---
title: UK cybersecurity media reputation tracker – 2026 year to date
canonical_url: https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd
type: dataset
publisher: Omniscan
sector: UK Cybersecurity
period: 2026 year to date
coverage_start: '2026-01-01'
coverage_end: '2026-09-30'
date_published: '2026-10-04'
last_updated: '2026-10-04'
organisations: 6
articles_analysed: 4542
mentions: 288
data_download: https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd/data.json
summary: Sophos had the highest average monthly share of coverage (40.8%) among 6
  companies in UK earned media from 1 January 2026 to 30 September 2026, ahead of
  NCC Group (30.7%) and Darktrace (19.6%).
---

# UK cybersecurity media reputation tracker: 2026 year to date (1 January 2026–30 September 2026)

> Sophos had the highest average monthly share of coverage (40.8%) among 6 companies in UK earned media from 1 January 2026 to 30 September 2026, ahead of NCC Group (30.7%) and Darktrace (19.6%). BAE Systems Digital Intelligence had the most favourable net tone (+100). Omniscan analysed 4,542 articles containing 288 mentions of the companies tracked.

Interactive version: https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd

## UK Cybersecurity ranking by share of coverage, 2026 year to date

| Rank | Organisation | Average monthly share of coverage | Mentions | Positive | Neutral | Negative | Net tone |
| --- | --- | --- | --- | --- | --- | --- | --- |
| 1 | Sophos | 40.8% | 114 | 55% | 43% | 2% | +54 |
| 2 | NCC Group | 30.7% | 93 | 37% | 63% | 0% | +37 |
| 3 | Darktrace | 19.6% | 55 | 62% | 33% | 5% | +56 |
| 4 | Bridewell | 5.2% | 15 | 53% | 47% | 0% | +53 |
| 5 | BAE Systems Digital Intelligence | 3.0% | 9 | 100% | 0% | 0% | +100 |
| 6 | Immersive Labs | 0.8% | 2 | 100% | 0% | 0% | +100 |

## Monthly share of coverage, UK Cybersecurity

| Organisation | January 2026 | February 2026 | March 2026 | April 2026 | May 2026 | June 2026 | July 2026 | August 2026 | September 2026 |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| Sophos | 20.5% | 56.0% | 30.3% | 43.8% | 60.0% | 28.1% | 50.0% | 48.7% | 29.7% |
| NCC Group | 56.4% | 16.0% | 21.2% | 18.8% | 32.0% | 34.4% | 26.2% | 35.9% | 35.1% |
| Darktrace | 20.5% | 28.0% | 36.4% | 31.3% | 0.0% | 9.4% | 19.0% | 12.8% | 18.9% |
| Bridewell | 2.6% | 0.0% | 9.1% | 6.3% | 4.0% | 9.4% | 4.8% | 2.6% | 8.1% |
| BAE Systems Digital Intelligence | 0.0% | 0.0% | 0.0% | 0.0% | 0.0% | 18.8% | 0.0% | 0.0% | 8.1% |
| Immersive Labs | 0.0% | 0.0% | 3.0% | 0.0% | 4.0% | 0.0% | 0.0% | 0.0% | 0.0% |

## Companies in detail

### Sophos

**Threat research and Fusion defined Sophos’s year-to-date profile**

Sophos ranked 1st of 6 by average monthly share of coverage (40.8%) in the UK Cybersecurity benchmark for 2026 year to date, with 114 mentions and a net tone of +54.

Sophos led the benchmark with 114 mentions, a 39.6% pooled share of tracked-company mentions and a 40.8% average monthly share. The pooled figure was slightly below the equal-month measure, reflecting the different weighting of months, while Sophos ranked first under both views. Its monthly position was less uniform: Sophos ranked first in February, April, May, July and August, but joint second in January and second in March, June and September. February’s 56.0% share coincided with independent editorial reporting on the Arco Cyber acquisition, the Active Adversary Report and research into ransomware infrastructure. The March retreat to 30.3% came amid coverage of research into distrust of security vendors and the Keenadu backdoor found on low-cost Android tablets. April and May restored a leading position as reporting ranged from QEMU-based defence evasion and the WantToCry ransomware operation to Sophos’s automated security-operations data. May’s profile also extended beyond cybersecurity research through independent reporting on resistance to the company’s proposed $2.5 billion refinancing. June was more concentrated around one research programme on human-directed, AI-assisted development of endpoint-evasion techniques, while Sophos returned to second place. July combined a 50.0% share and first place with the Sophos Fusion launch, ransomware research on compromised identities and analysis of risks from autonomous AI agents. Sophos remained first in August at 48.7%; stories included further Fusion coverage and education-sector ransomware research. September’s 29.7% share and second-place position accompanied reporting on an F5 Linux rootkit, the Gentlemen ransomware operation and MSPs’ expanding CISO role.

Key messages:

- Sophos accounted for 39.6% of tracked-company mentions; its monthly rank was #1-#2 among 6.
- Coverage concentrated on Threat Intelligence & Research and Products & Technology.
- Visibility peaked in May 2026 at 60%, compared with 20.5% in January 2026.
- January 2026: Sophos launched Workspace Protection for governing applications, data and AI use in hybrid work, reported by Help Net Security.

Leading themes:

- Threat Intelligence & Research: 55.3% of Sophos's coverage (theme index 1.69, net tone +40)
- Products & Technology: 25.4% of Sophos's coverage (theme index 2.21, net tone +79)
- M&A & Investment: 6.1% of Sophos's coverage (theme index 0.76, net tone +100)

Notable positive coverage:

- 20 January 2026, helpnetsecurity.com: [Sophos expands security stack to govern apps, data, and AI in hybrid work](https://www.helpnetsecurity.com/2026/01/20/sophos-expands-security-stack-to-govern-apps-data-and-ai-in-hybrid-work/). Sophos launched Workspace Protection, a hybrid-work security suite centred on its Protected Browser and integrated with Sophos Central. The offering is intended to govern applications, data and AI use while providing ZTNA, DNS protection and email monitoring capabilities.
- 3 February 2026, infosecurity-magazine.com: [Sophos CISO on Software Flaws, Vendor Risk and Secure by Design](https://www.infosecurity-magazine.com/interviews/sophos-ciso-software-flaws-vendor/). Sophos CISO Ross McKerchar discusses software vulnerabilities, vendor risk and Secure by Design practices in a sponsored Infosecurity interview. He highlights Sophos’s progress on Secure by Design commitments and proactive vulnerability management.
- 10 February 2026, technologyreseller.uk: [Sophos Acquires Arco Cyber to Bring CISO-Level, Agentic AI-Powered Expertise to Every Organization](https://technologyreseller.uk/sophos-acquires-arco-cyber-to-bring-ciso-level-agentic-ai-powered-expertise-to-every-organization/). Sophos has acquired UK-based cybersecurity assurance company Arco Cyber. The acquisition supports Sophos CISO Advantage, combining agentic AI, governance capabilities and partner-delivered expertise.

Notable negative coverage:

- 28 May 2026, financialpost.com: [Private Credit Snubs $2.5 Billion Deal by Thoma Bravo's Sophos](https://financialpost.com/pmn/business-pmn/private-credit-snubs-2-5-billion-deal-by-thoma-bravos-sophos). Sophos's $2.5 billion refinancing effort has reportedly met resistance from private-credit lenders. The company faces approaching debt maturities while Thoma Bravo considers alternative financing options.
- 29 May 2026, briefs.co: [Private Credit Snubs $2.5B Sophos Refinancing Deal](https://www.briefs.co/news/private-credit-walked-away-sophos-deal/). Private-credit lenders reportedly declined Sophos's proposed $2.5 billion refinancing despite higher yields. Thoma Bravo is said to be pursuing a loan amendment with existing lenders.

- [Sophos deep dive](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd?entity=sophos&view=deep-dive)
- [Sophos PDF report](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd/reports/sophos.pdf)

### NCC Group

**Escode exit and threat research reshape NCC Group’s profile**

NCC Group ranked 2nd of 6 by average monthly share of coverage (30.7%) in the UK Cybersecurity benchmark for 2026 year to date, with 93 mentions and a net tone of +37.

NCC Group recorded 93 measured mentions from January to September, ranking second on both its 30.7% average monthly share and 32.3% pooled share of tracked-company mentions. The higher pooled share reflects the greater weight of high-volume months, particularly January, rather than any inconsistency between the two measures. January established the central corporate story: the £275 million Escode sale, the resulting pure-play cyber strategy and a managed-services partnership with Delinea accompanied a first-place 56.4% share. Visibility then fell sharply in February, although reporting on Qilin and insider recruitment continued NCC Group’s threat-intelligence profile. March and April combined ransomware research with scrutiny of revenue growth, margins and the strategic future of the cyber business. May’s move to second place brought broader research on The Gentlemen, Lazarus Group and operational-technology exposure alongside half-year growth expectations. NCC Group returned to first place in June as the completed Escode disposal, improved cyber results and the decision to remain a listed independent business became the dominant news agenda. July broadened the profile through the Siemens critical-infrastructure agreement, the government’s Cyber Resilience Pledge and a proposed £185 million shareholder return, while its rank moved back to second. August retained second place at 35.9%, with the company’s record July ransomware data leading the substantive coverage. September’s 35.1% share restored first place as further record ransomware findings and recognition of NCC Group’s managed detection and response offering sat alongside a series of buyback and holdings disclosures. Additional visibility included contextual references in reporting on Cytix’s funding and a hospital-security vendor assessment; these did not report developments at NCC Group.

Key messages:

- NCC Group accounted for 32.3% of tracked-company mentions; its monthly rank was #1-#3 among 6.
- Coverage concentrated on Financial Results & Markets and Threat Intelligence & Research.
- Visibility peaked in January 2026 at 56.4%, compared with 16% in February 2026.
- January 2026: the £275 million sale of Escode to TDR Capital and NCC Group’s planned cyber-security focus — Reuters.

Leading themes:

- Financial Results & Markets: 30.1% of NCC Group's coverage (theme index 11.74, net tone +39)
- Threat Intelligence & Research: 28.0% of NCC Group's coverage (theme index 0.58, net tone +15)
- M&A & Investment: 15.1% of NCC Group's coverage (theme index 4.19, net tone +36)

Notable positive coverage:

- 21 January 2026, reuters.com: [UK's NCC Group to sell Escode for $369.4 million](https://www.reuters.com/business/uks-ncc-group-sell-escode-3694-million-2026-01-21/). NCC Group agreed to sell its Escode software-escrow business to TDR Capital for £275 million. The divestment is intended to leave NCC focused on cyber-security resilience and support shareholder returns.
- 21 January 2026, businesscloud.co.uk: [NCC Group to sell Escode business to PE firm in £275m deal](https://businesscloud.co.uk/news/ncc-group-to-sell-escode-business-to-pe-firm-in-275m-deal/). NCC Group agreed to sell Escode to TDR Capital for £275m, subject to conditions and approvals. NCC says the sale will support its strategy to operate as a pure-play cybersecurity and resilience company.
- 22 January 2026, businesscloud.co.uk: [NCC Group strikes San Francisco deal a day after £275m sale](https://businesscloud.co.uk/news/ncc-group-strikes-san-francisco-deal-a-day-after-275m-sale/). NCC Group partnered with Delinea to provide managed, cloud-native privileged-access-management services. The agreement supports NCC Group's strategy to become a pure-play global cyber resilience company following the Escode sale.

- [NCC Group deep dive](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd?entity=nccgroup&view=deep-dive)
- [NCC Group PDF report](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd/reports/nccgroup.pdf)

### Darktrace

**Leadership change and AI security research shaped Darktrace’s nine-month profile**

Darktrace ranked 3rd of 6 by average monthly share of coverage (19.6%) in the UK Cybersecurity benchmark for 2026 year to date, with 55 mentions and a net tone of +56.

Darktrace recorded 55 mentions across eight covered months, representing 19.1% of tracked-company mentions over the reporting window. It ranked third by both pooled share and its 19.6% average monthly share. Its strongest competitive phase ran from January to April, culminating in first place with a 36.4% share and 12 mentions in March. Leadership reporting was prominent early in the period, spanning Terry Doyle’s appointment as the first CIO, Jill Popelka’s departure and Ed Jennings’s arrival as president and CEO. Research supplied another sustained strand, including investigations into React2Shell malware, identity-based attacks, Chaos and ZionSiphon. Product reporting broadened the account through SECURE AI, managed email security for service providers and later tools addressing enterprise AI-agent risks. After no measured mentions in May, Darktrace returned in joint fourth place with 9.4% in June alongside research into cyber incidents affecting professional sport. Its share increased to 19.0% and third place in July, when stories included its investigation of a compromised AI gateway and its position on safeguards for advanced cybersecurity models. Darktrace remained third in August and September, while coverage moved towards cloud, software-as-a-service and AI-agent security, including the general availability of SECURE AI and the launch of Signal Labs. Across the window, the profile shifted from executive change towards a more technology- and research-led account of identity, cloud and enterprise AI risk.

Key messages:

- Darktrace accounted for 19.1% of tracked-company mentions; its monthly rank was #1-#4 among 6.
- Coverage concentrated on Threat Intelligence & Research and Products & Technology.
- Visibility peaked in March 2026 at 36.4%, compared with 0% in May 2026.
- January 2026: Darktrace appointed Terry Doyle as its first chief information officer — IT Pro.

Leading themes:

- Threat Intelligence & Research: 40.0% of Darktrace's coverage (theme index 0.95, net tone +64)
- Products & Technology: 27.3% of Darktrace's coverage (theme index 1.87, net tone +80)
- Talent & Skills: 14.5% of Darktrace's coverage (theme index 3.77, net tone +50)

Notable positive coverage:

- 14 January 2026, itpro.com: [Darktrace just hired its first chief information officer](https://www.itpro.com/business/leadership/darktrace-just-hired-its-first-chief-information-officer). Darktrace appointed Terry Doyle as its first CIO to unify its enterprise IT and data functions. He will work from London and report to CFO Suman Raju.
- 10 March 2026, itpro.com: [Darktrace names Ed Jennings as new president and CEO](https://www.itpro.com/business/leadership/darktrace-names-ed-jennings-as-new-president-and-ceo). Darktrace appointed Ed Jennings as president and CEO, effective March 23, following Jill Popelka's departure. The company said Jennings will support growth of its AI-native security platform and customer base.
- 24 March 2026, helpnetsecurity.com: [Darktrace expands MSSP offering with AI-driven managed email security](https://www.helpnetsecurity.com/2026/03/24/darktrace-managed-email-security-offering/). Darktrace launched an AI-native managed email-security offering for MSSPs and expanded its Defenders Partner Program. The service adds multi-tenant operations and AI-led detection, investigation and response capabilities.

Notable negative coverage:

- 30 January 2026, businesscloud.co.uk: [Man Utd stadium; Darktrace; Jenna Meek; Dragons' Den: the week's best-read stories](https://businesscloud.co.uk/news/man-utd-stadium-darktrace-jenna-meek-dragons-den-the-weeks-best-read-stories/). A business-news roundup reports that Darktrace's private-equity owner forced out CEO Jill Popelka and appointed an interim chief executive.

- [Darktrace deep dive](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd?entity=darktrace&view=deep-dive)
- [Darktrace PDF report](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd/reports/darktrace.pdf)

### Bridewell

**Bridewell research broadens from CNI risk to AI privacy**

Bridewell ranked 4th of 6 by average monthly share of coverage (5.2%) in the UK Cybersecurity benchmark for 2026 year to date, with 15 mentions and a net tone of +53.

Bridewell recorded 15 mentions from January to September 2026, representing 5.2% of tracked-company mentions and ranking fourth on both pooled and average monthly share. January brought a contextual citation in Infosecurity Magazine of research showing that 95% of UK critical-infrastructure providers had been breached, before Bridewell recorded no coverage in February. Share rose to 9.1% in March as Computer Weekly, Infosecurity Magazine and New Civil Engineer reported Bridewell’s CNI findings on AI risk, regulation, uneven framework adoption and the 93% incidence of cyberattacks. In April, wider Infosecurity Magazine coverage of the NCSC’s CYBERUK warning cited Bridewell leaders on organisational preparedness; May then centred on the company’s threat-intelligence report about ClickFix, infostealers, ransomware, supply-chain compromise and state-aligned threats. June’s 9.4% share accompanied three Bridewell research stories: ITPro covered legacy technology and patching risks at utilities, SecurityBrief examined its analysis of rising ICO penalties, and Professional Security reported its findings on healthcare cyber defences. July combined the launch of the BCON Collective threat-intelligence practice in IT Security Guru with a contextual profile in SOCRadar’s guide to UK managed security providers, while August coverage in Industrial Cyber detailed infostealer exposure across ten CNI organisations. Share returned to 8.1% in September when SC World covered Bridewell’s study of AI-model privacy policies, while Reuters cited its researchers on AI-assisted targeting of critical infrastructure and ITPro included its warning about resilience risks following a UK power-plant attack. Across the period, Bridewell’s strongest direct coverage consistently drew on proprietary research, broadening from critical-infrastructure security into regulatory enforcement, healthcare, infostealers and AI privacy.

Key messages:

- Bridewell accounted for 5.2% of tracked-company mentions; its monthly rank was #3-#4 among 6.
- Coverage concentrated on Threat Intelligence & Research and NCSC & Government Policy.
- Visibility peaked in June 2026 at 9.4%, compared with 0% in February 2026.
- Bridewell’s CNI report identified AI risk, cyber incidents and security gaps — Computer Weekly.

Leading themes:

- Threat Intelligence & Research: 60.0% of Bridewell's coverage (theme index 1.48, net tone +44)
- NCSC & Government Policy: 13.3% of Bridewell's coverage (theme index 3.31, net tone +50)
- Breaches & Incidents: 6.7% of Bridewell's coverage (theme index 2.6, net tone 0)

Notable positive coverage:

- 19 March 2026, computerweekly.com: [AI makes debut in Bridewell cyber security in CNI report](https://www.computerweekly.com/news/366640469/AI-makes-debut-in-Bridewell-cyber-security-in-CNI-report). Bridewell's UK CNI survey reports that AI risk has become a leading concern and that 93% of surveyed organisations experienced a cyber incident in the past year. It also identifies gaps in regulatory-framework adoption and operational technology security.
- 19 June 2026, itpro.com: [Legacy kit behind vast majority of cyber attacks on utilities](https://www.itpro.com/security/legacy-kit-behind-vast-majority-of-cyber-attacks-on-utilities). Bridewell's 2026 critical-national-infrastructure report says 77% of utilities organisations faced cyber incidents involving legacy software or unavailable patches. The company recommends stronger asset visibility, risk-based remediation, monitoring and incident-response preparation.
- 20 March 2026, newcivilengineer.com: [93% of UK critical national infrastructure operators faced cyber attacks in past year](https://www.newcivilengineer.com/latest/93-of-uk-critical-national-infrastructure-operators-faced-cyber-attacks-in-past-year-20-03-2026/). Bridewell's CNI Research Report 2026 found that 93% of UK critical-national-infrastructure operators experienced a cyberattack in the previous year. The report highlights phishing, ransomware, patching challenges and growing AI risk.

- [Bridewell deep dive](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd?entity=bridewell&view=deep-dive)
- [Bridewell PDF report](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd/reports/bridewell.pdf)

### BAE Systems Digital Intelligence

**Cyber defence and Land ISTAR agreements shaped a concentrated profile**

BAE Systems Digital Intelligence ranked 5th of 6 by average monthly share of coverage (3.0%) in the UK Cybersecurity benchmark for 2026 year to date, with 9 mentions and a net tone of +100.

Between January and September 2026, BAE Systems Digital Intelligence recorded nine mentions and ranked fifth by both pooled and average monthly share of tracked-company mentions. It had no measured coverage from January to May. In June, six mentions gave it a 18.8% share and third place, with International Business Times Japan reporting its role in a BAE Systems and NEC agreement to develop active cyber-defence solutions for Japan’s government. Coverage was absent again in July and August. In September, three mentions produced an 8.1% share and joint fourth place; ASDNews carried a Thales release about an agreement with Thales UK, Frazer-Nash Consultancy and CACI supporting Project ZODIAC and future British Army Land ISTAR capabilities. The Defense Post separately covered the collaboration’s planned integration of sensors, data fusion and command-and-control tools for battlefield decision-making. A sponsored City AM feature also highlighted the company as an MCA Awards finalist for replacing the Home Office’s legacy UK border-security system, which supports more than 130 million journeys annually. The record was therefore limited to two months and centred entirely on contracts and partnerships spanning government cyber defence, military intelligence systems and border security.

Key messages:

- BAE Systems Digital Intelligence accounted for 3.1% of tracked-company mentions; its monthly rank was #3-#4 among 6.
- Coverage concentrated on Contracts & Partnerships.
- Visibility peaked in June 2026 at 18.8%, compared with 0% in January 2026.
- BAE Systems and NEC signed an agreement on active cyber-defence solutions for Japan’s government — International Business Times Japan.

Leading themes:

- Contracts & Partnerships: 100.0% of BAE Systems Digital Intelligence's coverage (theme index 31, net tone +100)

Notable positive coverage:

- 15 June 2026, adsadvance.co.uk: [BAE Systems and NEC sign MoU to strengthen Japan’s cyber defence](https://www.adsadvance.co.uk/bae-systems-and-nec-sign-mou-to-strengthen-japan-s-cyber-defence/). BAE Systems and NEC agreed to collaborate on active cyber-defence capabilities for Japan's government. BAE Systems Digital Intelligence is presented as contributing cyber and digital expertise to the partnership.
- 15 June 2026, enterprisetimes.co.uk: [NEC and BAE sign MoU to win Active Cyber Defence contracts in Japan -](https://www.enterprisetimes.co.uk/2026/06/15/nec-and-bae-sign-mou-to-win-active-cyber-defence-contracts-in-japan/). BAE Systems and NEC signed an MoU to pursue active cyber-defence work for the Japanese government under the Japan-UK Strategic Cyber Partnership. The article identifies BAE Systems Digital Intelligence leadership and expertise as central to the collaboration.
- 23 September 2026, thedefensepost.com: [Thales, BAE Systems Team Up on British Army Battlefield AI](https://thedefensepost.com/2026/09/23/thales-bae-uk-zodiac/). BAE Systems Digital Intelligence joined Thales UK, Frazer-Nash Consultancy and CACI in an MoU supporting the British Army's Project ZODIAC Land ISTAR capability. The programme aims to integrate sensors, data fusion and command-and-control tools for battlefield decision-making.

- [BAE Systems Digital Intelligence deep dive](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd?entity=baesystemsdigitalintelligence&view=deep-dive)
- [BAE Systems Digital Intelligence PDF report](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd/reports/baesystemsdigitalintelligence.pdf)

### Immersive Labs

**Skills commentary defined Immersive Labs’ limited 2026 visibility**

Immersive Labs ranked 6th of 6 by average monthly share of coverage (0.8%) in the UK Cybersecurity benchmark for 2026 year to date, with 2 mentions and a net tone of +100.

Immersive Labs recorded two mentions from January to September 2026, with coverage confined to March and May. It ranked sixth by both average monthly share and pooled share, at 0.8% and 0.7% respectively. After no coverage in January or February, its share was 3.1% in March, placing it fifth among the tracked companies. Help Net Security summarised VP Dan Potter’s video contribution making the case for realistic, pressure-based exercises and targeted micro-learning over routine phishing simulations. Coverage returned to zero in April before reaching 4.0% and joint third place in May. In a contributed TechRadar article, Potter argued that skills programmes can create misplaced confidence when completion replaces crisis-performance measurement, supported by Immersive benchmark data showing that decision-making accuracy falls sharply during breach exercises. No further coverage appeared from June to September, leaving talent and skills as the sole theme across the period.

Key messages:

- Immersive Labs accounted for 0.7% of tracked-company mentions; its monthly rank was #3-#5 among 6.
- Coverage concentrated on Talent & Skills.
- Visibility peaked in May 2026 at 4%, compared with 0% in January 2026.
- Dan Potter argued for realistic exercises and targeted micro-learning in Help Net Security.

Leading themes:

- Talent & Skills: 100.0% of Immersive Labs's coverage (theme index 19.07, net tone +100)

Notable positive coverage:

- 25 March 2026, helpnetsecurity.com: [Why your phishing simulations aren't building a security culture](https://www.helpnetsecurity.com/2026/03/25/security-culture-training-video/). Immersive VP Dan Potter argued that realistic, pressure-based exercises and targeted micro-learning build stronger cyber resilience than routine phishing simulations.
- 26 May 2026, techradar.com: [Are cyber pros fooling themselves with skills development?](https://www.techradar.com/pro/are-cyber-pros-fooling-themselves-with-skills-development). Immersive's Dan Potter argues that cyber-skills programmes can create misplaced confidence when they measure completion rather than crisis performance. Immersive benchmark data indicates decision-making accuracy falls sharply during breach exercises.

- [Immersive Labs deep dive](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd?entity=immersivelabs&view=deep-dive)
- [Immersive Labs PDF report](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd/reports/immersivelabs.pdf)

## Methodology

- **Share of coverage**: an organisation's mentions divided by all mentions of the organisations tracked in the same sector that month, in UK earned media. It is the central measure of media visibility in Omniscan benchmarks. "Average monthly share" is the mean of the monthly shares across the reporting period.
- **Mention**: one article that covers an organisation, classified as positive, neutral or negative in tone. Articles are deduplicated, and an organisation's own websites and passing sponsorship name-checks are excluded, so only earned media counts.
- **Net tone**: positive mentions minus negative mentions, as a percentage of all mentions (range −100 to +100).
- **Themes**: every article is assigned to one of the sector's editorial themes. A theme index above 1 means the organisation is covered on that theme more than its peers are; below 1 means less.
- **Calculation**: every figure is computed directly from the classified articles; narrative summaries are checked against those figures.
- **Sources**: UK national and international, trade and specialist, regional and local, and aggregator and syndication earned media.

## Other UK Cybersecurity editions

- [UK cybersecurity media reputation tracker – H1 2026](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-h1.md)
- [UK cybersecurity media reputation tracker – July 2026](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-07.md)
- [UK cybersecurity media reputation tracker – August 2026](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-08.md)
- [UK cybersecurity media reputation tracker – September 2026](https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-09.md)
- [All Omniscan media benchmarks](https://www.omniscan.ai/benchmarks.md)

## How to cite

Omniscan, "UK cybersecurity media reputation tracker", 2026 year to date (1 January 2026–30 September 2026), published 4 October 2026. https://www.omniscan.ai/benchmarks/uk-cybersecurity-2026-ytd