NCC Group, Inc.

History & Formation

NCC Group traces its origins to the National Computing Centre, established in the 1960s. In 1999, the commercial divisions were sold to a management team backed by ECI Ventures, forming NCC Services Ltd, renamed NCC Group Ltd in 2000. Rob Cotton, appointed finance director in 2000, led a secondary management buyout in 2003 valuing the company at £30 million. NCC Group floated on AIM in July 2004 and transferred to the London Stock Exchange's main market in July 2007. The company expanded through acquisitions including iSEC Partners (2010), Matasano Security (2012), Fox-IT (2015), and Iron Mountain's Intellectual Property Management business (2021). In 2020, training materials were accidentally leaked, leading CREST to suspend practical examinations and appoint an independent investigative panel.

Business Model & Revenue

NCC Group generates revenue through a combination of consulting services, managed security operations, software escrow, and verification contracts. Its services are sold on a project basis or as recurring managed service agreements. The company's Managed XDR offering, powered by Splunk and integrated with the CrowdStrike Falcon Platform, provides 24/7 monitoring via global Security Operations Centres. The escrow division, originally the core business, continues to provide source code and intellectual property protection. Revenue is diversified across geographies and sectors, with significant contributions from government and financial services clients.

Core Products & Platforms

NCC Group's key offerings include Incident Readiness & Response, Technical Assurance Services (penetration testing, red teaming), Managed Security Services (Managed XDR with Splunk and CrowdStrike Falcon integration), Advisory & Implementation, Threat Intelligence, and Software Escrow & Verification. The company also operates the NCC Group Unified Cyber Platform (UCP), which underpins managed services with 24/7 support. These products serve clients ranging from mid-market firms to large enterprises and government agencies.

Market Position & Competitors

NCC Group is a recognised leader in cyber security consulting and managed services, particularly in high-assurance testing, incident response, and software escrow. It competes with global firms such as CrowdStrike, Mandiant, Kroll, and Coalfire, as well as boutique consultancies. The company's technical heritage and offensive security research differentiate it in the market. It holds accreditations from CREST and participates in government programmes like the UK NCSC's Industry 100. The acquisition of Fox-IT strengthened its European presence, while the Iron Mountain deal expanded its escrow capabilities.

Recent Developments & Strategy

In February 2025, NCC Group announced the integration of the CrowdStrike Falcon Platform into its managed services and incident response tooling, enhancing its detection and response capabilities. The company reported adjusted EBITDA growth in its H1 2025 results, reflecting increased focus on cyber resilience services. NCC Group continues to invest in its global SOC network and threat intelligence research. The leadership team, under CEO Mike Maddison, is driving a strategy to deepen client relationships and expand managed services penetration, particularly in North America and Asia-Pacific.