice of trusted UK identity providers, allowing customers to verify their identity digitally across sectors including financial services, real estate and recruitment. The platform is designed to reduce onboarding friction and lower fraud risk without requiring separate connections to individual identity providers. Select ID aggregates compliant identity provider services behind one integration point.

Semrush

All-in-one digital marketing platform providing SEO, PPC, content, and competitive intelligence tools.

Signicat B.V.

Signicat provides a digital identity platform that enables organisations to onboard customers, authenticate users, sign documents electronically and manage identity workflows. It supports identity proofing, authentication, electronic signing and trust orchestration through APIs and no-code tools, serving businesses across banking, insurance, payments and other sectors requiring KYC, KYB, AML and fraud prevention compliance.

StrongDM UK

StrongDM provides a platform for secure, least-privilege access to infrastructure including databases, containers, cloud environments, AI agents, and servers. It enables just-in-time access, continuous authorization, and session monitoring for humans and machines, integrating with existing tools and vaults without requiring changes to user workflows. The service supports compliance, audit trails, and runtime enforcement across hybrid and multi-cloud environments.

Stytch

Authentication infrastructure platform offering passwordless login, session management, and fraud prevention.

Substly

SaaS subscription management tool for SMEs tracking costs, renewals, and access across software stacks.

TBTL

TBTL delivers high-assurance security audits and compliant digital identity products grounded in peer-reviewed research and granted patents. Its security practice uses formal reasoning to analyse smart contracts and zero-knowledge programmes, covering how systems can fail rather than testing against expected behaviours. FORTID, its production-ready digital identity product, meets EUDI and eIDAS standards, enabling organisations to verify counterparties without harvesting personal data. Core technology areas include formal methods, decentralised systems and trusted hardware.