We build technology that makes the digital world safer, healthier and more empowering.

We design, engineer and secure digital products for founders and organisations, from the first idea to a live platform.

Build With Us Explore CyberPhormX (opens in a new tab)
  1. Safer

    Security, privacy and resilience are part of every product from the first design decision.

  2. Healthier

    Technology that supports wellbeing and treats sensitive personal information with care.

  3. More empowering

    Marketplaces, education and tools that open up access and opportunity for people and businesses.

Every product we build should leave the people who use it safer, healthier or better off.

Explore our expertise

We build. We partner. We protect.

Most of our engagements combine all three.

Build

We design, engineer and launch web platforms, mobile apps, marketplaces and commerce products for founders and organisations.

Build With Us

Partner

We work alongside founders and in-house teams, on the whole product or on the stages where specialist experience matters most.

Discuss a partnership

Protect

Security and privacy are part of the engineering from day one. For dedicated cybersecurity, compliance and AI governance work, our specialist firm CyberPhormX leads.

Explore CyberPhormX (opens in a new tab)
Our philosophy

We don't just talk about technology. We build it, operate it, secure it and understand its effect on the real world.

You bring the idea. We turn it into a secure product that can grow.

Product strategy, design, engineering and security from one team, so nothing important falls between suppliers.

Start a Project View Typical Investment
Two colleagues reviewing a product on a tablet in an office

  • We have an idea and need the right team to build it.

    We shape the product with you, build it properly and stay involved after launch.

  • Our MVP works, but larger customers are asking hard questions.

    We strengthen the architecture, security and data handling so you can answer them with confidence.

  • We need a marketplace that handles payments safely.

    Buyer and seller roles, identity checks and payment flows designed around trust.

  • We have developers but need specialist support.

    Architecture, security reviews, complex components or launch support, working alongside your team.

  • Security and compliance are slowing down our sales.

    We build the right controls into the product and bring in CyberPhormX when you need formal assurance.

Our areas of expertise

We have our own product in each of these areas. That experience goes into everything we build for clients.

Digital trust

Cybersecurity and Digital Trust

Security testing, AI governance, compliance readiness and cybersecurity training, delivered by our specialist firm CyberPhormX.

Our specialist firm: CyberPhormX

 Human wellbeing

HealthTech and Digital Wellbeing

Privacy-conscious products that handle wellbeing data and human support responsibly.

We launched and run our own wellbeing app

 Digital economies

Marketplaces and Digital Commerce

Marketplaces, booking, membership and payment-enabled platforms where trust between buyers and sellers matters.

We are building our own creative-economy marketplace
From idea to launch and beyond

How an idea becomes a secure product

  1. Stage 1

    Discover

    We get clear on the problem, the people and the risks before any code is written.

  2. Stage 2

    Design

    We shape the journeys and the interface, with privacy considered from the first sketch.

  3. Stage 3

    Engineer

    We build web, mobile and platform architecture that can grow with you.

  4. Stage 4

    Secure

    We test and harden access control, data protection, dependencies and integrations.

  5. Stage 5

    Launch

    We deploy with monitoring in place and a plan for your first real users.

  6. Stage 6

    Evolve

    We learn from real use and keep improving the product as you scale.

We run our own products, so we know what it takes.

Alongside client work, we build and operate products of our own. Running live products with real users and sensitive data shapes how we design and secure everything we build for clients.

  • CybersecurityWe launched and run CyberPhormX, a cybersecurity services and training platform for organisations and for the professionals who protect them.
  • HealthTechWe designed, launched and run an emotional wellbeing app that helps people check in with how they feel, journal privately and follow their emotional trends over time.
  • MarketplacesWe are building our own marketplace to connect musicians, performers and creative talent with bookings and paid opportunities.
The CyberPhorm stand at the UK Black Business Show, with team members speaking to a visitor
Our stand at the UK Black Business Show
International reach

Connected across three continents

  1. A cross-border outlook

    Digital products rarely stay within one country, and neither do the people who use them or the risks they face.

  2. Europe

    Product engineering, security expertise and research.

  3. Africa

    Founders, talent and fast-growing digital economies.

  4. North America

    Partners and markets for products built to scale.

  5. One connected network

    Our relationships and work span Europe, Africa and the United States, which gives every product we build a wider view.

Cybersecurity services

Looking for cybersecurity, AI governance or compliance support?

CyberPhormX is our specialist cybersecurity firm. It provides security testing, vulnerability management, Cyber Essentials and ISO 27001 readiness, AI governance and practical cybersecurity training through X Academy.

Visit CyberPhormX (opens in a new tab)
For organisationsSecurity testing, vulnerability management, compliance readiness, AI governance and advisory.
For professionalsX Academy: job-focused cybersecurity training and career development.
CyberPhorm Impact

Impact built into how we work

Giving built into the transaction

In selected products, a share of eligible transaction revenue goes to chosen causes automatically, through the payment flow.

People

Full and partial scholarships on selected cybersecurity programmes, with mentoring and practical skills.

Possibility

At least three selected pro-bono projects every year for founders with strong ideas and a real purpose.

Explore CyberPhorm Impact

A CyberPhorm team member in conversation with a visitor at the UK Black Business Show
Meeting founders at the UK Black Business Show

Built by people who understand what happens after launch.

CyberPhorm is led by a thought leader in cybersecurity and digital forensics: a peer-reviewed published author with doctoral-level expertise in the integrity of digital evidence. Our team and delivery network include engineers and security professionals with MSc and PhD-level expertise.

  • CISSP
  • ISO 27001
  • CEH
  • AWS
  • OSCP
  • ECSA
  • CyberOps
  • LPT

Credentials are held across our team and delivery network.

About our leadership

Have a product to build or secure? Tell us about it.

Start a Project View Typical Investment

Three areas of deep expertise

We organise our work around three specialisms. We have our own product in each one, and we bring that experience to every client engagement.

Cybersecurity and Digital Trust

Security is where CyberPhorm began, and it shapes everything we build. Dedicated cybersecurity, AI governance and compliance services are delivered by our specialist firm, CyberPhormX.

Visit CyberPhormX (opens in a new tab)
  • Security testing, vulnerability and attack-surface management
  • Security architecture, advisory and cyber resilience
  • Cyber Essentials, Cyber Essentials Plus and ISO 27001 readiness
  • AI governance and responsible technology reviews
  • Cybersecurity training and career development through X Academy

HealthTech and Digital Wellbeing

Products that handle wellbeing data need more than a polished interface. Privacy, security and responsible design have to be there from the start.

We designed, launched and run our own emotional wellbeing app, so we understand the decisions that sensitive products involve.

Discuss a HealthTech product
  • Wellbeing platforms and mobile apps
  • Applications that handle sensitive personal information
  • Privacy-conscious, responsible user experience
  • Organisational access with clear privacy boundaries
  • Community and peer-support features

We take on HealthTech work where the scope and governance are appropriate. We do not provide clinical services or make clinical claims on a client's behalf.

Read: The unhealthy use of social media (opens in a new tab)

Marketplaces and Digital Commerce

Platforms that connect buyers, sellers, creators and customers. Where identity, payments and several user roles meet, trust becomes the product.

We are building our own marketplace for creative talent, so we work through the same decisions our clients face.

  • Multi-sided and service marketplaces
  • Booking, creator and membership platforms
  • E-commerce and payment-enabled applications
  • Online communities and transaction-led products

How we structure a trustworthy marketplace

  1. UserBuyers, sellers and providers, each with their own role
  2. ExperienceDiscovery, profiles and booking flows
  3. Identity and trustVerification, access control and safety features
  4. Marketplace engineMatching, listings, availability and rules
  5. PaymentSecure payment flows through a regulated provider
  6. ProviderSettlement to the seller or performer
  7. ImpactOptional giving built into each transaction

Building something in one of these areas? We have been there.

Start a ProjectHow we work
Digital product engineering

Secure digital products, designed and built by one team

For founders and organisations who need more than a development team: product thinking, engineering and security working together from the start.

Start a ProjectView Typical Investment
A CyberPhorm team member demonstrating a product on a laptop to a visitor

The whole product, or the part you need

We can take a product from idea to launch, or work alongside your team on a specific stage.

Strategy and design

  • Product discovery
  • Product strategy
  • UX and UI design
  • Premium digital experiences

Engineering

  • Web applications
  • Mobile applications
  • MVP development
  • Product modernisation
  • Technical architecture

Commerce

  • Secure marketplaces
  • E-commerce
  • Booking and membership
  • Payment-enabled products

Security and launch

  • Security by design
  • Attack surface assessment
  • Testing and hardening
  • Cloud and deployment
  • Launch support

Partnership

  • Ongoing product development
  • Specialist support for your team
  • Product and technology partnership
Anatomy of a product we build

Six layers that make one finished product

  1. ExperienceThe interface and journeys people actually use.
  2. EngineeringApplication logic, APIs and integrations built to last.
  3. DataStructured, minimised and handled with care.
  4. SecurityIdentity, access control, encryption and testing.
  5. GovernancePrivacy, compliance and responsible AI decisions, documented.
  6. InfrastructureCloud, deployment and monitoring for real-world use.

How we deliver

Not every engagement needs every stage. We start where you are.

  1. Discover

    Problem, users, risks and scope.

  2. Design

    Experience, flows and interface.

  3. Engineer

    Architecture and build.

  4. Secure

    Testing, hardening and review.

  5. Launch

    Deployment and first users.

  6. Evolve

    Iteration, support and scale.

Investment

Clear starting points, fixed written quotes

Every project is quoted individually after discovery. These are the starting points, so you can see whether we are in the same range before we meet. You receive a fixed written quotation before any work begins.

Step 1

A free 20-minute call

No commitment and no preparation needed. Tell us what you have in mind through the enquiry form and we will email you a link to book a time that suits you.

Free

Book a free call
Step 2

A 90-minute discovery session

If we are a good fit, we go deeper. Most disappointing projects are mis-scoped rather than badly built, and this is where we prevent that.

  • A written scope covering users, features, integrations and data
  • A recommended approach and delivery plan
  • A fixed quotation, valid for 30 days

$400 credited in full against any project booked within 30 days

Websites and digital presence

Foundation

For a new venture or professional that needs to look established, be found and be easy to contact.

From$3,250
  • Up to 5 pages, designed around your content
  • Enquiry form with notifications
  • Search and AI search foundations
  • Fast, accessible and securely configured
  • 2 rounds of revisions

3 to 4 weeks

Growth

For an established business that needs its website to generate enquiries and grow with it.

From$7,150
  • Up to 12 pages, bespoke design
  • Edit the site yourself, no developer needed
  • On-page and technical SEO
  • AI SEO, so ChatGPT, Gemini and Perplexity can find and recommend you
  • Analytics and lead capture
  • Security hardening and backups
  • 3 months of aftercare

5 to 8 weeks

Signature

For organisations where the website is the front door and has to carry the brand at the highest level.

From$12,500
  • Art-directed design with motion and 3D
  • Integrations such as CRM, booking or membership
  • Copywriting support
  • Full SEO and AI search strategy
  • Staging environment
  • Pre-launch security review and attack surface check
  • 12 months of aftercare

8 to 12 weeks

Software products

In our own products we put the user experience, the customer experience and safety first. We bring the same philosophy to every product we build for clients.

Web application or MVP

For founders and teams turning an idea or a manual process into a focused first version of a working product.

From$13,000
  • Product scoping and UX design
  • User accounts, roles and admin dashboard
  • SEO and AI search foundations for public pages
  • Core features for your first release
  • Cloud deployment and monitoring
  • Pre-launch attack surface assessment

8 to 14 weeks

Mobile application

For products that need to live on people's phones, with the backend to support them.

From$19,500
  • iOS and Android from one codebase
  • Backend, API and admin tools
  • Notifications and analytics
  • App Store and Google Play submission
  • Pre-launch attack surface assessment

10 to 16 weeks

Marketplace or commerce platform

For platforms where buyers, sellers or providers meet, and trust and payments have to work first time.

From$23,500
  • Multiple user roles and profiles
  • Listings, booking or checkout
  • Secure payments through a regulated provider
  • Identity and trust features
  • Pre-launch attack surface assessment

12 to 20 weeks

Complex or regulated product

Several platforms, sensitive health or financial data, or regulatory requirements. Scoped individually after discovery.

From$45,500

After launch

Website care

For teams who make their own content changes and want the site kept secure and running.

From$99 per month
  • Platform and plugin updates
  • Backups twice a month
  • Uptime and certificate monitoring
  • Weekly automated security scans
  • Security patching

Managed website

For owners who would rather not touch the website at all. We look after everything and make your changes for you.

From$319 per month
  • Everything in Website care, with weekly backups
  • Your content and design changes, up to 4 hours a month
  • Continuous security monitoring and alerting
  • Regular attack surface checks
  • Monthly SEO and AI SEO improvements
  • Priority support from a named contact

Product partnership

For live software products that need a dedicated team improving, securing and scaling them month by month.

From$2,600 per month
  • Agreed monthly capacity
  • New features and improvements
  • End-to-end vulnerability management
  • Continuous attack surface management
  • 24/7 security monitoring and incident support

Changes outside a plan are always quoted before any work begins.

Not sure which fits?

Most people are not, and that is what discovery is for. If your project sits between two of these, we will tell you straight rather than push you up a tier.

Working to a set budget?

Tell us the figure. We will recommend the strongest first step it can fund, such as a focused first release or a phased plan, and show you what the full version would involve.

Spreading the cost

Projects are invoiced in stages as work is delivered. For larger projects we can agree a monthly schedule before work begins.

What shapes the price

  • Number of user types
  • Integrations
  • Payments
  • Web, iOS and Android
  • Security and compliance
  • Data sensitivity
  • Content
  • Animation and 3D
  • Ongoing support

Not included as standard

  • Domain, hosting and cloud fees
  • Third-party subscriptions, payment provider fees and app store accounts
  • Photography and video, unless stated
  • Legal copy such as privacy notices and terms
  • Translation and paid advertising
Book a free 20-minute callQuestions about cost

Prices are shown in US dollars and exclude VAT or local sales tax where applicable. Your quotation is issued in your chosen currency and is valid for 30 days. Cybersecurity, compliance and AI governance work is scoped separately by CyberPhormX.

We build our own products as well as yours.

We run live products in cybersecurity and HealthTech, and we are building our own marketplace. Running products with real users and sensitive data teaches us what clients need long after launch day.

Explore our expertise

Frequently asked questions

Is CyberPhorm a cybersecurity company?

CyberPhorm is a technology group that designs, builds and secures digital products. Dedicated cybersecurity, compliance and AI governance services are provided by its specialist firm, CyberPhormX.

What is the difference between CyberPhorm and CyberPhormX?

Come to CyberPhorm when you want a digital product designed and built. Go to CyberPhormX for security testing, compliance readiness, AI governance and cybersecurity training.

Can you work alongside our existing developers?

Yes. We can deliver a whole product or take on specific parts of it, such as architecture, a security review, a marketplace or payment component, or launch support.

How much does a digital product cost to build?

It depends on scope, the number of user types, integrations, payments, platforms, security and compliance needs, and ongoing support. Our investment guide shows typical starting points for common types of project.

Can you help with a product that already exists?

Yes. We modernise existing products, strengthen their security and architecture, and prepare early-stage products for larger customers.

Do you build HealthTech and wellbeing products?

Yes, where the scope and governance are appropriate. We run our own wellbeing app and bring privacy, security and responsible design experience to sensitive products.

Do you include an attack surface assessment?

Yes. Every web application, mobile app and marketplace we build includes an attack surface assessment before launch. Continuous attack surface management is available through CyberPhormX.

See all frequently asked questions

Tell us what you are building and we will tell you how we would approach it.

Start a Project
CyberPhorm Impact

Technology should create opportunity

Where it makes sense, we design impact into our products and the way we work, so that it grows as the business grows.

Planet and society

Giving built into the transaction

Selected CyberPhorm products are designed to allocate a portion of eligible revenue to environmental or social causes as each transaction happens. The allocation is made through the payment flow, before the relevant proceeds reach us, wherever the payment provider supports it.

  1. CustomerBooks or buys through a marketplace
  2. MarketplaceConfirms the order and its terms
  3. PaymentProcessed securely by the payment provider
  • ProviderTheir share is settled to them
  • PlatformThe platform's revenue
  • Selected causeA portion of eligible revenue, allocated automatically
People

Scholarships, skills and mentoring

We offer full and partial scholarships on selected cybersecurity programmes, and our scholarship recipients are already learning with us.

Alongside training, we support mentoring and practical skills that open real routes into technology careers.

Ask about scholarships
Possibility

At least three pro-bono projects every year

For committed founders with ideas that deserve a proper start.

  • Technology and product support
  • Secure e-commerce builds
  • Landing pages for competitions and investor pitches
  • Funding or contribution to selected ideas
  • Other practical help to get a founder moving

We select projects based on eligibility, scope and our capacity at the time. Support is focused on the projects we choose rather than open-ended free development.

Tell us about your idea

Interested in a scholarship, pro-bono support or an impact partnership?

Get in touch
About CyberPhorm

Where the cyber and physical worlds meet

The name CyberPhorm reflects how the cyber and physical worlds come together to form the world we live in.

The CyberPhorm stand at the UK Black Business Show
The Cyber Effect

What happens online rarely stays online.

Digital activity shapes people's safety, wellbeing, businesses and opportunities in the physical world. Physical-world behaviour, in turn, shapes digital systems.

CyberPhorm began with a simple purpose: to make the online world safer for the people who use it. That purpose now covers secure systems, safety and trust in marketplaces, secure payments, wellbeing technology, privacy and governance by design, and opportunity created through education and commerce.

It is why our mission is to build technology that makes the digital world safer, healthier and more empowering.

Our values

Excellence

We bring the same standard to client work that we expect in our own products.

Ownership

We take responsibility for our decisions, commitments and outcomes.

Trust and loyalty

We build long relationships on integrity, reliability and confidentiality.

Mutual respect

We listen, challenge constructively and value different perspectives.

Possibility

We stay curious about what technology can make possible.

Purpose

We build technology because it should make a difference, and for no lesser reason.

CyberPhorm in conversation with a visitor at the UK Black Business Show
Leadership and research

Led by research, proven in practice

CyberPhorm is led by a thought leader in cybersecurity and digital forensics: a peer-reviewed published author with a PhD and an MSc (Distinction) in the field, and a CISSP.

Our founder's doctoral research examines covert programmable devices, the manipulation of digital evidence and the investigative methods used to detect it. The work has implications for the integrity of digital evidence and the reliability of the investigations that depend on it. It sits alongside senior leadership in vulnerability management, university teaching and module leadership.

Best Presentation Award, ICDF London 2022.

CyberPhorm at a glance

What we are
A technology group that designs, builds and secures digital products, and runs products of its own.
What we build for clients
Websites, web applications, mobile apps, marketplaces, e-commerce and payment-enabled platforms, with security designed in.
Areas of expertise
Cybersecurity and Digital Trust, HealthTech and Digital Wellbeing, and Marketplaces and Digital Commerce.
Specialist cybersecurity firm
CyberPhormX, for security testing, attack surface management, compliance readiness, AI governance and cybersecurity training.
Where we work
Our work and relationships span Europe, Africa and the United States, and we welcome enquiries from anywhere in the world.
Investors and partners
We welcome conversations with investors and partners interested in our cybersecurity, HealthTech and marketplace products.

A team built for serious work

Our team and delivery network include experienced engineers and security professionals with MSc and PhD-level expertise and credentials including CISSP, ISO 27001, CEH, AWS, OSCP, ECSA, CyberOps and LPT.

Our partner network adds specialist depth and extra delivery capacity when a project calls for it, so the team scales with the work.

Discuss a partnership

From the blog

Visit the CyberPhorm blog

    Follow CyberPhorm

    Partnerships, investment or a serious product to build? Let's talk.

    Discuss a PartnershipStart a Project
    Questions and answers

    Frequently asked questions

    Straight answers about what we build, how we work, what it costs, how we approach security, and how to invest or partner with us.

    About CyberPhorm

    What is CyberPhorm?

    CyberPhorm is a technology group that designs, builds and secures digital products for founders and organisations, including web applications, mobile apps, marketplaces, e-commerce platforms and websites. We also run products of our own in cybersecurity and HealthTech, and we are building our own creative-economy marketplace. Our mission is to build technology that makes the digital world safer, healthier and more empowering.

    Is CyberPhorm a cybersecurity company?

    CyberPhorm is a technology group rather than a pure cybersecurity firm. Security is built into everything we engineer, and dedicated cybersecurity, compliance and AI governance services are provided by our specialist firm, CyberPhormX.

    What is the difference between CyberPhorm and CyberPhormX?

    Come to CyberPhorm when you want a digital product designed, built and secured. Go to CyberPhormX at cyberphormx.io for security testing, vulnerability and attack surface management, Cyber Essentials and ISO 27001 readiness, AI governance and cybersecurity training.

    Which industries do you specialise in?

    Our deepest expertise is in three areas: cybersecurity and digital trust, HealthTech and digital wellbeing, and marketplaces and digital commerce. We are particularly strong on products that handle sensitive data, payments or several types of user.

    Where are your clients based?

    Our work and relationships span Europe, Africa and the United States, and we welcome enquiries from anywhere in the world. Discovery sessions can be held online or in person.

    Building with us

    What can CyberPhorm build?

    We design and build websites, web applications, mobile apps for iOS and Android, marketplaces, e-commerce stores, booking and membership platforms, and payment-enabled products. We also modernise and secure existing products.

    Do you build MVPs for startups?

    Yes. We help founders define a focused first version, build it properly and launch it securely, so it can be shown to customers and investors and then grow without a rebuild.

    Can you work alongside our existing developers?

    Yes. We can deliver a whole product or take on specific parts of it, such as architecture, a security review, an attack surface assessment, a marketplace or payment component, or launch support.

    Can you help with a product that already exists?

    Yes. We modernise existing products, strengthen their security and architecture, and prepare early-stage products for larger customers who ask harder questions about security and data.

    Do you build HealthTech and wellbeing products?

    Yes, where the scope and governance are appropriate. We launched and run our own emotional wellbeing app, and we bring privacy, security and responsible design experience to sensitive products. We do not provide clinical services or make clinical claims on a client's behalf.

    Do you build marketplaces with secure payments?

    Yes. We build multi-sided marketplaces with user roles, listings, booking or checkout, identity and trust features, and payments handled through a regulated payment provider. We are also building a marketplace of our own, so we understand the decisions involved.

    How long does it take to build a web app or mobile app?

    A focused web application or MVP typically takes 8 to 14 weeks, a mobile app 10 to 16 weeks and a marketplace 12 to 20 weeks. Websites take between 3 and 12 weeks depending on scope. Your discovery session gives you a firm timeline.

    Cost and process

    How much does it cost to build a web app, mobile app or marketplace?

    Our projects start from $13,000 for a web application or MVP, $19,500 for a mobile app and $23,500 for a marketplace or commerce platform. Websites start from $3,250. Complex or regulated products start from $45,500. Every project receives a fixed written quotation after discovery.

    Do you offer AI SEO?

    Yes. AI SEO means structuring your site and content so AI assistants such as ChatGPT, Claude, Gemini and Perplexity can understand your business and recommend it. It is included in our Growth and Signature websites and in the Managed website plan.

    Can I speak to you before paying anything?

    Yes. Every project starts with a free, no-commitment 20-minute call. Send us an enquiry through the contact form and we will email you a link to book a time.

    Why do you charge for discovery?

    Most disappointing projects are mis-scoped rather than badly built. The $400 discovery session is a 90-minute deep dive that produces a written scope, a recommended approach and a fixed quotation, and the fee is credited in full against any project booked within 30 days.

    Do you give fixed-price quotes?

    Yes. After discovery you receive a fixed written quotation, valid for 30 days, so you know the cost before any work begins.

    Can we spread the cost?

    Yes. Projects are invoiced in stages as work is delivered, and for larger projects we can agree a monthly schedule before work begins.

    What is not included in the price?

    Domain, hosting and cloud fees, third-party subscriptions, payment provider fees, app store accounts, photography and video unless stated, legal copy such as privacy notices and terms, translation and paid advertising are quoted separately.

    What happens after launch?

    Website care plans start from $99 per month and cover updates, backups twice a month, monitoring, weekly security scans and patching. A managed website plan from $319 per month adds continuous security monitoring, regular attack surface checks, SEO and AI SEO improvements, and we make your changes for you, so you never need to touch the site. For products, an ongoing partnership from $2,600 per month gives you a dedicated team improving and scaling the product, with end-to-end vulnerability management and continuous attack surface management.

    Security

    How do you build security into products?

    Security is part of every stage: we consider threats during discovery, design access control and data handling deliberately, keep dependencies and secrets under control, test before release and assess the attack surface before launch.

    What is an attack surface assessment?

    An attack surface assessment is a point-in-time review of everything your product exposes to the internet, such as domains, APIs, login pages, cloud services and third-party integrations, to find weaknesses before attackers do. It is included in every web application, mobile app and marketplace we build.

    What is the difference between an attack surface assessment and attack surface management?

    An assessment is a one-off review, ideal before launch or after a major change. Attack surface management is continuous: it monitors your exposure over time as systems change. We include an assessment in our builds, and CyberPhormX provides ongoing attack surface management.

    Can you help with Cyber Essentials, ISO 27001 or AI governance?

    Yes, through our specialist firm CyberPhormX, which supports Cyber Essentials and Cyber Essentials Plus readiness, ISO 27001 readiness, CIS-aligned improvement and AI governance.

    Can you guarantee our product will never be hacked?

    No honest provider can. What we can do is design security in from the start, reduce your attack surface, test before launch and help you respond quickly when something changes.

    Investors and partners

    Can I invest in CyberPhorm's products?

    We welcome conversations with investors interested in the products we build and operate in cybersecurity, HealthTech and marketplaces. Use the investor enquiry option on our contact form and we will share more detail privately. CyberPhorm is not an investment fund.

    Do you partner with other companies?

    Yes. We work with founders, organisations and specialist partners on product builds, joint ventures and delivery partnerships. Our partner network adds specialist depth and extra capacity when a project calls for it.

    Impact

    What is CyberPhorm Impact?

    CyberPhorm Impact is how we put the empowering part of our mission into practice: giving built into the transaction in selected products, scholarships on selected cybersecurity programmes, and at least three selected pro-bono projects every year.

    How does giving built into the transaction work?

    In selected products, a portion of eligible transaction revenue is allocated to chosen environmental or social causes through the payment flow, before the relevant proceeds reach us, wherever the payment provider supports it.

    Do you offer scholarships or pro-bono support?

    Yes. We offer full and partial scholarships on selected cybersecurity programmes, and we take on at least three selected pro-bono projects each year, subject to eligibility, scope and capacity.

    Still have a question? Ask us directly.

    Start a conversation
    Legal

    Privacy notice

    How we collect, use and protect personal information, wherever you are in the world.

    Last updated: 4 November 2026

    Who we are

    This notice explains how CyberPhorm ("we", "us") handles personal information when you use cyberphorm.com, contact us or work with us. Our specialist cybersecurity firm, CyberPhormX, is part of the same group and handles cybersecurity enquiries you choose to send to it.

    Questions about privacy, or requests to use your rights, can be sent to info@cyberphorm.com with "Privacy" in the subject line.

    The short version

    • We only collect what you send us and the basic technical data every website receives.
    • We do not use advertising or analytics cookies, and we do not track you across other sites.
    • We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising.
    • You can ask to see, correct or delete your information at any time.

    What we collect and why

    InformationWhy we use itLegal basis (UK and EU)
    Enquiry form: your name, email, organisation, message and the optional project or security details you choose to giveTo reply, arrange a call, prepare a proposal and send you a booking linkSteps you ask us to take before a contract, and our legitimate interest in responding to business enquiries
    Emails, WhatsApp messages and call notesTo communicate with you and keep a record of what was agreedLegitimate interests, and performance of a contract where we work together
    Client and supplier records: contact details, contracts, invoicesTo deliver services, get paid and meet accounting and tax dutiesPerformance of a contract and legal obligation
    Technical data: IP address, browser type, pages requested, date and timeTo deliver the website, keep it secure and stop abuse, including rate limiting of the enquiry formLegitimate interests in running a secure website
    Your currency choice, if you change itTo show prices in the currency you picked on your next visitStored only on your device at your request (see our cookies notice)

    Please do not send passwords, health information or other sensitive personal data through the form. We do not use your information for automated decisions that have legal or similarly significant effects on you, and we do not send marketing emails unless you have asked to receive them.

    Who we share it with

    We share personal information only with service providers who help us run the business and who are bound to protect it:

    • Website hosting: our hosting provider, which hosts this website and processes the enquiry form.
    • Email: our business email provider, which stores the messages you send us.
    • Call booking: Calendly, if you choose to book a call. Calendly's own privacy notice applies to the details you enter there.
    • Messaging: WhatsApp (Meta), if you choose to message us there.
    • Fonts: Google Fonts delivers the typeface used on this site, which means your browser sends your IP address to Google when the page loads. Google states that it does not use this to build profiles.
    • Professional advisers such as accountants and lawyers, and authorities where the law requires it.
    • Within the group: enquiries about cybersecurity or AI governance are handled by the CyberPhormX team.

    If the business, or part of it, is reorganised or sold, information may transfer to the new owner under the same protections.

    International transfers

    We work with clients in several regions, so your information may be processed outside the country where you live, including in the United Kingdom, the European Economic Area and the United States. Where the law requires it, we protect transfers with an adequacy decision, the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or another lawful mechanism. You can ask us for details.

    How long we keep it

    • Enquiries that do not lead to work: up to 24 months, then deleted.
    • Client contracts, invoices and related correspondence: six years after the engagement ends, to meet tax and legal duties.
    • Form rate-limiting data: a one-way scrambled form of your IP address, deleted automatically after one hour.
    • Server logs: kept by our hosting provider for a short period for security and then deleted.

    How we protect it

    Security is our profession. The website is served only over encrypted connections, the enquiry form stores nothing on the web server once the email is sent, access to mailboxes and systems is limited and protected with strong authentication, and we review our suppliers. No system is perfectly secure, and we will tell you and the relevant regulator promptly if a breach puts your information at risk, as the law requires.

    Your rights

    Wherever you live, you can ask us to tell you what we hold about you, give you a copy, correct it, or delete it. We will reply within one month, or sooner where local law sets a shorter period, and we will not charge you unless a request is clearly unfounded or excessive. We may need to confirm your identity first. You can also object to how we use your information, ask us to restrict it, ask for a portable copy, and withdraw consent where we rely on it.

    United Kingdom and European Union

    Your rights come from the UK GDPR, the Data Protection Act 2018 and the EU GDPR. If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to raise a concern with the Information Commissioner's Office or your local data protection authority.

    United States

    Depending on your state, including California, Colorado, Connecticut, Virginia, Texas and others with comprehensive privacy laws, you may have the right to know, access, correct and delete personal information, and to opt out of its sale, sharing for targeted advertising, or profiling. We do not sell or share personal information for those purposes, so there is nothing to opt out of, and we honour Global Privacy Control signals. We will not treat you differently for using your rights. An authorised agent may make a request for you, and you may appeal any decision by replying to our response.

    Canada

    Under PIPEDA and applicable provincial laws, you can access and correct your information and withdraw consent, subject to legal and contractual limits. You can complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.

    United Arab Emirates

    Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) you have rights to information, access, correction, deletion, restriction and objection. If you are in a free zone with its own law, such as DIFC or ADGM, the rights under that law apply.

    Africa

    If you are in Nigeria, South Africa, Kenya or another country with a data protection law, you have the rights it gives you, including under the Nigeria Data Protection Act 2023, the Protection of Personal Information Act (POPIA) and the Kenya Data Protection Act 2019. You can complain to the Nigeria Data Protection Commission, South Africa's Information Regulator or Kenya's Office of the Data Protection Commissioner.

    Children

    Our services are for businesses and adults. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, please contact us and we will delete it.

    Links to other sites

    Our site links to CyberPhormX, social networks, Calendly and WhatsApp. Those services have their own privacy notices, which apply when you use them.

    Data controller

    The controller responsible for personal information collected through this website is CyberPhorm, UK Ltd. Cybersecurity enquiries you choose to send to CyberPhormX are handled by CyberPhormX in line with this notice.

    Changes to this notice

    We will update this notice when our practices change and show the date at the top. Significant changes will be highlighted on this page.

    Legal

    Cookies notice

    We do not use advertising or analytics cookies, so you will not see a cookie banner here.

    Last updated: 4 November 2026

    What this website stores

    NameTypePurposeHow long
    cp-currencyLocal storage on your deviceRemembers the currency you chose for prices. Only set if you change the currency yourself. Never sent to us.Until you clear your browser data

    This is strictly necessary to provide a feature you asked for, so under UK and EU rules (PECR and the ePrivacy Directive) it does not need consent. Our pages may suggest a currency based on your device's time zone setting; that happens on your device and is not stored or sent anywhere.

    Our blog

    Our blog runs on WordPress. WordPress itself only sets cookies if you log in or choose to save your details when leaving a comment. We do not run advertising or analytics on the blog.

    Third parties

    Google Fonts delivers our typeface and receives your IP address to do so, but does not set cookies. Links to LinkedIn, Instagram, TikTok, X, Facebook, Telegram, WhatsApp, Calendly and CyberPhormX take you to those sites, which use their own cookies under their own policies. We do not embed their trackers on our pages.

    If this changes

    If we ever add analytics or other non-essential cookies, we will ask for your consent first and update this notice. You can control and delete cookies and local storage in your browser settings at any time.

    Questions: info@cyberphorm.com. See also our privacy notice.

    Legal

    Website terms

    The terms that apply when you use this website.

    Last updated: 4 November 2026

    About these terms

    This website is operated by CyberPhorm. By using it you accept these terms. If you do not agree, please do not use the site. Any project or service we provide is governed by a separate written agreement, which takes priority over anything on this website.

    Information on this site

    Content on this site is general information about CyberPhorm and our services. It is not professional, legal, security or financial advice for your situation. We work to keep it accurate and up to date but cannot promise that it always is.

    Prices

    Prices shown are starting points to help you understand the typical scale of our work. They are not an offer capable of acceptance. Prices are set in British pounds; amounts in other currencies are approximate conversions for guidance only. Your price is confirmed in a written quotation after discovery. Taxes such as VAT are added where they apply.

    Using the site

    You must not misuse the site, including by trying to gain unauthorised access, testing its security without our written permission, introducing malicious code, overloading it, scraping it at volume, or sending spam or unlawful content through our forms.

    Reporting a security issue

    If you believe you have found a security vulnerability in this website, please email hello@cyberphormx.io with the details. Please give us reasonable time to fix it before disclosing it, and do not access or change data that is not yours. We appreciate responsible disclosure.

    Intellectual property

    The CyberPhorm and CyberPhormX names, logos, text, images, design and code on this site belong to us or our licensors. You may view and share pages for personal or internal business use, but you may not copy, adapt or republish them commercially without our written permission.

    Links to other websites

    We link to other websites for your convenience. We do not control them and are not responsible for their content or practices.

    Our liability

    We provide this website free of charge and "as is". To the extent the law allows, we are not liable for any loss arising from your use of it or reliance on its content, including indirect loss or loss of profit, business or data. Nothing in these terms limits liability that cannot be limited by law, such as for death or personal injury caused by negligence or for fraud, and nothing affects your statutory rights as a consumer.

    Governing law

    These terms are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction. If you are a consumer living elsewhere, you also keep any protections the laws of your country give you and may bring proceedings there.

    Changes

    We may update these terms from time to time. The version on this page at the time you use the site applies.

    Contact and company information

    info@cyberphorm.com

    This website is provided by CyberPhorm, UK Ltd.

    Legal

    Accessibility statement

    We want everyone to be able to use this website, whatever device, ability or assistive technology they use.

    Last updated: 4 November 2026

    Our standard

    We aim to meet the Web Content Accessibility Guidelines (WCAG) 2.2 at level AA. This site has been designed and tested with that standard in mind.

    What we have done

    • Clear page structure with headings and landmarks, and a link to skip straight to the main content.
    • Everything can be used with a keyboard, with a visible focus indicator.
    • Animations and 3D scenes respect your device's reduced motion setting and are replaced with still images and text.
    • All important information in animated scenes is also available as text.
    • Form fields have labels, and errors are described in words and announced to screen readers.
    • Text and controls are designed for strong colour contrast and adequate touch target sizes.
    • Pages reflow on small screens and when zoomed, without horizontal scrolling.

    Known limitations

    • Some photographs of events have short descriptions rather than full detail.
    • Blog pages run on a separate WordPress theme and may not yet meet the same standard throughout.
    • Third-party services we link to, such as Calendly and WhatsApp, are outside our control.

    Tell us about a problem

    If you find something hard to use, or need information in a different format, email info@cyberphorm.com with "Accessibility" in the subject line. We aim to reply within five working days.

    Enforcement

    If you are in the UK and not happy with our response, you can contact the Equality Advisory and Support Service (EASS).

    Start a project

    Start a conversation

    Tell us what you are trying to achieve. We will reply by email with a link to book a free, no-commitment 20-minute call.

    What would you like to talk about?

    A few sentences is plenty. Please do not include passwords, health information or other sensitive personal data.