9 T H N OV E M B E R 2 02 6 H I LTO N LO N D O N C A N A RY W H A R F
Headline Sponsor
CONTENTS
W
e’re delighted that you have chosen to join us at the Cyber Secure Forum – a unique event, tailor-made to meet your individual requirements. We have carefully planned out your itinerary to ensure your time here is worthwhile: Connect with businesses relevant to your current and forthcoming projects in our matchmade one-to-one meetings. And let’s not forget the networking – we’ve created a relaxed environment for you to form new partnerships, with ample opportunities to mix with peers during the buffet lunch and coffee breaks!
4 6 8
Our Partners
Itinerary
‘Email Signature Management: Governance, compliance and brand control for IT teams’
10 12 14
Seminars
‘Privileged Identity Management: Reducing standing privilege and administrative risk’
Delegates
16
‘Customer Service Software: Should you consolidate ticketing, chat and helpdesk tools?’
18
Dates for your Diary
22
Supplier Directory
Follow us on socials
@forumeventsltd #CyberSecureForum
@forumevents #forumevents
Cyber Secure Forum
For more information about our event, contact: Mark Connell - Portfolio Manager on 01992 374083 or m.connell@forumevents.co.uk Josh Kingsmill - Delegate Sales Executive on 01992 374081 or j.kingsmill@forumevents.co.uk
Brought to you by
@ForumEventsLtd
3
Our Partners Headline Sponsor
4
Our Partners
Partners & Supporters
Fighting Economic Crime Together
5
Itinerary 08.45 - 09.25 Opening Presentation ‘Inside the Mind of a Fraudster in the Age of AI’ Paul Connolly Journalist, Radio Presenter & Media Trainer Meeting Room 4&5
09.30 - 10.00 Seminar ‘Cyber Essentials: The Baseline of a Strong Cyber Resilience Plan’ Joe Checketts, CE Technical Analyst IASME Meeting Room 4&5
10.05 - 13.05 Face to Face Meetings Quayside Suite
13.05 - 13.50 Networking Buffet Lunch Cinnamon Restaurant
13.55 - 14.40 Interactive Session ‘NEW Cyber Escape Room – The Breach’ Mike Wager, Commercial Director The Cyber Escape Room Co Meeting Room 4&5
14.45 - 16.45 Face to Face Meetings Quayside Suite
6
Find and fix vulnerabilities fast
Unified multi-cloud security
Streamline compliance and workflows
Automatically uncover shadow IT
intruder.io
Email Signature Management: Governance, compliance and brand control for IT teams
W
hen your company’s registered address changes, can you update every email signature without asking employees to copy and paste a new footer? Email signature management controls how signatures are created, approved, deployed and updated across an organisation. For IT teams, the key questions are simple: who can change the content, who approves it and whether the right version reaches recipients. Why decentralised email signatures become a governance problem A corporate template does not create central control if employees maintain their own copies. Roles change, campaigns expire and company details are updated. Local signatures can continue showing outdated information long after the approved version has changed. That creates problems beyond formatting: • Marketing cannot reliably withdraw campaign content • Legal cannot confirm that approved wording is in use • IT ends up fixing individual signatures without controlling the process Start by checking what recipients actually receive. Send non-confidential test messages from different departments, clients and mailbox types to a controlled external address. Include desktop, browser, mobile and shared-mailbox scenarios.
8
Then, record the differences against the approved standard. UK compliance: what your email footer needs to get right Company details and legal disclaimers are different UK company trading-disclosure requirements extend to business emails. For a typical limited company, relevant details include: • Registered company name • Company number • Registered office address • The part of the UK in which the company is registered • Limited-company status A confidentiality notice does not replace those disclosures. Legal or company secretarial teams should approve the details for each legal entity. Where several entities share an email environment, assign the correct disclosure to each sender. Employee contact details can be personal data An employee’s name and identifiable business contact details can be personal data under the UK GDPR. Use only the information needed for the signature and keep it accurate. Do not publish private contact details simply because they exist in a directory field. During supplier assessment, establish: • Which personal data the service receives • Where it is processed • Who can access it • How it is deleted
Employees should also have a clear route for correcting inaccurate information. Accessibility is about usable information, not certification Keep essential information as text rather than embedding it in a single image. Use suitable text alternatives for meaningful images, descriptive links and sufficient colour contrast. Test the signature with a screen reader and with images disabled. A visually consistent template does not prove the information is accessible. Regulated firms need the right disclosure FCA-regulated firms may need prescribed regulatory-status wording in emails relating to regulated activity. Compliance teams should define which wording applies, where it appears and which senders require it. Where IT ownership ends and Marketing’s begins IT should own the technical service, not every content decision. Marketing needs enough control to manage approved brand content without gaining unnecessary access to mail flow, security settings or regulatory wording. Nominate one service owner to coordinate the process, manage exceptions and keep responsibilities clear. You can read the complete article in the IT Briefing newsletter by scanning or clicking this QR code.
Seminars MONDAY 9TH NOVEMBER
08.45 – 09.25
“Inside the Mind of a Fraudster in the Age of AI” What today’s criminals think, how they operate, and how AI is reshaping the threat. This keynote blends first-hand undercover stories from inside real fraud gangs with the latest research on AI-enabled deception. Delegates get an unfiltered look at the behaviours, motivations and methods of modern fraudsters, explained through vivid real-world experiences and then backed by data. It’s fast, forensic and deeply practical for organisations trying to stay ahead. • • •
Paul Connolly Journalist, Radio Presenter & Media Trainer
09.30 – 10.00
•
How fraudsters think and behave - the psychological traits seen repeatedly during undercover infiltrations and how they show up in today’s cyber and financial scams. Why AI amplifies criminal opportunity - real stories that illustrate how AI tools mimic trust, speed up attacks and erase traditional warning signs. New patterns of deception - the subtle behavioural markers and operational habits that indicate elevated fraud risk inside any organisation. Building smarter defences - how leaders can apply undercover-style awareness, questioning and preparation to protect staff and systems.
Paul Connolly is a highly experienced and elite-level keynote speaker, celebrated for his commanding presence and ability to engage audiences across diverse platforms. With a wealth of experience as a radio presenter, podcaster, and media trainer, Paul has honed his communication expertise through years of delivering award-winning content. His radio documentaries have won prestigious awards, and his podcast productions have been nominated for accolades, highlighting his skill in crafting compelling narratives and thoughtprovoking discussions. Paul’s voice is familiar to listeners on BBC Radio 4, BBC World Service, and News Talk, the largest news and talk radio station in the Republic of Ireland. In addition to his speaking and training expertise, Paul is an internationally recognised television presenter whose documentaries have been featured on various platforms.
“Cyber Essentials: The Baseline of a Strong Cyber Resilience Plan” Cyber Essentials gives organisations a clear, practical baseline for cyber resilience. This session explains how it fits into a wider risk-based plan and helps build consistency, confidence, and trust. • • • • •
Joe Checketts CE Technical Analyst IASME
10
What Cyber Essentials is (and what it isn’t) Why baseline controls matter for resilience and risk reduction Where Cyber Essentials fits within a wider cyber resilience plan Common gaps and how to address them pragmatically Sustaining the baseline: ownership, assurance, and continuous improvement
Joe Checketts spent 10 years coordinating a government green power scheme at one of the big utility companies, and then found his way to cyber security via the UKCSF’s cyber security training scheme in 2022. Off the back of that scheme, CEO Emma Philpott invited him to come and work for IASME. He initially joined the Certification Technical Team and after six months began working with Head of Cyber Essentials, Neil Furminger. He was instrumental in creating the Cyber Essentials Knowledge Hub and has been closely involved with the development and delivery of the Cyber Essentials standard for the past four years.
Seminars 13.55 - 14.40
“NEW Cyber Escape Room – The Breach” A ransomware attack. Five suspects. Five possible compromise paths. Your team must analyse IT logs, decode a live vishing call, and crack the case before the decryption window closes. •
•
•
Mike Wager Commercial Director The Cyber Escape Room Co
•
Social Engineering - Players encounter a live vishing call mid-investigation - and by the time it arrives, they’ve already followed the breadcrumbs that led to it. They don’t just learn what vishing is. They feel exactly how it works. That recognition carries back into their actual working day. Social Media Privacy & OSINT - Suspects in the scenario have real-looking social profiles. Players discover - sometimes uncomfortably - how much an attacker can learn from an Instagram profile. The lesson isn’t abstract. It’s their own digital footprint staring back at them. Role-Based Attack Profiles - The scenario shows how attackers target specific roles differently - what they want from a finance team versus an IT administrator versus an executive assistant. Players start to see themselves as a target profile, not just a general employee. That shift in perspective changes how people make decisions. Shared Security Responsibility - The breach didn’t happen because IT failed, it happened because one ordinary person made one ordinary decision under pressure. The Breach makes that viscerally clear - and does it without blame. Players leave understanding that security isn’t someone else’s job.
A decade of Cyber Security sales working with some of the worlds biggest brands on GRC transformation programmes has led Mike Wager to partner with Amy in bringing new solutions to established problems. Supporting organisations to ensure end user engagement as the foundation of security awareness projects, programmes and events; the Cyber Escape Room Co are proud to partner with nationally and internationally recognised brands to maximise security initiative impacts
11
Privileged Identity Management: Reducing standing privilege and administrative risk
W
ho can still administer critical systems after the maintenance window closes? For CISOs and IAM leaders reviewing privileged identity management, that question goes beyond credential protection. The greater risk is elevated access remaining available when nobody needs it. What is privileged identity management? Privileged identity management (PIM) governs who is eligible for elevated permissions, when those permissions can be activated and how long they remain available. Privileged access management (PAM) covers the wider controls used to secure, monitor and manage privileged access. Vendor terminology varies, so the practical comparison is capability rather than product label. Both sit within identity and access management (IAM), but privileged access requires additional controls because administrators can change security settings, manage accounts and alter critical systems. Why standing privilege deserves attention Standing privileges remain available between administrative tasks. A contractor who needs access for occasional maintenance, for example, may retain elevated permissions throughout the month. If their credentials are compromised, those permissions are already available to an attacker. IBM reported that 32% of incidents handled by X-Force in 2025 involved abuse of valid accounts. That makes persistent access the
12
first area to review: which employees and third parties retain powerful roles when no administrative task is underway? Three controls that need to work together Reducing privileged-access risk requires more than protecting passwords. Credential vaulting, session management and just-intime access address different parts of the access lifecycle. Credential vaulting: protect the credential Credential vaulting stores privileged passwords, keys and other secrets in a controlled repository. Where supported, session brokering allows administrators to connect without seeing the password, while automated rotation reduces the value of previously obtained credentials. But protecting a credential does not remove the permissions attached to the account. The control therefore needs to establish: •Whether access is restricted or the underlying permission is removed •What happens when credential rotation fails •Which systems depend on the credential Session management: make activity accountable Privileged session management links administrative activity to an identifiable user and session. Depending on the platform and connection method, evidence may include event logs, commands or session recordings. Recording alone is not enough; the operating model also needs to define who receives
alerts, who investigates suspicious activity and who can terminate access. Coverage matters as well. Browser consoles, command-line tools and remote administration routes should all be included where they provide privileged access. Those records should feed the security function responsible for investigation and response, rather than remain isolated inside the PAM platform. Just-in-time access: limit the permission window Just-in-time (JIT) access replaces persistent permissions with temporary elevation. An administrator requests access to a defined resource for a defined period. Policy or approval determines whether access is granted, and the permission is removed when the task or access window ends. The audit trail should record the request, approval, access and revocation. JIT is strongest when combined with just-enough access. Thirty minutes of unrestricted administration can still provide more privilege than the task requires. Approval also needs to work outside normal office hours. A control that cannot support urgent administration will quickly accumulate exceptions. Together, the three controls answer different questions: how is privileged access obtained, what happens while it is used, and what remains afterwards? You can read the complete article in the IT Briefing newsletter by scanning or clicking this QR code.
STARTS WITH SECURE ACCESS
ZERO TRUST
Simplify and strengthen access controls for every user, on any device with AppGate ZTNA – a leading Zero Trust Network Access solution
STRENGTHEN SECURITY
Reduce Attack Surface: Ports, workloads and applications are invisible unless authenticated and
authorized to access. Verify Identity: Access permissions are conditional and based on user context such as role, date, time, location and device posture. Dynamically Adjust Entitlements: As context surrounding the identity changes in real time, so can the user’s entitlements. Prevent Lateral Movement: Surgical micro-segmentation eliminates visibility and access to unauthorized resources. Secure East-West Traffic: Control bi-directional connections between resources on the network.
REDUCE COMPLEXITY
Simplify Policies: Single framework for all users, devices, networks and infrastructure. Deploy Easily: Flexible options for user access (client or browser-based) and hosting (self managed
or as a service).
Unify Access: Consistent experience and configuration across hybrid IT reduces administrative
burden.
Automate Access: Metadata and context-driven policies allow access entitlements to dynamically adapt to environment. Reduce Audit Scope: Micro-segmentation and comprehensive access logs simplify compliance.
IMPROVE EXPERIENCE
Flexible User Options: Choose from client or browser-based access. Concurrent Connections: Multi-tunneling connects users directly to all approved cloud, SaaS and
on-premises resources simultaneously. Boost Productivity: Seamless and consistent user experience with simple onboarding. Ultra-High Performance: 93% throughput efficiency and less than 1ms latency. Reduce Tools: Unified solution for trusted access, remote and on-premises.
STREAMLINE AUTOMATION
Automate Policies: Leverage data from Identity & Directory Systems and environmental metadata
to dynamically create or extend policies and entitlements. Automate Infrastructure: Control, build and manage infrastructure-as-code with the GitHub ZTNA Operator. Orchestrate Workflows: Integrate with existing enterprise operation or business support systems, such as IT service management (ITSM) or ticketing platforms. Enhance Device Checking: Integrate with endpoint solutions to ensure a “trusted device” as criteria for access. Put Data to Work: Push detailed access log activity and use risk data as access criteria from other tools, such as SIEMs and UEBAs.
WITNESS THE POWER OF APPGATE ZTNA Each week our ZERO TRUST EXPERTS demonstrate the capabilities of the industry’s most comprehensive ZTNA solution.
REGISTER NOW
›
About AppGate
AppGate secures and protects an organization’s most valuable assets with its high performance Zero Trust Network Access (ZTNA) solution and Cyber Advisory Services. AppGate is the only direct-routed ZTNA solution built for peak performance, superior protection, and seamless interoperability. AppGate Cyber Advisory Services harden your security posture and ensure business continuity. AppGate safeguards enterprises and government agencies worldwide. Learn more at appgate.com. SDP0408
Delegates
Action Against Hunger
IT Manager
Adsatis Limited
CIO
Allpoints Fibre
Technology Category Manager
Aviva
Senior Manager - Tech & Cyber Risk
Bally’s interactive
Senior Information Security Consultant
Barclays
Head of Cyber security Payment & FX- Corporate Bank
Brent Council
Strategic Lead AI & Automation
Broadstone Corporate Benefits
Head of IT Services & Security
Caretech Community Services
Group Head of Cyber & Information Security
Childrensalon
Cloud & Cyber Analyst
Commonwealth Secretariat
Support Analyst Head Information Security Officer Head of ICT Data & Analytics
Country Court Care Homes
Cyber Security Administrator IT Manager
Croydon Council
Senior Cyber Security Engineer
Currys
Senior Cyber Security Manager/Head of IT
Dnata Catering UK
Head of Infrastructure
Exposure
Desktop and Security Team Leader
Geotechnical Engineering Ltd
IT Lead
Givaudan
IAM Technology Manager
Goldsmiths University
Head of Enterprise Architect
HSBC
Programme Director
InCrowd Sports
Head of IT
Judge & Priestley
Cyber Security Engineer Head of Technology
Kenya Airways
14
Cybersecurity Manager
Delegates
Metro Bank
Senior Tech Lead
Metropolitan Thames Valley Housing
Cyber Security Officer Information Security Manager
Ministry Of Justice UK
IT Project Manager
MOD
Intelligence Training Officer
National Gas
Head of IDAM Delivery
National Grid
Cyber Security Product Manager
Ofgem
Chief Technology Officer
Olympia London
IT Project Manager
QBE Insurance
Senior Cyber Security Consultant
Rolls-Royce
Global Head of Cyber Security Strategy and Enterprise Architecture
Social Finance
IT & IG Lead
Solia Investments Ltd
Cybersecurity Programme Manager
Sonic Healthcare
Information Security Officer
Spencer Private Hospitals
Head of Digital Transformation & Information Governance
Supporting Education Group
Director of Transformation
Teciem
Programme Manager
The Sheiling Ringwood
Network Manager
The SR Group
Head of IT Innovation
Tide
Information Technology Operations Manager
TSB Bank
Infrastructure Security Manager
UCL
Senior Technology Leader, Director
UK Health Security Agency
Cyber and Corporate Risk officer
University of Cambridge
University of Cambridge SU Director & Trustee; Operational Support Manager
University of West London
Head of AI
15
Customer Service Software: Should you consolidate ticketing, chat and helpdesk tools?
A
customer emails about a delayed delivery, follows up on chat and then calls. Can the third agent see what the first two have already done? Customer service software should make that history easier to access, not force agents to reconstruct it across separate systems. For IT leaders reviewing ticketing, live chat and helpdesk tools, the consolidation decision comes down to three questions: what operational problem will a new platform solve, what data and workflows need to move, and which existing systems can actually be retired? This guide explains where consolidation can add value, when integration is the better option and what to test before choosing a customer service platform.
16
Where disconnected tools create problems Start with a real customer enquiry and follow it from first contact to resolution. Look for three sources of friction: • Overlapping costs: Compare your ticketing software, helpdesk software and live chat software subscriptions. Identify duplicated capabilities, unused licences and the administration each system requires. • Missing customer context: Check whether an agent can see earlier conversations, promised actions and relevant account information. Disconnected channels can leave customers repeating details that another team already holds. • Manual handovers: Count the times agents switch applications, copy notes or chase colleagues to establish ownership. Use those findings to define the business case. Reducing software
spend can matter, but clearer case ownership, faster access to customer history or fewer manual handovers may deliver more operational value. What does a unified customer service platform actually mean? A unified platform should connect the work, not simply put several products on one invoice. The practical test is whether customer context, routing and agent workflows operate coherently across channels. Shared customer and conversation records Omnichannel customer service connects interactions so relevant history follows the customer between email, chat, phone and other channels. Ask suppliers to demonstrate how customers, accounts, tickets and messages are linked. Test duplicate contacts and scenarios where the same customer uses different email addresses. Also establish which system owns each type of data. The CRM may remain the system of record for customer information while the service platform manages cases and conversations. Routing across channels Routing should consider workload across channels rather than treating email, chat and phone as separate queues. Test what happens when a high-priority enquiry arrives while the relevant team is already busy. The demonstration should show how skills, urgency, availability and workload affect assignment.
One usable agent workspace Agents should be able to handle conversations, find relevant information and update cases without rebuilding the customer’s history. That does not require every underlying system to be replaced. A shared workspace can surface data from retained applications. Test an email-to-chat-to-phone handover. A common interface is not enough if agents still need several systems to understand the case. Customer service platform vs CRM: which problem are you solving? A customer service platform focuses on support operations such as cases, tickets, conversations, queues, knowledge and service-level agreements. A customer relationship management (CRM) system has a broader role across customer and prospect records, sales, marketing and service. Use the scope of the problem to decide what to review: • Review the customer service platform when the main issue is disconnected support channels and the organisation is otherwise satisfied with its wider CRM processes. • Consider a broader CRM programme when customer data, ownership or sales and service processes are inconsistent across departments. Evaluate the service module you already own before adding another platform, using the same tests for usability, integration, licensing and migration effort. You can read the complete article in the IT Briefing newsletter by scanning or clicking this QR code.
LONDON, UK
CYBER SECURE FORUM
Resilience isn’t a reaction. We are Protrona, a proactive cybersecurity partner backed by industry-leading Microsoft Partner accreditations and government-recognised security standards, helping you stay ahead of every threat.
Managed Detection & Response
Penetration Testing
24/7 monitoring, threat hunting and rapid containment.
Real-world attack simulation before adversaries strike.
Dark Web Monitoring
Vulnerability Management
Early warning the moment your data surfaces.
Continuous scanning with prioritised remediation.
Incident Response
Compliance & Governance
Expert-led breach containment, eradication & recovery.
GDPR-aligned policies, audits and risk management.
ALL 6 MICROSOFT SOLUTIONS PARTNER DESIGNATIONS
GOVERNMENT-RECOGNISED STANDARDS
AT THE FORUM
Let’s find your gap before an attacker does. protrona.com
PROTRONA SERVES REGULATED PROFESSIONAL SERVICES
Dates for your Diary
4th February 2027 Hilton London Canary Wharf
8th July 2027
18
11th March 2027 Hilton Canary Wharf
18th & 19th October 2027
Hilton London Canary Wharf
Radisson Hotel & Conference Centre, London Heathrow
Scan or click here for our website:
Scan or click here for our website:
23rd September 2027
3th November 2027
Hilton London Canary Wharf
Hilton London Canary Wharf
Scan or click here for our website:
Scan or click here for our website:
AI WRITES THE CODE NOW.
IT CAN’T RELIABLY KNOW WHAT IS SAFE.
TRUST WHAT SHIPS
Dependency remediation at agent speed.
SHARE YOUR TIME AT OUR EVENT ON SOCIAL MEDIA! #FECyberSecureForum @forumeventsltd @forumevents Forum Events & Media Group
ALSO LET
KNOW YOUR EXPERIENCE!
Supplier Directory Aikido Security 07988 975 066 | jacob@aikido.dev | aikido.dev Aikido is the no-nonsense security platform for developers. The all-in-one security platform that covers you from code-to-cloud and helps you get security done. Engineering teams execute faster with Aikido thanks to centralized scans, aggressive false positive reduction, automatic risk triaging & fixing, risk bundling, and easy step-by-step risk fixes. Aikido makes security simple and doable for developers, so companies can win customers, grow up-market, and ace compliance. Don’t just get security done fast, get it done automatically.
Appgate Cybersecurity, Inc 07971 809 723 | tony.price@appgate.com | appgate.com AppGate secures an organization’s most valuable assets with its Zero Trust Network Access (ZTNA) Platform. It’s the leading ZTNA platform for enterprise IT, OT and AI protection. AppGate is the only direct-routed ZTNA solution built for peak performance, data sovereignty and seamless interoperability. AppGate safeguards enterprises and government agencies worldwide. Learn more at appgate.com.
Arcanum Information Security Ltd 07927 539 956 | richard.jones@arcanumis.com | arcanum-cyber.com Arcanum is a NCSC Assured Cyber Security Consultancy specialising in Risk Management, Audit and Review, Security Architecture, Cyber Resilience Audit, and both CREST and CHECK Penetration Testing. For more than a decade, Arcanum has helped organisations across defence, critical national infrastructure and commercial industries understand and manage their cyber security risks. Our team includes Certified Cyber Professionals with top-level security clearance and extensive experience of securing complex IT and Operational Technology (OT) environments. Our expertise spans OT security assessments, ISA/IEC 62443 alignment, Cyber Assessment Framework (CAF) and NIS regulatory consultancy, helping organisations strengthen resilience and meet evolving security and compliance requirements. Having supported Defence Primes and their critical supply chains, Arcanum also works closely with the MOD and IASME as a Defence Cyber Certification body. From risk assessment and security architecture to regulatory readiness, penetration testing and certification support, Arcanum provides independent, practical expertise to protect critical operations.
22
Darktrace Holdings Limited 07974 590 984 | isabel.carter@darktrace.com | darktrace.com Darktrace secures the modern enterprise by protecting people and AI with behavioral security. Founded in 2013, Darktrace pioneered Self-Learning AI for cyber defense, applying behavioral intelligence to understand what is normal for an organization and detect novel threats that others miss. Today, the Darktrace platform and services protect nearly 10,000 customers across major industries globally, providing unified visibility, continuous behavioral monitoring, and autonomous response across the enterprise. Darktrace is recognized as a leader in helping organizations stop AI-powered threats across AI and agents, email and collaboration tools, and hybrid networks, while enabling them to safely innovate with AI.
DXR Cyber 08000 903 734 | richard.monnery@dxrcyber.com | dxrcyber.com DXR Cyber offers a comprehensive suite of cyber security and resilience services, including a 24/7 UK-based Security Operations Centre (SOC), incident response, cyber consultancy, managed security services and penetration testing. This is combined with digital forensics and investigative services, including market-leading digital forensics and cell site analysis capabilities, e-Discovery solutions and proprietary forensic case management software.
Esc. The Cyber Escape Room 07828 918 423 | cyberescaperoom.co We are a behavioural change company that uses play, pressure, and storytelling to improve how people respond to cyber risk. Most organisations get security awareness backwards — starting with policies and slides that nobody remembers. CERCo flips the model. Our immersive experiences create genuine engagement first, then build shared culture, so that secure behaviour becomes instinctive — and able to be recalled under pressure. Our product ecosystem spans physical cyber escape rooms (ESC), large-scale immersive builds (SPACE_), digital solo scenarios (SHIFT), augmented reality experiences (ALT), facilitated breach workshops (CMD), and AI-powered vishing simulations (CTRL+Vish). Each product plays a distinct role in moving organisations along a behaviour change journey — from initial engagement through to instinctive, pressure-tested security responses. The impact of which is able to be captured using Instinct Lab. We work with CISOs, security awareness leads, and L&D teams who want real behaviour change, not tick-box compliance.
23
eSentire 07539 077 399 | manny.leon@esentire.com | esentire.com eSentire is a leader in Controlled Autonomy SecOps, protecting 2,000+ organizations across 35+ industries around the world. Founded in 2001, the company’s Controlled Autonomy SecOps operating model pairs agentic AI operatives with engineered human-judgment controls, delivering expert-depth security outcomes at machine speed without ceding accountability to opaque automation. Powered by the unified agentic AI Atlas Platform, eSentire’s Atlas AI + 24/7 expert human SOC coverage delivers offensive capabilities that preempt exposures before attackers do, detect, and respond to stop threats in real time.
Exponential-E 07874 780 051 | Daniel.Marmion@Exponential-e.com | Exponential-e.com Exponential-e is a leader in Cloud, Connectivity, Communications, Cyber Security, and Managed IT. A proudly sovereign UK company, our uniquely consultative approach enables us to deliver bespoke, fully integrated solutions that serve as the foundation for scalable, high-performance IT infrastructure. As a trusted technology partner for more than 3,000 companies, our evolving portfolio encompasses everything from public and private Cloud to leading-edge SD-WAN and cyber security solutions, supported by our managed IT services. Our commitment to innovation and customer satisfaction is at the forefront of our endeavours, reflected in our nine ISO accreditations and industry-leading NPS score, updated live on our website.
Fitzrovia IT 07885 290 306 | adaml@protrona.com | fitzroviait.com Protrona is a London-based managed security service provider (MSSP) and a specialised branch of Fitzrovia IT focused solely on cybersecurity. Our attention, expertise, and resources are dedicated entirely to protecting our clients rather than being spread across broader IT services. We hold all six Microsoft Solutions Partner designations; a distinction held by only a small number of UK providers, alongside ISO 9001, 14001, 22301, 27001 and 45001 certifications, reflecting genuine technical depth and a commitment to quality, security, resilience and continuous improvement. From cybersecurity assessment and managed security services to cloud security infrastructure, we help organisations strengthen their security posture while meeting the demands of day-to-day operations. Our team combines hands-on technical expertise with a thorough understanding of industry frameworks and regulatory requirements, giving clients confidence that their security needs are handled to the highest standard, whatever their size or sector.
24
GitGuardian 07936 158 867 | gitguardian.com GitGuardian is the credential security platform. Attackers no longer break in, they log in, and GitGuardian helps enterprises find every exposed credential before it becomes a breach, from the developer’s laptop to public GitHub. GitGuardian detects 550+ types of secrets across code, CI/CD pipelines, collaboration tools, cloud configs, developer laptops and many more. Customers cut mean time to remediate with detailed context and seamless workflows, detect credentials everywhere they can live and prevent them from leaking in the first place. Trusted by 600,000+ developers, GitGuardian is the #1 security app on the GitHub Marketplace. Trusted by enterprise organisations globally to detect, remediate and prevent secret sprawl.
Halcyon 07989 538 697 | Lkinder@halcyon.ai | halcyon.ai Ransomware will come for your business. Halcyon makes sure it doesn’t win. Ransomware has evolved into a humanled operation, with real attackers using AI-powered tools to evade your defenses, destroy your backups, and shut your business down. Halcyon adds a ransomware-native defense layer that catches what generalist tools were never designed to stop, preventing data extortion and making encryption virtually impossible. And if something gets through, we recover in minutes, not weeks. Turning what could have been a business-ending event into a non-event. halcyon.ai
Hexiosec 01242 474 970 | jonathan.viney@hexiosec.com | hexiosec.com Hexiosec is a UK-based cyber security company founded in Cheltenham by former UK government and defence intelligence engineers. We build and operate two specialist products - Hexiosec ASM (External Attack Surface Management) and Hexiosec Transfer (UK-sovereign encrypted file transfer)
25
Iasme 03300 882752 | info@iasme.co.uk | iasme.co.uk IASME is a cyber security certification company who works with a network of more than 900 cyber security experts to help organisations of all sizes to improve and demonstrate their cyber security. Fairness and inclusion are central to our business and we bring these values to everything we do.
Intruder 07776 534 718 | sam.gillon@intruder.io | intruder.io Intruder’s continuous exposure management platform helps security, IT and engineering teams stop breaches before they start. By unifying AI penetration testing, attack surface monitoring, cloud security and vulnerability management in one intuitive platform, Intruder gives stretched teams an always-on security source of truth. Founded in 2015 by Chris Wallis, a former ethical hacker turned corporate blue teamer, Intruder is now protecting over 3,000 companies worldwide.
LRQA Cyber 0121 817 4636 | karen.nagra@lrqa.com | lrqa.com/en-gb At LRQA, we work with you to build a connected defence across your organisation – helping you identify and manage risks, strengthen resilience and make more informed decisions in the face of growing cyber threats. We are trusted by organisations worldwide to identify, manage and respond to cyber risk at scale and are one of the only organisations worldwid with a full suite of CREST accreditations.
26
Recyber 07855 415 267 | andrew.clarke@recyber.com | recyber.com Recyber | Behavioural Risk Intelligence Recyber is a UK-based cybersecurity company challenging the way organisations understand and manage human risk. Traditional cybersecurity approaches focus on technology, compliance and employee behaviour after an incident has occurred. Recyber takes a different approach, recognising that behavioural vulnerabilities can exist long before they manifest as security events. Our proprietary platform, Republic, uses behavioural science and advanced analytics to identify, measure and monitor individual and organisational susceptibility to cyber threats. By understanding the factors that influence security-related decisions, Republic enables organisations to move beyond generic awareness training towards targeted, evidence-based interventions that deliver measurable improvements in resilience. Through continuous assessment and longitudinal intelligence, Recyber helps organisations identify where behavioural risk is concentrated, understand how it changes over time and demonstrate the effectiveness of their interventions. Our mission is simple: to make human behaviour a measurable, manageable and ultimately reducible component of organisational cyber risk.
SecurityHQ 07554 448 632 | rita.smith@securityhq.com | securityhq.com SecurityHQ is a global cybersecurity company that helps organisations engineer, measure, and continuously improve the performance of their security operations. Founded in 2003, the company delivers flexible and technologyagnostic solutions through its Security Performance Engineering approach. Built around each customerʼs environment, the approach brings together managed detection and response, threat and adversary intelligence, exposure management, and advisory services. With 400+ analysts and engineers across six global SecOps Centers, SecurityHQ provides 24/7 human-led detection, response, and continuous improvement. Its work is focused on reducing noise, improving decision making, and strengthening security performance over time
Sonatype 07794 835 388 | josh.howard-clarke@sonatype.com | sonatype.com Sonatype is the company helping enterprises build with confidence in the AI era. Trusted by thousands of enterprises and millions of developers, Sonatype gives organizations the intelligence and automated governance to manage the open source, AI-generated and third-party components that power modern software. As the steward of Maven Central and the company behind Nexus Repository, Sonatype provides visibility into how software is built, consumed and secured, helping teams accelerate development, reduce risk and deliver secure software at AI scale.
28
Specops 07501 868 078 | simon.jones@outpost24.com | specopssoft.com Specops helps organizations close the identity gaps attackers exploit. From password security and identity verification to secure account recovery and device trust, our IAM solutions protect users across Active Directory, Entra ID, and hybrid environments.
ThreatLocker 07415 738 402| robyn.vaughan@threatlocker.com Stop attacks before they start. Get the solution to your security needs on a single agent with the comprehensive ThreatLocker Zero Trust Platform. With ThreatLocker, you’ll have the necessary controls in place to: •Block untrusted software and limit lateral movement •Gain operational efficiency and oversight •Leverage vast telemetry and intelligence data to alert unusual behaviors and Indicators of Compromise You’ll also be backed by the included 24/7/365 US-based Cyber Hero support team for rapid assistance and response as you harden your environment.
29
HELD TWICE YEARLY 4th February 2027 Hilton Canary Wharf
8th July 2027
Hilton Canary Wharf
Scan or click here for our website
01992 374087 c.byrne@forumevents.co.uk
ecommerce-forum-fe/
Explore how our event unfolds here