Prism Infosec

Cyber security consultancy for regulated and enterprise organisations: GRC, red teaming, penetration testing and incident response

Cheltenham, United KingdomFounded 2006prisminfosec.comWebsite technologies

+ Add to sales board

Highlights

  • Hiring2 open roles
  • New on EvolcAdded 2026-11-06

About Prism Infosec

Prism Infosec is a UK cyber security consultancy. Its services include GRC and compliance support (ISO 27001, DORA, NIST, CAF), red teaming and threat-led testing (CBEST, STAR-FS, TIBER), penetration testing, cloud security, incident response and managed security services including SOC. Its LuxisAI platform gives clients real-time visibility of penetration testing findings and tracks remediation progress.

Customers are complex and regulated organisations, including public sector bodies. Named engagements include Transport for Wales, NHS England, The National Lottery Community Fund and Leicestershire Police. Work is individually scoped per project, and the company also sells ongoing testing programmes, consultancy and incident response retainers.

Prism Infosec was founded in 2006 and is headquartered in Cheltenham, with offices in Liverpool and Brussels. The company states it is accredited by the Bank of England and the NCSC, and it has completed over 2100 individual penetration tests in the last five years. Its careers page lists a Senior Security Consultant vacancy.

Product: Penetration testing, red teaming, GRC and compliance advisory, incident response, managed security services and the LuxisAI findings platform.

Jobs at Prism Infosec (2)

Prism Infosec is hiring for 2 roles in engineering.

Companies hiring like Prism Infosec

Leadership

More cybersecurity companies

  • Prizsm Technologies

    Distributed information security software for defence, government and other high-assurance organisations
    Blackwood, United KingdomCybersecurityFounded 2017
    New on Evolc
  • Procheckup

    Cybersecurity testing, compliance and incident-response services for businesses and public-sector organisations
    Portsmouth, United KingdomCybersecurityFounded 19991 open job
    New on EvolcRemote-friendlySalary transparent
  • Project Eleven

    Post-quantum cryptography and institutional digital asset custody for enterprises and developers
    United KingdomCybersecurity3 open jobs
    Remote-friendly
  • Proofpoint

    Email, collaboration and data security platform for enterprises, protecting people and data from advanced threats
    Sunnyvale, United KingdomCybersecurity69 open jobs
    New on Evolc
  • Ptolemy Si

    Microsoft identity security consultancy helping UK organisations assess and strengthen Active Directory, Entra ID and hybrid environments
    Walsall, United KingdomCybersecurityFounded 2012
    New on Evolc
  • Purecyber

    Managed SOC, penetration testing and governance services for organisations, delivered from Cardiff, UK
    Cardiff, United KingdomCybersecurityFounded 20162 open jobs
    New on EvolcRemote-friendly

All cybersecurity companies →

Website technologies

Tools and platforms detected on this company’s website, grouped by purpose. Dates record when Evolc observed them.

Content management

  • ElementorHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence
  • WordPressHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

CRM & customer data

  • HubSpotHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

Forms

  • Cloudflare TurnstileHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence
  • Gravity FormsHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

Frontend frameworks

  • jQueryHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

Hosting

Privacy & consent

  • CookiebotHigh confidence
    First detected
    Last detected
    Last checked
    Detection evidence

Website detection does not establish a paid subscription or company-wide use. Tools loaded after consent or sign-in may be missed. “No longer observed” does not prove the company stopped using a tool.