London rooftops at dusk
About
United Kingdom · United Arab Emirates

We break things
so that nobody
else gets to.

CHMS Cyber Security is an offensive security firm working across the United Kingdom and the United Arab Emirates. We do two things properly rather than twenty things adequately.

01Why only two services

Two, not twenty

A menu is a hedge.

Most security firms publish a list of twenty services. It is the safe shape, because saying yes to everything costs nothing to write down. It also tells a buyer nothing about what the firm is actually good at, and it usually means the work is subcontracted the moment somebody says yes.

We do two things. Continuous offensive testing, and private AI deployment. Both are things we have delivered, both are things the market is short of, and both are things a generalist cannot do well. Software development sits with DIGI, our sister company, because that is where the people who build software work.

Open plan working floor
Small team, named people, no subcontracting the interesting parts.
02Who does the work

Named, not stock

Four people, named.

Cory Hobrough

Co-Founder, CTO and COO

Over a decade in offensive security and ethical hacking, and a qualified Cyber Security Technologist. Led the remediation of thousands of vulnerabilities at a Premier League football club, working on infrastructure where the consequences of failure were public.

LinkedIn

Mitchell Spicer

Co-Founder and CMO

Close to a decade in business leadership and entrepreneurial ventures. Runs commercial operations and client engagement, and is responsible for the fact that this site says two things instead of twenty.

AT

Alfie Tyler

CFO

Corporate finance, financial reporting and strategic planning. Owns financial performance and budgeting, including the modelling that makes a fixed annual fee work for both sides.

DM

Daniel McPherson

Chairman

AI and technology investor with more than twenty years of entrepreneurial journeys behind him, including exits to acquirers of the scale of Amazon. Chairs the board and brings the pattern recognition that comes from having built and sold companies rather than only advised them.

03Where we are

London · Dubai

Registered in London. Working in both markets.

Dubai skyline
Dubai. Testing is arranged to respect the rules that apply in each market.
06Next step

No obligation

Find out what a scoping call costs you.

Nothing. Half an hour, an honest read on your exposure, and a fixed annual number if it is a fit.