# Samurai Digital Security Limited - **Type:** Advisory firm - **Website:** https://samuraisecurity.co.uk - **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd) A UK cyber-security consultancy offering virtual-CISO, ISO 27001 and Cyber Essentials advice, alongside penetration testing, managed security monitoring and incident response. ## Samurai Digital Security scores Scored 1 to 5 on six criteria. There is no overall score. ### Help when things go wrong: 2/5 Site shows generic incident-response/forensics service pages and one IR-retainer case study (The Preston Associates), but no named regulatory-defence outcome (e.g. an ICO-facing case) was found on the firm's own site or in search. ### Qualifications of the people who do the work: 4/5 NCSC assures the firm for Cyber Security Consultancy in Risk Management; CEO Dr David Day holds CISM, CRISC and CISSP; staff hold CISSP, CIPP/E and PhD-level cyber quals per the firm's own accreditations page. ### What it publishes about fees: 1/5 No pricing, fee ranges or rate card are published for vCISO, ISO 27001 or Cyber Essentials consultancy; the site offers only a free consultation, per samuraisecurity.co.uk service pages. ### Knowledge of your sector: 3/5 Published case studies span housing (Flagship Group), NHS and professional services (The Preston Associates) rather than one deep sector, and the consultancy offer is generalist GRC/vCISO work aligned to NIST and ISO 27001. ### Independence from what it sells: 2/5 The firm sells its own AI-powered vCISO dashboard, AI Risk Assessment Tool and AI Scoping Tool alongside its advisory work, per its own risk-compliance and tools pages, a proprietary-tool dependency. ### Who carries the risk if the advice is wrong: 2/5 Published Terms of Service disclaim liability for indirect losses and give no warranty of error-free service, and no professional indemnity insurance is disclosed anywhere on the firm's own site. ## Sources for Samurai Digital Security Every line carries the page it was read on and the date it was checked. - Samurai Digital Security Limited is an active UK private limited company incorporated on 5 December 2016. - Source: https://find-and-update.company-information.service.gov.uk/company/10511079 - Checked: 2026-09-19 - The company's registered nature of business (SIC code) is technical testing and analysis. - Source: https://find-and-update.company-information.service.gov.uk/company/10511079 - Checked: 2026-09-19 - NCSC lists Samurai Digital Security Ltd as a commercial organisation assured under an NCSC assurance scheme for consultancy in risk management. - Source: https://www.ncsc.gov.uk/organisation/samurai-digital-security-ltd/about-samurai-digital-security-ltd - Checked: 2026-09-19 - CREST's marketplace listing shows the firm has held CREST membership for 7 years, accredited for penetration testing. - Source: https://marketplace.crest.org/samurai-digital-security-ltd - Checked: 2026-09-19 - The firm publishes a named 'Responsible Use of AI Notice' describing its own internal AI practices, including human review of AI outputs and data anonymisation. - Source: https://samuraisecurity.co.uk/responsible-use-of-ai/ - Checked: 2026-09-19 ## What this provider publishes Not published means we did not find it on the firm's own pages. - Price: Not published - Indemnity cover: Not published - Credentials: Published - Independent accreditation: Published - Client results: Published - How it uses AI: Published ## Strengths - NCSC-assured Cyber Security Consultancy in Risk Management is a genuine government assurance scheme for GRC advisory work, confirmed on the firm's NCSC organisation page, not just a penetration-testing listing. - CEO Dr David Day holds CISM, CRISC and CISSP, is an NCSC Certified Cyber Professional, and is a Special Officer with the National Crime Agency's National Cybercrime Unit. - Publishes a dedicated, named 'Responsible Use of AI Notice' disclosing internal AI practice, human review and data-anonymisation commitments, which is rare public self-disclosure among peers. - Publishes named client case studies (Flagship Group, NHS, The Preston Associates) with direct, attributable client quotes rather than anonymised testimonials. - Holds multiple independently verifiable accreditations (NCSC, CREST, ISO 9001, Cyber Essentials Plus) confirmed on both the firm's own site and third-party registers (NCSC, CREST marketplace). ## Things to check Each one carries the factual basis it rests on. - No professional indemnity insurance is disclosed anywhere on the firm's own site, including its dedicated accreditations page. - Basis: Absent from samuraisecurity.co.uk/about/accreditations-certifications/ and from the firm's own Terms of Service page. - No pricing or fee structure is published for any consultancy service; the firm offers only a free consultation. - Basis: Confirmed absent on the firm's own vCISO (risk-compliance/virtual-ciso) and ISO 27001 certification service pages. - The firm also sells managed SOC/SIEM, incident response and penetration testing (delivery-layer work) alongside its assurance consultancy, rather than being a pure-play assurance specialist. - Basis: Listed alongside consultancy services on the firm's own site navigation and Risk & Compliance page. ## Where this firm appears - [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment) - [Can the firm that prepares you also certify you?](https://theassurancedesk.com/best/certification-seeking) - [After a data breach: what UK law asks of you](https://theassurancedesk.com/best/post-breach) - [After a cyber attack: what to report, and to whom](https://theassurancedesk.com/best/security-incident) - [Compare providers](https://theassurancedesk.com/compare) --- **Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in. **Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here. **Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.