Precursor Security. The team behind this guide.
Precursor Security is a CREST-accredited UK cyber security firm. It runs this independent guide to the Cyber Security and Resilience Bill (CSRB), and provides penetration testing, a 24/7 UK managed SOC, incident response and compliance services, plus the EdgeProtect monitoring platform.
- Accreditations
- CREST Pen Test, VA and SOC
- Pen testing
- From £2,500, fixed price
- Managed SOC
- From £900 a month
- Phone
- 0113 486 4873
- [email protected]
Prices are Precursor's published starting prices.
Penetration testing
CREST-accredited, manual testing by DBS-checked UK consultants. Fixed prices at about £1,200 per consultant day, a proposal within 24 hours of a scoping call, and testing that can start within two weeks of sign-off.
External network penetration test
From £2,500
An internet-based attacker probing firewalls, VPN gateways, mail servers and the cloud perimeter.
Read moreWeb application penetration test
From £3,750
Apps, APIs and portals, including business logic and access control flaws that scanners miss.
Read moreCloud penetration testing
From £3,750
AWS, Azure, GCP and Microsoft 365: IAM, storage, serverless and container workloads.
Read moreInternal network penetration test
From £6,250
An attacker already inside: Active Directory, lateral movement, privilege escalation and segmentation.
Read moreRed team operations
From £15,000
Objective-based simulation of a real threat actor, testing whether detection and response stop it.
Read moreSocial engineering
From £5,000
Phishing, vishing, physical intrusion and executive impersonation testing.
Read morePCI DSS testing and ASV scanning
The penetration testing and scanning PCI DSS requires for cardholder data environments.
Read more24/7 SOC, MDR and incident response
Resilien by Precursor is a 24/7/365 managed SOC and MDR service run from a physical, CREST SOC-accredited facility in Newcastle. It works with the tools you already have, such as Microsoft Sentinel, Defender XDR, CrowdStrike and Elastic, and can go live in under 10 days.
Managed SOC (Resilien)
From £900 a month
UK analysts watching SIEM, endpoint and cloud telemetry round the clock, with agreed response actions.
Read moreManaged detection and response
From £900 a month
Investigation across your connected security tools and authorised action on confirmed threats.
Read moreThreat hunting
From £4,500
Hypothesis-driven hunts mapped to MITRE ATT&CK for threats that evaded automated detection.
Read moreIncident response retainer
From £8,500 a year
CREST-accredited incident response on retainer, for organisations up to 500 seats.
Read moreEmergency breach response
From £1,500 a day
Remote containment within 30 minutes and on-site within 4 hours, 24/7/365.
Read moreVisit the SOC
Buyers, auditors and risk teams can tour the Newcastle facility to see the operation for themselves.
Read moreCompliance and certification
Fixed-price compliance work, with pen test findings and SOC alerts mapped to the controls you are assessed against.
Cyber Essentials
From £1,500
Precursor is an IASME-accredited Certification Body, so it can assess and issue certificates itself.
Read moreCyber Essentials Plus
From £3,000
The independent technical audit on top of Cyber Essentials, needed for many government contracts.
Read moreISO 27001 consultancy
From £8,000
Gap analysis, ISMS design, risk assessment and internal audit through to ISO 27001:2022 certification.
Read moreGDPR and data protection
From £5,000
Gap analysis, data mapping, records of processing and accountability evidence under UK GDPR.
Read moreCyber Security and Resilience Bill readiness
From £8,000
Scoping, gap analysis against the CAF, and incident reporting readiness for the Bill.
Read moreCyber insurance readiness
The evidence pack underwriters ask for. Policies are placed by broker partner New Dawn Risk; Precursor is not an insurance intermediary.
Read moreEdgeProtect. See the attack before it lands.
EdgeProtect is Precursor’s continuous monitoring and exposure management platform, formerly called Precursor Intelligence. It maps what you have open to the internet, watches the software you run and websites impersonating your brand, and tells you what changed and what to fix first. There are no agents to install.
A free tier, plus paid plans from £299 a month.
- Attack surface management. Discovers domains, hosts, open ports, services and certificates, then flags exposures and vulnerabilities.
- Vulnerability intelligence and triage. CVE data enriched with CISA KEV and EPSS, ranked by a 0–100 risk score with an action priority.
- Brand protection. Finds lookalike domains, captures evidence of phishing pages and drafts takedown requests for you to send.
- Exposed credentials. Staff credentials found in breach data, so you can reset them before they are used.
- Threat intelligence. Threat actors, ransomware activity, IOCs and exploitation seen in the wild, from sources including Shadowserver.
- Alerts and integrations. Email and in-app alerts, plus webhooks that deliver into Slack, Teams, Splunk or Microsoft Sentinel.
Accreditations and frameworks.
Each is independently assessed and audited.
CREST Penetration Testing
Company accreditation with individually examined CREST consultants.
CREST Vulnerability Assessment
The third of Precursor’s three CREST accreditations.
CREST SOC
One of fewer than 70 organisations worldwide holding both CREST SOC and Penetration Testing accreditation.
IASME Cyber Essentials Certification Body
Authorised to assess and issue Cyber Essentials and Cyber Essentials Plus certificates.
ISO 27001:2022
UKAS-accredited certification for Precursor’s own information security management system.
Crown Commercial Service G-Cloud 14
Pre-approved supplier for UK public sector buyers, including NHS trusts and local authorities.
Resources and events.
Resource hub
Free threat reports, sector briefings and practical guides from Precursor’s research, SOC and testing teams. Use them to understand the threats facing your sector, brief your board, vet suppliers and strengthen your cyber security posture ahead of the Bill’s duties.
- Annual and sector threat reports
- Board briefing templates
- Supplier security checklists
- Cyber insurance and incident readiness guides
Events and webinars
Keep up to date with upcoming briefings, roundtables and webinars for cyber security and business leaders, covering the threat landscape, regulation and practical resilience.
events.precursorsecurity.comOffices and contact details.
Monday to Friday, 9am to 6pm. Enquiries answered within two hours in business hours. Incident response is available 24/7/365 on the same number.
0113 486 4873
Sales, scoping and the 24/7 incident response line.
[email protected]
General enquiries and quotes.
Enquiry form
Tell us what you need and we will come back to you.
Leeds headquarters
55 St Paul's Street, Leeds, LS1 2TEHead office: leadership, the CREST penetration testing team, compliance and incident response.
Office detailsNewcastle SOC
Newcastle upon TyneThe CREST-accredited 24/7/365 Security Operations Centre, staffed by UK-based, DBS-checked analysts.
Office detailsLondon office
LondonClient meetings, scoping workshops and briefings for financial services, legal and government clients.
Office detailsEdinburgh office
83 Princes Street, Edinburgh, EH2 2ERClient meetings and scoping for Scottish organisations, next to Edinburgh Waverley station.
Office detailsAbout Precursor answered.
Precursor Security, a CREST-accredited UK cyber security firm, runs this site as an independent, plain-English guide to the Cyber Security and Resilience Bill (CSRB). It is not affiliated with UK Parliament or the UK Government.
Precursor provides penetration testing, a 24/7 managed SOC and MDR service, incident response, and compliance work including Cyber Essentials, ISO 27001 and GDPR. It also builds EdgeProtect, a platform for continuous attack surface and vulnerability monitoring.
Yes. Precursor holds three CREST accreditations: Penetration Testing, Vulnerability Assessment and SOC. It is also an IASME Cyber Essentials Certification Body, is certified to ISO 27001:2022 and is a Crown Commercial Service G-Cloud 14 supplier.
Precursor's headquarters is at 55 St Paul's Street, Leeds LS1 2TE. Its 24/7 Security Operations Centre is in Newcastle upon Tyne, and it has client offices in London and at 83 Princes Street, Edinburgh EH2 2ER.
Precursor publishes fixed prices from £2,500 for an external network test, at about £1,200 per CREST-accredited consultant day. Web application and cloud tests start from £3,750 and internal network tests from £6,250.
Yes. Precursor offers readiness work for the Bill, including scoping, a gap analysis against the NCSC Cyber Assessment Framework and incident reporting readiness. Its 24/7 SOC and incident response services support the 24-hour and 72-hour reporting deadlines.
Not sure where you stand on the Bill?
Take the free readiness assessment, or talk to Precursor's team about scoping, testing and 24/7 monitoring.