JUMPSEC LIMITED
Compromise Assessment / Threat Hunting Sweep
Proactively hunt for threats across endpoints, identity, and logs to identify signs of active compromise or historical attacker activity that existing controls have missed. Conducted by seasoned incident responsers of an NCSC CIR CIR-accredited provider.
Features
- Hypothesis-led hunts using current threat intelligence.
- Review endpoints, identities, logs for attacker behaviours.
- Hunt persistence, C2 beacons, and living off the land activity.
- Analyse anomalous authentication, lateral movement, privilege escalation.
- Memory and disk artefact triage on key hosts.
- Validate detections against MITRE ATT&CK techniques.
- Correlate findings across EDR, SIEM, and telemetry sources.
- Produce evidence, timeline, and remediation recommendations.
Benefits
- Confirm whether compromise exists or existed.
- Reduce attacker dwell time through proactive hunting.
- Prioritise containment and hardening actions quickly.
- Improve SOC detections and logging coverage.
- Provide assurance before audit, merger, or change.
- Generate defensible evidence for regulators and insurers.
- Strengthen identity, endpoint, and privileged access controls.
- Answer: are attackers here, or were they.
Pricing
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bids@jumpsec.com.
Tell them what format you need. It will help if you say what assistive technology you use.
Framework
G-Cloud 15
Service ID
4 5 9 1 4 0 4 9 7 6 5 8 4 2 2
Contact
JUMPSEC LIMITED
Andy Roberts
Telephone: 0333 939 8080
Email: bids@jumpsec.com
About your service
- Service categories
-
Cloud Support Services
Security Services
- Security risk management
- Security incident management
- Security audit services
Service scope
- Service constraints
-
Access to required logs, telemetry and systems must be provided.
We do not deploy enterprise-wide monitoring tools as part of this one-off engagement.
Remediation and rebuild support can be provided under DFIR as a separate service.
User support
- Email or online ticketing support
- Yes
- Support response times
-
Typical Response time is less than 1 hour during normal Business Hours.
Incident Response requests are typically dealt with in less than 15 minutes.
Consultants are aligned on a project-by-project basis with direct access to the client.
Direct contact with the consultant can be made by phone or the preferred communication/messaging channel.
Incident Management / Incident Co-ordination reachable by email /phone/messaging - see Service Description. - User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Support levels
-
Typical Response time is less than 1 hour during normal Business Hours.
Incident Response requests are typically dealt with in less than 15 minutes.
Consultants are aligned on a project-by-project basis with direct access to the client.
Direct contact with the consultant can be made by phone or the preferred communication/messaging channel.
Incident Management / Incident Co-ordination reachable by email /phone/messaging - see Service Description.
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Security Clearance (SC)
Pricing
- Discount for educational organisations
- No
Architecture roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Security architect | £1,250.00 | |
| Lead security architect | £1,550.00 | |
| Principal security architect | £1,750.00 |
Cyber security roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Lead cyber security audit and assurance | £1,150.00 | |
| Principal cyber security audit and assurance | £1,650.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security governance and risk manager | £1,150.00 | |
| Lead cyber security governance and risk manager | £1,450.00 | |
| Principal cyber security governance and risk manager | £1,650.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber incident response | £1,400.00 | |
| Lead cyber security incident response | £1,500.00 | |
| Principal cyber security incident response | £2,450.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security vulnerability management | £1,150.00 | |
| Lead cyber security vulnerability management | £1,300.00 | |
| Principal cyber security vulnerability management | £1,650.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security digital forensics | £1,400.00 | |
| Lead cyber security digital forensics | £1,500.00 | |
| Principal cyber security digital forensics | £2,450.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security testing | £1,150.00 | |
| Lead cyber security penetration testing | £1,450.00 | |
| Principal cyber security testing | £1,750.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate cyber security secure systems architecture and design | £1,250.00 | |
| Lead cyber security secure systems architecture and design | £1,550.00 | |
| Principal cyber security secure systems architecture and design | £1,750.00 |
Product and delivery roles
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Associate delivery manager | £500.00 | |
| Delivery manager | £700.00 | |
| Senior delivery manager | £900.00 |
| Role level | UK Rate | Offshore Rate |
|---|---|---|
| Programme delivery manager | £800.00 |
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- British Assessment Bureau
- ISO/IEC 27001 accreditation date
- Wednesday 11 June 2025
- What the ISO/IEC 27001 doesn’t cover
- N/a
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- Who accredited the ISO 9001 certification
- British Assessment Bureau
- ISO 9001 accreditation date
- Wednesday 11 June 2025
- What the ISO 9001 doesn’t cover
- N/a
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- Ff15ec0d-1d5e-4e13-8bbd-dc59148e1893
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- 59682a3d-b7a2-486a-805a-26c964e7c1b6
- Other security certifications
- Yes
- Any other security certifications
- CREST Membership
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
-
Service documents
Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format,
email the supplier at bids@jumpsec.com.
Tell them what format you need. It will help if you say what assistive technology you use.