PureCyber

PureCyber

PureCyber Limited

Cardiff, Wales, United Kingdom

Penetration TestingOffensive SecurityManaged SecurityDetection & Response24/7 SOC
Founded 2016Serves Enterprise, SMB, Public Sector
Profile last updated: April 22, 2026

About

Founded in 2016, PureCyber is a cybersecurity company based in Cardiff, United Kingdom working in penetration testing, offensive security, managed security +8 more.

PureCyber is a UK cyber security company based in Cardiff, founded in 2016 by its CEO Damon Rands. It provides managed and professional cyber security services to organisations of all sizes and sectors, including public sector bodies that require IT Health Checks for PSN compliance. Its service portfolio covers penetration testing (infrastructure, application, web, mobile and API testing), red teaming, vulnerability scanning, incident response, breach monitoring, threat exposure management, phishing simulations and governance consultancy. Its managed offerings include a 24/7 UK-based Security Operations Centre and MXDR, which the company describes as vendor-agnostic and built around a proprietary detection engine. The company states that its penetration testers hold CREST certification and that its SOC is ISO 27001 certified. PureCyber positions its services as independent of, but complementary to, existing IT and network teams, and offers subscription packages (Foundation, Core and Total) as well as standalone one-off engagements.

Location

Cardiff, United Kingdom

Founded

2016

Company type

Limited company

Legal name

PureCyber Limited

Registration

10375137

Focus areas

penetration testingMXDRSOCincident responsethreat exposure managementbreach monitoringphishing simulationred teamingIT Health Checkvulnerability scanning

Languages

EN

Services & products

Security domains

Penetration TestingOffensive SecurityManaged SecurityDetection & ResponseIncident ResponseDigital ForensicsThreat IntelligenceApplication SecurityNetwork SecuritySecurity AwarenessGRC & Compliance

How they deliver

Managed ServicesProfessional ServicesConsultingSoftwareTraining

Operations

Runs a 24/7 security operations centre

Products

MXDR

MXDR

Vendor-agnostic managed extended detection and response service that consolidates endpoint, network, cloud, identity and email data, monitored by a 24/7 SOC.

Threat Exposure Management platform

Threat Exposure Management

Platform that monitors clear and dark web for unique business identifiers such as domains, email addresses and card numbers, alerting on data leaks, spoofing and brand misuse.

Phishing simulation platform

Security awareness

Platform for running bespoke phishing simulation campaigns and delivering training and metrics on employee susceptibility.

Customers

EnterpriseSMBPublic Sector

Industries served

Financial ServicesManufacturingRetailLegalHousingCharitiesSports & StadiumsE-commerce

Compliance & partners

Compliance frameworks

PSNGDPRPCI DSSHIPAASOC 2Cyber EssentialsMartyns Law

Technology partners

MicrosoftAWS

Credentials & affiliations

Certifications

CREST

Issued by: CREST

Cyber Essentials

Issued by: IASME

Cyber Essentials Plus

Issued by: IASME

ISO 27001

People

Management & team (1)

Other cybersecurity companies in United Kingdom

View all