Oxford Infosec

Oxford Infosec is a cyber security and privacy consultancy for startups and SMEs, based in Oxford. Our pitch is deliberately understated: "We do as little as possible. A strange sales pitch, but if you're growing a business, just enough security and privacy is exactly what you need." The reasoning is simple. Too little security and you're exposed; too much and you're paying for things you don't need. The difficult part is knowing where that line sits, so we work out how much your business actually needs, build that, and stop there.

That principle runs through everything we do. A 20-person SaaS company probably doesn't need the same programme as a bank, so controls are recommended because they address a real risk to the business, not because they appear on a generic checklist, and they're kept light enough that clients can still run them six months later.

Services span four areas. Cyber Security covers Security Foundations for businesses establishing a baseline, Cyber Essentials certification, and fractional CISO services that give smaller businesses senior security leadership without a full-time hire. Privacy covers GDPR, outsourced Data Protection Officer services, and ISO 27701. Compliance covers ISO 27001, ISO 42001, AI governance, SOC 2, and PCI DSS. Deals and due diligence covers security due diligence readiness for companies preparing to raise or sell, and cyber due diligence for investors.

Clients include Judge.me, General Index, Ampere Analysis, Harbr Data, Syntasso, Zaptic, Beam, Biographica, Chalfen Ventures, Lightsonic, Responsible Marketing, and The Key Group.

Oxford Infosec Ltd is registered in England and Wales, company number 14472926, with its registered office at The Wheelhouse, 81 St Clements, Oxford OX4 1AW.