NCC Group
Cyber security services including penetration testing, incident response and managed detection for businesses and governments.
nccgroup.com ↗ · NCC Group plc
Used as a subprocessor by 2 companies →
Subprocessors (22)
Checked Oct 27, 2026 · source disclosure ↗
| vendor | purpose | evidence |
|---|---|---|
| Amazon Web Services European Union, United Kingdom, United States, Asia-Pacific | Hosting, connectivity layer and middleware | “Amazon | Amazon Web Services (for hosting, connectivity layer and middleware)” |
| Microsoft Azure Netherlands, Ireland, United Kingdom, United States | Hosting, security data analytics and connectivity layer | “Azure (for hosting, security data analytics and connectivity layer)” |
| Microsoft 365 Netherlands, Ireland, United Kingdom, United States | Several office applications | “Office 365 (several office applications)” |
| Microsoft Entra ID Netherlands, Ireland, United Kingdom, United States | Active directory | “EntraID (for active directory)” |
| Mindgame Netherlands | Awareness campaign tool Consulting and Implementation | “Mindgame | Awareness campaign tool” |
| Reveal Data Germany | eDiscovery platform service Digital Forensic Incident Response | “Reveal Data Corporation | eDiscovery platform service” |
| ZyLAB ONE Netherlands | eDiscovery platform service Digital Forensic Incident Response | “ZyLAB ONE | eDiscovery platform service” |
| VMware Carbon Black Germany, United States, Belgium | Security data analytics service (endpoint protection) Managed Services | “Broadcom (VMWare Carbon Black) | Security data analytics service (Endpoint protection)” |
| CrowdStrike Germany, United States | Security data analytics service (endpoint protection) Managed Services | “CrowdStrike | Security data analytics service (Endpoint protection)” |
| CyCognito Belgium, Israel | External attack surface management service Managed Services | “CyCognito | External Attack Surface Management Service” |
| IASME United Kingdom | Vulnerability scan and audit platform service Managed Services | “IASME | Vulnerability scan & audit platform service” |
| Intermax Cloudsourcing Netherlands | Private hosting service Managed Services | “Intermax Cloudsourcing | Private hosting service” |
| Microsoft Sentinel Netherlands, Ireland, United Kingdom | Security data analytics service Managed Services | “Azure Sentinel” |
| Qualys Netherlands, United Kingdom, United States, Australia, India | Internal and external attack surface management services Managed Services | “Qualys | Internal & External Attack Surface Management Services” |
| Searchlight Cyber United Kingdom | Web monitoring service Managed Services | “Searchlight Cyber | Web monitoring service” |
| SentinelOne Germany, United States | Security data analytics service (endpoint protection) Managed Services | “SentinelOne | Security data analytics service (Endpoint protection)” |
| ServiceNow United Kingdom, Netherlands, Ireland | Security incident management platform service Managed Services | “ServiceNow | Security incident management platform service” |
| Splunk Germany, United Kingdom, United States, Australia | Security data analytics (SIEM) service Managed Services | “Splunk | Security data analytics (SIEM) service” |
| Thinkst Canary Ireland, United Kingdom, United States, Australia | Threat detection and deception service Managed Services | “Thinkst Canary | Threat detection and deception service” |
| Umbrio Netherlands | Support service Managed Services | “Umbrio (Davinsi) | Support service” |
| DigitalOcean Germany, Netherlands, United Kingdom, United States, Canada, Australia, Singapore | Hosting; self-service Linux machines for short-term projects Technical Assurance Services | “Digital Ocean | Hosting (Digital Ocean Cloud) Self service linux machines for short term projects” |
| Horizon3.ai United States, Germany | Automated testing services Technical Assurance Services | “Horizon3.ai (NodeZero) | Providing automated testing services” |
- Amazon Web ServicesEuropean Union, United Kingdom, United States, Asia-Pacific
Hosting, connectivity layer and middleware
“Amazon | Amazon Web Services (for hosting, connectivity layer and middleware)”
- Microsoft AzureNetherlands, Ireland, United Kingdom, United States
Hosting, security data analytics and connectivity layer
“Azure (for hosting, security data analytics and connectivity layer)”
- Microsoft 365Netherlands, Ireland, United Kingdom, United States
Several office applications
“Office 365 (several office applications)”
- Microsoft Entra IDNetherlands, Ireland, United Kingdom, United States
Active directory
“EntraID (for active directory)”
- MindgameNetherlands
Awareness campaign tool
“Mindgame | Awareness campaign tool”
- Reveal DataGermany
eDiscovery platform service
“Reveal Data Corporation | eDiscovery platform service”
- ZyLAB ONENetherlands
eDiscovery platform service
“ZyLAB ONE | eDiscovery platform service”
- VMware Carbon BlackGermany, United States, Belgium
Security data analytics service (endpoint protection)
“Broadcom (VMWare Carbon Black) | Security data analytics service (Endpoint protection)”
- CrowdStrikeGermany, United States
Security data analytics service (endpoint protection)
“CrowdStrike | Security data analytics service (Endpoint protection)”
- CyCognitoBelgium, Israel
External attack surface management service
“CyCognito | External Attack Surface Management Service”
- IASMEUnited Kingdom
Vulnerability scan and audit platform service
“IASME | Vulnerability scan & audit platform service”
- Intermax CloudsourcingNetherlands
Private hosting service
“Intermax Cloudsourcing | Private hosting service”
- Microsoft SentinelNetherlands, Ireland, United Kingdom
Security data analytics service
“Azure Sentinel”
- QualysNetherlands, United Kingdom, United States, Australia, India
Internal and external attack surface management services
“Qualys | Internal & External Attack Surface Management Services”
- Searchlight CyberUnited Kingdom
Web monitoring service
“Searchlight Cyber | Web monitoring service”
- SentinelOneGermany, United States
Security data analytics service (endpoint protection)
“SentinelOne | Security data analytics service (Endpoint protection)”
- ServiceNowUnited Kingdom, Netherlands, Ireland
Security incident management platform service
“ServiceNow | Security incident management platform service”
- SplunkGermany, United Kingdom, United States, Australia
Security data analytics (SIEM) service
“Splunk | Security data analytics (SIEM) service”
- Thinkst CanaryIreland, United Kingdom, United States, Australia
Threat detection and deception service
“Thinkst Canary | Threat detection and deception service”
- UmbrioNetherlands
Support service
“Umbrio (Davinsi) | Support service”
- DigitalOceanGermany, Netherlands, United Kingdom, United States, Canada, Australia, Singapore
Hosting; self-service Linux machines for short-term projects
“Digital Ocean | Hosting (Digital Ocean Cloud) Self service linux machines for short term projects”
- Horizon3.aiUnited States, Germany
Automated testing services
“Horizon3.ai (NodeZero) | Providing automated testing services”