Fidus Information Security

Fidus Information Security

Speciality: Advanced Penetration Testing

Cambridge, United Kingdom 5 employees Publishes CVEs
Visit Website View on LinkedIn
[01] About

Fidus Information Security is a UK-based private cybersecurity company specializing in penetration testing and network security solutions; 4 employees, $5M revenue, founded 2017 in Cambridge, UK. They offer advanced pentest services, network and IoT security, and serve diverse sectors including public, legal, and healthcare.

Fidus Information Security is a provider of world-class cyber security services which enables businesses to proactively identify and manage their information security risks. Fidus are the cyber security partner choice for 100s of private and public organisations around the globe. Headquartered in Cambridge, UK, Fidus are striving to make inroads to provide a cost-effective yet world-class approach to penetration testing. Holding the most recognised certifications and qualifications in the UK including; NCSC CHECK Green Light, TIGER Scheme, Cyber Scheme and CREST, Fidus provide breadth and depth of experience. Find out why companies around the globe entrust Fidus as their provider. Some of Fidus' services include: * Penetration Testing. * Red Teaming. * IT Health Checks (ITHC). * Compliance Testing; PCI-DSS, ISO27001. * Virtual CISO * Managed Phishing
[02] Services
Penetration Testing
Vulnerability Assessment
Cyber Security Consulting
[03] Certifications
CREST

CREST Cybersecurity Certification


Origin


CREST (Council of Registered Ethical Security Testers) was established in 2006 in the United Kingdom by a group of cybersecurity professionals and industry representatives. It was created to address the growing need for standardized, recognized qualifications in penetration testing and cybersecurity services. The organization emerged from concerns about the quality and professionalism of security testing services, aiming to provide a framework that would certify both individual practitioners and the companies that employ them.


Industry Value


CREST certifications are highly valued in the cybersecurity industry because they demonstrate a practitioner's technical competence and adherence to professional ethical standards. Many government agencies, financial institutions, and large corporations specifically require CREST-certified professionals when procuring penetration testing or security assessment services. The certification provides assurance to employers and clients that certified individuals have been independently verified to possess the necessary skills and knowledge, and that they follow established codes of conduct. This makes CREST credentials particularly important for cybersecurity professionals working in regulated industries or seeking to work with organizations that have stringent security requirements.

TIGER
CYBER SCHEME
Cyber Essentials Plus

Cyber Essentials Plus


Origin


Cyber Essentials Plus was created by the UK Government in 2014 in collaboration with the National Cyber Security Centre (NCSC), which is part of GCHQ. The scheme was developed in response to the growing threat of cyber attacks against UK businesses and organizations. It was designed to help organizations of all sizes implement basic cybersecurity controls to protect against the most common internet-based cyber threats, with the "Plus" variant including hands-on technical verification by qualified assessors.


Industry Value


Cyber Essentials Plus is highly valued because it provides verified assurance that an organization has implemented fundamental cybersecurity controls effectively. Unlike the standard Cyber Essentials self-assessment, the Plus certification requires external testing and vulnerability scanning, making it more rigorous and credible. It's increasingly required for UK government contracts involving sensitive information and is recognized by insurance providers, clients, and partners as evidence of a serious commitment to cybersecurity. The certification helps organizations demonstrate due diligence, reduce cyber risk, and differentiate themselves in competitive bidding situations.