The GRC Group Acquisition of Bulletproof Cyber Ltd

11th June 2024

The GRC Group ("GRC" or the "Group"), a leading provider of software and tech-enabled services to manage business risks and regulatory compliance, has today acquired Bulletproof Cyber Ltd (“Bulletproof”). GRC is a group focussed on building market-leading positions in select areas of the governance, risk and compliance market, and the acquisition of Bulletproof represents The GRC Group’s entry into the cyber security risk management market. This has been a long-held ambition of the group as a fast growing sector and offers the opportunity to broaden the range of services to existing clients.

Founded in 2016, Bulletproof is a leading provider of cyber security, information security and data protection services. Its services include penetration testing, GDPR and ISO Consultancy, Cyber Essentials certification, and more. Headquartered in Hertfordshire, Bulletproof provides its services to over 2,000 organisations worldwide and employs a team of over 100, including more than 60 accredited penetration testers and consultants across the UK and US. Bulletproof’s services help businesses remain safe and compliant with the evolving and increasing cyber threat landscape.

Alex Dacre, Chief Executive of Marlowe GRC:

“I’m delighted to welcome Nicky and the Bulletproof team to the Group. The addition of Bulletproof to the Group marks an important step in our ambition to become a global leader in the Governance, Risk and Compliance market, and we look forward to working with the Bulletproof team in further accelerating their growth in the UK and internationally."

Nicky Whiting, Managing Director of Bulletproof:

“We’re very excited to be joining The GRC Group. From our first engagement with GRC it was clear that their business model and their team was the right fit for our business. We look forward to working with the GRC team and the other businesses within the Group to accelerate our growth in the UK and internationally.”

Mark Boost, Founder of Bulletproof:

“We were delighted to find a new owner for Bulletproof that both shares our values and will be able to continue its rapid growth trajectory with additional investment. We look forward to a close ongoing relationship with Nicky and the Bulletproof team through the strategic partnership with”

Additional Background on The GRC Group

Founded in 2019 and growing rapidly, The GRC Group employs more than 1,100 experts based in the UK and internationally, providing software and tech-enabled services to manage business risks and ensure customers remain compliant with legal & regulatory standards. With six business lines, Compliance eLearning, Regulatory Intelligence, Risk Management Software, Employment Compliance, ISO services and now Cyber Security, the business delivers compliance to both SMEs and large global enterprises.

In May 2024, The GRC Group was acquired by Inflexion to accelerate its growth and expand into new markets through further investment in its organic growth strategy complemented by M&A.

Learn and discover with Bulletproof