STRIDER TECHNOLOGIES UK LTD

Shield

An email security tool that filters out state-sponsored solicitation attempts with verified data.

Features

• Living data set, updated in real-time, shared as requested
• Can be added to SIEM or DLP
• Can be washed against live and historic email logs
• Grants clients access to thousands of Risk Signal data points

Benefits

• Identifies and filters out state-sponsored solicitation attempts
• Sits seamlessly within your existing messaging tooling
• Can integrate rules set by your InfoSec team
• Can support live investigations
• Identifies state-backed recruitment attempts in real-time
• Ability to prioritise and protect most valuable programmes/departments
• Provides context on who is targeting you and why

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at paul.gie@striderintel.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

715625646408978

Contact

Paul Gie
07525725951
paul.gie@striderintel.com

About the service

• Service categories:
  • Application Development and Deployment
    • Analytics and business intelligence
      • Business Intelligence
        • Business Intelligence
      • Advanced and predictive analytics
        • Advanced and predictive analytics
      • Location and geospatial data management and analytics
        • Location and geospatial data management and analytics
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: The service is delivered as a fully managed SaaS solution and requires a reliable internet connection and a supported modern web browser. Planned maintenance is scheduled outside UK business hours wherever possible and communicated in advance. Some features depend on the availability and quality of customer-provided or third-party data sources. API usage is subject to rate limits to ensure platform stability. The service does not require specialist hardware or on-premise infrastructure unless explicitly agreed as part of a bespoke deployment.
• System requirements:
  • Data set provided in .CSV
  • Access is provided through standard web browsers and API endpoints

User support

• Email or online ticketing support: Yes
• Support response times: All email and online ticket requests receive an automated acknowledgement upon submission. During UK business hours, standard support requests typically receive an initial response within one business day. Priority incidents receive an initial response within four business hours. Critical service-affecting incidents are triaged immediately. Response times are managed against agreed service levels and monitored to ensure consistent, timely support.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: Strider provides structured support designed to ensure successful onboarding, ongoing adoption, and reliable day-to-day use of the platform. Each client account is assigned a dedicated Client Success Manager (CSM). The CSM serves as the primary point of contact and supports initial onboarding, user enablement, and ongoing product usage. They respond to general questions, provide guidance on platform functionality, and communicate updates, enhancements, and planned changes to the service.; Technical support for integrations and API usage is available through Strider’s Solutions Engineers and integration team. These resources assist with API setup, technical troubleshooting, and integration planning where required.; These Strider support resources are currently provided to clients at no additional cost.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Users are supported through a structured onboarding process. This includes guided setup, configuration assistance, integration support, and access to user documentation. Online training materials and user guides are provided as standard.; Where required, additional remote or onsite training sessions can be delivered at an agreed additional cost. Depending on the selected support level, users may be assigned a Customer Success Manager to support onboarding and early use. The onboarding approach is designed to enable users to adopt the service efficiently and confidently.
• Service documentation: Yes
• Documentation formats: PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Strider provides clear, accessible documentation to support both onboarding and offboarding processes. Onboarding documentation is made available to clients through the in-platform Resource Center, which can be accessed via the secure, cloud-based web interface using a standard web browser. The Resource Center includes user guides, onboarding materials, and reference documentation designed to support initial setup, platform navigation, and effective use of purchased products. Documentation is maintained by Strider and updated as the platform evolves, ensuring clients always have access to current guidance.; ; During onboarding, clients are also supported by their assigned Client Success Manager, who can direct users to relevant documentation and provide clarification where required. This combination of self-service documentation and guided support helps ensure a smooth and consistent onboarding experience.; ; Offboarding documentation and processes are provided upon request. Clients may contact their Client Success Manager to initiate offboarding, at which point Strider supplies the relevant documentation outlining data access, service termination steps, and any applicable timelines. Offboarding support is coordinated by Strider to ensure the process is handled securely, consistently, and in accordance with contractual and data protection requirements.
• End-of-contract data extraction: Users can extract their data at contract end using built-in export functionality or via the API. Data is provided in commonly used, non-proprietary formats to support reuse and portability. Users are supported during the extraction period to ensure data completeness.; Following confirmation of successful data extraction, customer data is securely deleted from the service in accordance with contractual obligations and applicable data protection requirements. Data deletion processes are auditable and aligned with recognised information security standards.
• End-of-contract process: At the end of the contract, users may renew, extend, or terminate the service. If the service is terminated, access remains available for an agreed transition period to support data extraction. Standard offboarding activities, including data export and account closure, are included in the contract price.; Optional services such as extended access, additional reporting, or bespoke transition support may be provided at additional cost if requested. Once offboarding is complete, access is revoked and customer data is securely removed in line with contractual and regulatory requirements.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• Description of service interface: The service is accessed through a secure, browser-based interface designed to support efficient operational use. Users interact with dashboards, filters, and structured views to manage configurations, review outputs, and analyse results. Role-based access controls ensure appropriate visibility and permissions. The interface supports common user workflows and does not require specialist technical knowledge.
• Accessibility standards: None or don’t know
• Description of accessibility: The service has been designed in line with recognized accessibility standards, including WCAG 2.1 AA. Interface components support screen readers, keyboard navigation, and high-contrast display settings. Semantic markup, consistent navigation, and clearly labelled controls are used throughout. Testing has included validation of keyboard-only navigation, focus management, and colour contrast compliance. The interface avoids time-dependent interactions and provides clear, descriptive error messages. Accessibility is reviewed as part of ongoing development, and issues identified through testing or user feedback are prioritised for remediation to ensure inclusive access.
• Accessibility testing: No official testing was conducted, but the design was based around the tenets of WCAG 2.1 AA.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: The service provides a secure RESTful API to support integration with customer systems. Users can submit data, initiate processing, retrieve results, and manage permitted configuration settings programmatically. API access is authenticated and governed by role-based permissions. Users can automate workflows, update configurations within defined limits, and extract outputs through the API. Administrative and platform-level controls are restricted to authorized users and are not fully exposed via the API to protect service integrity. API usage is subject to rate limits and security controls. Comprehensive documentation is provided to support implementation and ongoing use.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: The service uses a scalable, multi-tenant cloud architecture with logical isolation between customers. Capacity is actively managed, and automated scaling ensures consistent performance during periods of increased demand. Usage controls prevent individual customers from affecting overall service availability.

Analytics

• Service usage metrics: Yes
• Metrics types: Usage limits are clearly visible within the platform, allowing users to monitor consumption and manage usage proactively. Where applicable, users can view their current usage relative to service limits to support planning and avoid exceeding contracted thresholds.
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Strider enables users to export Strider-provided outputs and insights from selected areas of the platform in standard formats, including PDF and Word, where functionality is available. Export options are limited to content generated or delivered by Strider and are governed by the user’s permissions and purchased products. User-submitted data (generally not retained) and internal system data are not exportable through the platform.
• Data export formats:
  • CSV
  • Other
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: The service is designed to operate with a high level of availability and reliability. The organisation targets 99.9% service availability, measured on a monthly basis.; Availability calculations exclude planned maintenance, which is scheduled and communicated in advance where possible, and events outside the organisation’s reasonable control, such as wider internet or cloud platform outages. The service does not rely on single points of failure, and availability is supported through resilient system design, controlled change processes, and continuous service monitoring.; Service performance and availability are monitored to enable timely detection of issues and prompt remediation. Where incidents occur, they are investigated and resolved in accordance with documented operational and incident management procedures to minimise disruption to users.
• Approach to resilience: The service is designed to be resilient and to minimise the impact of failures through a combination of architectural and operational controls. It is deployed within a European cloud region, ensuring data residency and service availability appropriate for UK public sector use.; Resilience is supported through the use of blue/green architecture, which enables new versions of the service to be deployed alongside the existing live environment. This approach allows controlled cutovers, rapid rollback in the event of issues, and reduces the risk of service disruption during changes or updates.; The service components are designed to tolerate individual component failures, with redundancy and health monitoring used to detect and respond to issues. Automated deployment and recovery mechanisms support consistent configuration and reduce the likelihood of human error.; Operational monitoring is in place to identify service degradation or failures, enabling timely investigation and remediation. Backup and recovery processes are implemented to support service restoration where required, and resilience measures are reviewed periodically to ensure they remain effective.
• Outage reporting: Service availability and operational status are monitored continuously. In the event of a service outage or significant degradation, incidents are recorded and managed in accordance with documented incident management procedures.; Customers are notified of service outages and material incidents through direct communications, including email notifications to nominated customer contacts. Updates are provided as an incident progresses and once service has been restored.; At present, the service does not provide a public status dashboard or a dedicated API for outage reporting. Where appropriate, customers may contact support directly for incident status and further information.; Post-incident reviews are conducted for significant outages to identify root causes and corrective actions, with lessons learned used to improve service resilience and availability.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted to authorised personnel and granted based on role and least-privilege principles. Access is managed through centralised identity and access management with strong authentication.; Administrative access is further restricted through the use of secure VPN access, limiting connectivity to approved networks and authorised users. Elevated privileges are limited to personnel with a defined operational need, and access rights are reviewed periodically.; Support channels are restricted to authenticated customer contacts and authorised support staff. Access and administrative actions are logged and monitored to support auditability and security oversight.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Strider Technologies maintains a comprehensive set of information security policies and supporting processes that define and govern the organisation’s Information Security Management System (ISMS). These policies and processes are certified against Cyber Essentials, ISO/IEC 27001, and SOC 2 Type II, and provide the authoritative framework for managing information security and privacy risks across the organisation.; The policies establish clear governance for information security and apply to all relevant organisational units, systems, processes, and personnel within the defined ISMS scope including: security governance and oversight, risk assessment and treatment, asset and information classification, access control, cryptography, secure system development, change and configuration management, vulnerability management, incident response, business continuity, and data retention and disposal.; Roles and responsibilities for information security are formally defined, with senior management accountability for the effectiveness of the ISMS. Access to information and systems is controlled using least-privilege principles and strong authentication mechanisms. Operational procedures support the policies through ongoing monitoring, timely remediation of identified risks, structured incident management, and secure deletion of information when it is no longer required.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: The service operates defined configuration and change management processes to ensure systems are securely managed throughout their lifecycle. Service components are tracked from development through deployment and operation using documented inventories, version control, and approved configuration baselines.; Changes to application code, infrastructure, and configuration are assessed prior to implementation to identify potential security and operational impacts. Changes are reviewed and approved in line with documented procedures and tested before deployment. Access to make changes is restricted to authorised personnel. Change activity is logged and monitored to support auditability and continuous improvement.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Strider operates a defined vulnerability management process covering infrastructure, systems, applications, and source code. Potential threats are identified through automated vulnerability scanning, periodic testing, and secure development practices integrated throughout the software development lifecycle.; Code vulnerabilities are managed through secure coding standards, developer training, code review, and security testing of applications and dependencies. Identified vulnerabilities are risk-assessed and prioritised based on potential impact.; Patches and remediation actions are deployed in a timely manner, with higher-risk issues addressed as a priority. Remediation activities are tracked to completion to ensure accountability and continuous improvement.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: The organisation operates protective monitoring processes to detect potential security events and compromises. Monitoring includes logging and alerting for system activity, access events, and security-relevant actions, enabling identification of anomalous or suspicious behaviour.; When a potential compromise is identified, it is logged, triaged, and investigated in accordance with documented incident management procedures. Response actions are based on severity and may include containment, remediation, and escalation.; Monitoring alerts are reviewed promptly, and incidents are responded to in a timely manner, with higher-severity events prioritised for immediate investigation and response.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: No
• Incident management approach: The organisation operates defined incident management processes to ensure incidents are identified, managed, and resolved consistently. Pre-defined procedures exist for common security and operational incident types, enabling timely and proportionate response.; Users can report incidents through established support channels, including email or designated customer contacts. Incidents are also identified through operational monitoring and alerting.; All incidents are logged, triaged, and managed based on severity and impact. Where appropriate, customers are provided with incident notifications and post-incident reports outlining the nature of the incident, actions taken, and any corrective measures implemented.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Access to the product for 48 hours for 2 users (including training).

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: ANAB
• ISO/IEC 27001 accreditation date: Tuesday 25 November 2025
• What the ISO/IEC 27001 doesn’t cover: N/A, our services offered are fully covered by ISO 27001
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 9ce6a803-e014-489c-9275-069cd1d94e39
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications: ISO 27701

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at paul.gie@striderintel.com. Tell them what format you need. It will help if you say what assistive technology you use.