
Fig Group is a cybersecurity and compliance platform that helps organizations manage security controls, achieve certifications, and organize evidence for assessments. It integrates compliance automation, asset management, incident tracking, and task remediation into one interface, enabling organizations to monitor security priorities and create compliance-ready documentation. Supporting certifications like Cyber Essentials and Defence Cyber Certification through IASME licenses, the process includes self-assessment, assessor review, and feedback, with certificates valid for 12 months. Fig Group also offers services like vulnerability scanning, cloud reviews, penetration testing, and remediation guidance, helping IT teams prioritize findings. Additionally, it organizes security evidence for insurance workflows and tracks assets, risks, and incidents for reporting and audits.

The Fig application provides MSPs looking to transition to an MSSP with the full end-to-end tooling stack to provide to their customers. Policy management, cybersecurity tooling for PC and mobile assets, cloud security, penetration testing, vulnerability scanning, automated compliance, risk registers, asset registers, all configurable for internal and end-customer access. MSSPs get a full portfolio view of their end-customer postures in the Fig platform, and customers can review their data.
Fig Group provides cybersecurity software, security testing and compliance certification for UK businesses and managed service providers (MSPs). Based in London, we help organisations understand their security requirements, assess technical risks and organise the work needed to improve their security and compliance. Our certification services include Cyber Essentials, Cyber Essentials Plus and Defence Cyber Certification (DCC) Level 0 and Level 1, delivered through Fig Compliance Ltd. We support businesses seeking certification for their own organisation and MSPs supporting their customers. Our security services include penetration testing, vulnerability scanning, device security reviews, cloud security reviews, public exposure checks and code security reviews. These services help organisations identify weaknesses and prioritise remediation. The Fig platform brings policies, risks, evidence, security and compliance monitoring, remediation tasks and reporting together. MSPs can use it to oversee multiple clients and coordinate security and compliance work across their customer base. We also offer white-label arrangements for MSPs covering our platform, security testing and certification services. Partners can maintain their own client relationships while drawing on Fig's technology and specialist services. Visit our website to explore the Fig platform, certification options and security services. For enquiries about your organisation or an MSP partnership, contact enquiries@figgroup.co.uk or call 020 3105 2335.