The UK National Cyber Security Centre (NCSC) announced on 11 November 2026 the launch of its Cyber Adversary Simulation (CyAS) scheme, a new service for critical organisations to test their cyber defences.
What the scheme offers
The Cyber Adversary Simulation (CyAS) scheme is intended to help strengthen national cyber resilience by allowing critical organisations and overseeing bodies to test their ability to prevent, detect and respond to realistic simulated cyber attacks.
Provider assurance and methodology
Commercial providers are assessed against an NCSC-defined standard, ensuring services meet recognised requirements. A key feature is that providers conduct reconnaissance of the customer’s technology, exposure and threat landscape and then develop realistic, customer-specific attack plans, adopting an adversarial mindset and appropriate tools.
What the NCSC says
"You cannot improve what you do not know. That is why I am delighted to see the launch of the Cyber Adversary Simulation scheme. By enabling rigorous, realistic end to end assessments by the very best adversary simulation experts, CyAS will help organisations build a clearer picture of how they would stand up to genuine cyber attacks and take action to strengthen their security and resilience."
"Moving beyond traditional pen testing and auditing of controls, the CyAS service enables organisations to practically test their cyber defences, ensuring they are able to protect, detect and respond to cyber attacks."
What to do
- Find a provider on the scheme’s ‘Find a Provider’ page.
Key facts and where they come from
- The NCSC has launched a new Cyber Adversary Simulation (CyAS) scheme.
The NCSC has launched a new Cyber Adversary Simulation (CyAS) scheme.
- The scheme is designed to help strengthen national cyber resilience, supporting the UK's most critical organisations.
The scheme is designed to help strengthen national cyber resilience, supporting the UK's most critical organisations, as well as overseeing bodies.
- Commercial providers are assessed against an NCSC-defined standard.
Commercial providers are assessed against an NCSC-defined standard, giving organisations confidence that they are buying services that meet recognised requirements.
- Providers conduct reconnaissance to develop realistic, customer‑specific attack plans.
A key feature of the CyAS methodology is that providers conduct reconnaissance to understand the customer’s technology, exposure and threat landscape. This is then used to develop realistic, customer-specific attack plans.
- The scheme will initially operate as a Minimum Viable Product (MVP).
The scheme will initially operate as a Minimum Viable Product (MVP), enabling the NCSC to test demand, refine the methodology and build confidence before moving towards a fuller operating model.
- A full list of assured service providers is available on the ‘Find a Provider’ page.
You can find a full list of assured service providers on the schemes ‘Find a Provider’ page.
