Security & Compliance
EDR, SIEM, IAM and zero trust security platforms
Find partners
MiTech Solutions Limited
MiTech Solutions Limited provides IT and compliance consultancy to professional services, healthcare and technology businesses. Services include ISO 27001 information security management system implementation, Lexcel auditing and consultancy, Cyber Essentials support and IT consultancy. The founder is an ISO and Lexcel certificated auditor with a background in the legal industry, and the company has operated globally for over 20 years.
Regola Digital Consulting
Regola Digital Consulting is a Devon-based Cyber Essentials Certification Body working with IASME to assess organisations across the UK through online assessment. It helps small businesses improve resilience to cyberattacks, guiding them towards Cyber Essentials, Cyber Essentials Plus, Cyber Assurance and ISO27001 certification. Having assessed nearly 150 organisations, it provides practical advice and hands-on support to businesses at any stage of their cyber security journey.
RightCue
RightCue provides cyber security compliance and assurance services to organisations in defence, healthcare, financial services and technology. An NCSC Assured Service Provider and CREST accredited, the company supports certification against ISO 27001, Cyber Essentials, IASME and other frameworks, alongside penetration testing, IT audits, vulnerability assessments, virtual CISO and data protection officer services, ISMS consulting, and cyber incident response. Operating since 2009 from Basingstoke.
Romano Security Consulting Ltd
Romano Security Consulting is a cyber security consultancy based in Macclesfield that helps businesses achieve compliance with frameworks including ISO 27001, SOC 2, ISO 42001 and the DSP Toolkit. Services include virtual CISO support, cyber security audits, risk management, incident management and business continuity. The company designs and implements Information Security Management Systems and delivers training courses covering cyber security awareness, quality management and environmental management systems.
SFX Tech
SFX Technology is a Cardiff-based IT asset disposal and WEEE recycling company serving organisations across Cardiff and South Wales. It collects redundant computers, laptops and other electronic equipment from businesses, with certified data destruction on every device. As a T11 licensed facility it refurbishes equipment for reuse where possible, and operates an asset buy-back scheme for high-value hardware such as laptops and servers. Collections are free for qualifying quantities.
SecurityMetrics, Inc. (UK)
SecurityMetrics provides PCI DSS compliance and cybersecurity services to small businesses, enterprises and sectors including healthcare, retail, hospitality and government. Offerings cover PCI audits, HIPAA and GDPR compliance support, HITRUST and CMMC assessments, ASV vulnerability scanning, penetration testing, card and PII data discovery, incident response with forensic investigation, and workforce training in cybersecurity, PCI and HIPAA.
ServQual
ServQual is a Bracknell-based cyber security and compliance company offering governance, risk and compliance services alongside its SUSAN platform, an AI-driven tool covering privacy management, continuous monitoring, automated data discovery and third-party risk. Services include ISO 27001, SOC 2, GDPR and UK GDPR readiness, DORA and NIS2 resilience, managed SOC, Microsoft and CyberArk identity security, AI and LLM security testing, incident response and corporate training.
TMW Resilience
TMW Resilience helps organisations meet regulatory and cyber security requirements through AI Governance as a Service, Cyber Essentials programmes, TISAX and ISO certification support, security health checks, a virtual DPO service, cyber attack recovery planning and NHS DSPT compliance. Based in Leamington Spa, the company combines regulatory knowledge with operational experience to turn compliance obligations into practical, actionable outcomes.
Think Cyber Security
Think Cyber Security develops Redflags, a human cyber risk management platform that combines on-device behavioural telemetry with pre-emptive nudges delivered at the point of decision. Unlike traditional security awareness training, Redflags monitors what employees actually do and intervenes in real time when risky behaviours occur, covering risky clicks, data mishandling and policy violations. The platform also provides visibility into AI tool usage and applies controls to keep organisations compliant. Reporting tracks behaviour trends, risk reduction and engagement over time.
Tikos
Tikos provides AI assurance technology for organisations responsible for AI systems that affect health, safety or rights. The TIKOS platform includes Evaluate for AI model and system auditing, assessment and compliance mapping, Explain for transparency and explainability features, and Explore tools, designed for use throughout the AI system lifecycle. It maps to EU AI Act, NIST AI RMF, GDPR Article 22, ISO 42000 and sectoral regulations from the FCA and MHRA. Sectors served include defence, healthcare, critical infrastructure and financial services.
Titania
Titania offers software for network security and compliance. Accurately detect vulnerabilities, automate the evidence and risk-prioritise remediation.
Trace
Trace is an AI-powered carbon accounting and climate reporting platform for businesses required to make mandatory sustainability disclosures. It supports compliance with ASRS S2 and covers the full scope of sustainability reporting including climate risk analysis, transition planning and audit-ready disclosures. The platform streamlines data collection and validation to reduce manual effort, and clients include organisations that have worked with Trace for over four years across external audit cycles. Trace is designed to make mandatory climate reporting accurate and defensible.
Trilateral Research
Trilateral Research helps organisations adopt AI that is human-centred, compliant by design and demonstrably safe. Its Trilateral GRC Suite embeds accountability, traceability and auditability into AI pipelines, providing risk assessments and compliance outputs aligned to global standards. The company also delivers AI skills development programmes that build capability across organisations and leadership teams. Validated outcomes include 10 times faster identification of illegal pharmaceutical sites in partnership with the MHRA, a 400 per cent uplift in safeguarding capacity through the CESIUM product, and 600 times faster data anonymisation using MASC.
Vaultinum
Vaultinum provides technology due diligence to private equity firms and their portfolio companies across the investment lifecycle. During acquisition, it analyses technical assets for vulnerabilities, scalability, cybersecurity posture, tech debt and cloud-readiness. Through continuous diligence during the investment period, it provides board-ready performance reporting and monitors technology evolution through periodic code scans. At exit, its vendor due diligence service accelerates the process with investor-ready reports. The firm also operates a software escrow and IP deposit service for digital asset protection.
WRANGU UK
Wrangu delivers risk, security and compliance solutions built on the ServiceNow platform for organisations seeking integrated risk management, security operations and compliance automation. The company serves clients across industries including multinational retail, pharmaceuticals, government and telecommunications, providing expertise in vulnerability response, incident management and audit trail creation through long-term partnerships.
eyreACT
eyreACT is an AI compliance automation platform designed to help organisations achieve EU AI Act readiness. The system automates risk classification, evidence collection and gap remediation, giving compliance teams a structured and auditable path to demonstrating conformance through patent-pending processes. eyreACT enables organisations to identify compliance gaps in minutes, generate detailed AI compliance reports with actionable recommendations, and establish a clear audit evidence base. The EU AI Act imposes penalties of up to 35 million euros or 7% of global turnover for non-compliance.
Showing 337–352 of 352 providers
Search all 352 providersAre you a Security & Compliance provider?
Get listed and reach thousands of potential customers looking for security & compliance services.