The GRC Group, a provider of software and tech-enabled services for managing business risks and regulatory compliance, has recently acquired Leeds-based Pentest People Ltd. This acquisition marks GRC’s second venture into the cyber security risk management market, following the earlier acquisition of Bulletproof in June. Pentest People will now be incorporated into the newly formed cyber division alongside Bulletproof (UK) and Target Defense (USA).
Pentest People is a pioneering cyber-security company specializing in offering penetration-testing-as-a-service (PTaaS) to clients in the UK. With a strong focus on consultant-led penetration testing and continuous vulnerability scanning through its proprietary software platform SecurePortal, Pentest People serves over 1,200 clients both directly and through channel partnerships. The addition of Pentest People’s services, which include CHECK accredited testing and Incident Response, will broaden the range of services offered by the Group.
Alex Dacre, Chief Executive of The GRC Group, expressed his excitement about the acquisition, stating, “I’m delighted to welcome Andrew, Anthony and the Pentest People team to the Group. The addition of Pentest People following our acquisition of Bulletproof in June demonstrates our commitment to becoming an international leader in the Governance, Risk and Compliance market.”
Andrew Mason, Founder/Managing Director of Pentest People, conveyed his enthusiasm for the new partnership, noting, “We were delighted to find a new owner for Pentest People that shares our values and will continue our rapid growth trajectory and focus on innovation.”
Anthony Harvey, Founder/Managing Director of Pentest People, also expressed his excitement about joining The GRC Group, stating, “We’re delighted to be joining The GRC Group to continue the development journey of Pentest People. It is clear that GRC is committed to developing an outstanding cyber security capability that will complement the services already offered.”









