Draft:Xypher

UK cyber security company From Wikipedia, the free encyclopedia


Xypher (pronounced cypher) is a United Kingdom-based cyber security company formed in 2025 through the acquisition and consolidation of four specialist cyber security and digital forensics businesses by private equity firm Limerston Capital.[1][2] Headquartered in the United Kingdom, Xypher provides managed services from offensive security and managed detection through to digital forensics and compliance consultancy, providing services including penetration testing, incident response, digital forensics, electronic discovery (e-Discovery) and compliance consultancy.[3] The company's constituent businesses, namely Aristi, CyberCrowd, DigitalXRAID and IntaForensics, continue to operate independently under the Xypher umbrella.[1] Xypher serves organisations across both the public and private sectors, including those operating in critical national infrastructure, national security, law enforcement, healthcare, legal services and energy.[4]

  • Comment: Sources are all either plain WP:CORPTRIV or affiliated with the company. Athanelar (talk) 19:23, 12 March 2026 (UTC)
  • Comment: In accordance with Wikipedia's Conflict of interest guideline, I disclose that I have a conflict of interest regarding the subject of this article. LauraG13DXR (talk) 12:39, 11 March 2026 (UTC)

History

Formation

Xypher was created by London-based private equity firm Limerston Capital, which was founded in 2015 by James Paget, João Rosa and Martim Avillez.[5] Limerston Capital pursues a buy-and-build investment strategy targeting UK mid-market businesses.[5]

The platform was established in May 2025 with the acquisition of CyberCrowd, a UK cyber security services provider.[2] This was followed two months later by the acquisition of DigitalXRAID, a managed security services provider based in Doncaster, in July 2025.[6][7] IntaForensics, a Coventry-based digital forensics specialist, joined the platform as part of the initial formation.[1] The fourth acquisition, Birmingham-based penetration testing and cyber security consultancy Aristi, was announced in December 2025, representing the third transaction within six months.[1][8] Following the completion of the Aristi acquisition, the consolidated platform was publicly named Xypher.[1]

Leadership

In January 2026, Xypher announced the appointment of Matt Parker as Chief Executive Officer.[4][9] Parker previously served as CEO of Babble, a UK cloud communications and managed services provider, where he led a buy-and-build strategy spanning more than 34 acquisitions.[10]

Constituent companies

Aristi

Aristi is a cyber security consultancy headquartered in Birmingham, England, at the Innovation Centre, Longbridge Technology Park.[11] The company was founded in 2008 by Harj Singh, who serves as its Chief Executive Officer.[11][12] Aristi specialises in penetration testing, red team exercises, cyber security consultancy, ISO 27001 consultancy, Cyber Essentials certification, Data Protection Officer (DPO)-as-a-Service, and virtual Chief Information Security Officer (vCISO) support.[8]

Aristi holds accreditation from the National Cyber Security Centre (NCSC) as a CHECK approved penetration testing provider,[13] and is accredited by CREST for penetration testing services.[14] The company is also listed as a supplier on the UK Government's Crown Commercial Service (CCS) framework and G-Cloud.[15] It was acquired by Limerston Capital in December 2025.[1]

CyberCrowd

CyberCrowd is a UK cyber security services provider incorporated on 7 June 2016.[16] The company is led by Managing Director Mike Robinson and provides services including 24/7 managed detection and response (MDR), penetration testing, governance, risk and compliance (GRC) consultancy, ISO 27001 certification readiness, cyber incident response, cyber incident exercising and security awareness training.[2][17]

CyberCrowd holds CREST accreditation for both penetration testing and security operations centre (SOC) services.[17] The company is NCSC Assured for Cyber Incident Response (CIR Level 2) and Cyber Incident Exercising (CIE).[17] It was acquired by Limerston Capital in May 2025 as the first acquisition in what would become the Xypher platform.[2]

DigitalXRAID

DigitalXRAID is a managed security services provider (MSSP) co-founded in 2015 by Rick Jones and Scott Goodwin.[18] The company is based in Doncaster, South Yorkshire.[18] Jones serves as Chief Executive Officer and Goodwin as Chief Operating Officer and Chief Technology Officer.[18][19] DigitalXRAID provides managed SOC and extended detection and response (XDR), penetration testing, vulnerability management, incident response, compliance services and cyber consultancy.[20]

The company holds CREST accreditation for its SOC service, penetration testing and vulnerability assessments amongst others.[20] It is NCSC CHECK approved for penetration testing of public sector and critical national infrastructure systems.[21] DigitalXRAID holds CREST OWASP Verification Standard (OVS) accreditation for web and mobile application penetration testing.[20] The company holds ISO 27001, ISO 9001, ISO 20000 and Cyber Essentials Plus certifications.[22] It holds a Microsoft Security Solutions Partner designation with a specialisation in Threat Protection.[23] DigitalXRAID is listed as a supplier on the UK Government's Crown Commercial Service (CCS) framework and G-Cloud.[24] In 2023, DigitalXRAID won Best Managed Security Service at the SC Awards Europe.[25] It was acquired by Limerston Capital in July 2025.[6]

IntaForensics

IntaForensics is a digital forensics and cyber security company based in Coventry, England, founded in 2004.[26] The company is led by Managing Director Carl Osborne, who also heads its Digital Investigation Unit and has a background in law enforcement digital investigations.[27] IntaForensics provides digital forensic investigation, cell site analysis, e-Discovery, electronic case management, cyber security, incident response and penetration testing services.[28][29] The company also develops Lima, a proprietary forensic case management software platform.[30]

IntaForensics is accredited by UKAS (United Kingdom Accreditation Service) to ISO/IEC 17025:2017 for digital forensics and geolocation analysis, and in 2023 became the first organisation in the United Kingdom to achieve this accreditation for cell site analysis.[31][32] Cell site analysis is a form of digital forensics used to establish the geographical location of a mobile device from call data records and network survey data, and is used in criminal prosecutions.[31] IntaForensics also holds accreditation to the Forensic Science Regulator's Codes of Practice and Conduct,[33] and certifications including ISO 9001:2015, ISO 27001:2022, ISO 14001:2015 and Cyber Essentials Plus. The company is a CREST member.[33] IntaForensics joined the Xypher platform as part of the initial formation by Limerston Capital in 2025.[1]

Services

Xypher's constituent companies collectively provide services across the cyber resilience lifecycle, including the following disciplines:[3]

  • Managed Security Services and Security Operations: 24/7 managed detection and response (MDR), CREST-accredited Security Operations Centre (SOC) services, extended detection and response (XDR) and managed vulnerability scanning, delivered by DigitalXRAID and CyberCrowd.[20][17]
  • Offensive Security and Penetration Testing: NCSC CHECK approved and CREST-accredited penetration testing, red team exercises and vulnerability assessments for public sector, critical national infrastructure and private sector organisations, delivered by Aristi, CyberCrowd and DigitalXRAID.[13][21]
  • Incident Response: Cyber incident response and incident exercising services, including NCSC Assured Cyber Incident Response (Level 2) delivered by CyberCrowd, and incident response services delivered by DigitalXRAID and IntaForensics.[17][20][21]
  • Digital Forensics and Investigation: Digital forensic examination, cell site analysis, digital investigation, expert witness services and forensic case management, delivered by IntaForensics.[28] IntaForensics works with law enforcement agencies across the UK and internationally.[28]
  • e-Discovery: Electronic discovery and forensic case management services for legal proceedings, delivered by IntaForensics.[28][30]
  • Compliance and Consultancy: ISO 27001 consultancy, Cyber Essentials and Cyber Essentials Plus certification,[22] GDPR and data protection consultancy, vCISO services and GRC advisory, delivered by Aristi, CyberCrowd and DigitalXRAID.[17][20]

Key people

  • Matt Parker, Chief Executive Officer: Parker was appointed CEO of Xypher in January 2026.[4][9] He previously served as CEO of Babble, a UK cloud communications and managed services provider, where he oversaw more than 34 acquisitions and grew the business to approximately £100 million in run-rate revenue.[10]
  • Tim Walton, Non-Executive Director: Walton serves as Non-Executive Director of Xypher.[34]
  • Harj Singh, CEO of Aristi: Singh founded Aristi in 2008 and has more than 20 years of experience in cyber security.[11][12]
  • Mike Robinson, Managing Director of CyberCrowd: Robinson led CyberCrowd at the time of its acquisition by Limerston Capital in May 2025.[2]
  • Rick Jones, co-founder and CEO of DigitalXRAID: Jones co-founded DigitalXRAID in 2015 alongside Scott Goodwin.[18]
  • Scott Goodwin, co-founder, COO and CTO of DigitalXRAID: Goodwin co-founded DigitalXRAID in 2015 and leads the company's technical operations and SOC capability.[18]
  • Carl Osborne, Managing Director of IntaForensics: Osborne heads IntaForensics and its Digital Investigation Unit, and led the company's application for UKAS ISO/IEC 17025 accreditation for cell site analysis.[27][32] He has a background in digital investigations in law enforcement, having joined Northamptonshire Police in 2007 before moving into the private sector.[27]

References

Related Articles

Wikiwand AI