FRSecure

FRSecure is an information security consultancy that sets out to improve how organisations and the wider security field protect data. It works only on security, sells no third-party hardware or software, and builds its advice around the client's own programme rather than product sales.

What FRSecure offers

• Security programme building — virtual CISO support, risk and gap assessments, tabletop exercises and vendor risk management.
• Attack simulation — penetration testing, purple team exercises, social engineering tests and vulnerability scanning.
• Incident response — help when an organisation faces a security incident.
• Compliance preparation — readiness work for PCI, CMMC and SOC 2 audits.
• On-demand experts — certified professionals who validate or guide an in-house team.
• Learning resources — a CISSP mentor programme, blog, podcasts, webinars and events, many offered free.

Who it works with

FRSecure serves organisations unsure which security risks to tackle first, as well as teams that want outside validation of their existing controls.

Key facts

• Risk methodology: its own assessment based on NIST and mapped to major industry standards
• Independence: does not resell third-party products
• Community: runs a free CISSP mentor programme