2025 Cyber Security Service Delivery Review

A Look Back at 2025

As 2025 draws to a close, I want to take a moment to reflect on what this year has meant for us at SEP2. It’s been another year of hard work, collaboration, and progress – both for our team and for the clients we support. From strengthening our services under the Wingman brand to engaging with the next generation through our Cyber School initiative, every step has been about building trust and delivering real value. In this review, you’ll also hear directly from our managers as they share their teams’ wins and what’s ahead in 2026.

2025 Cyber Security Service Delivery Strategy

John Tammaro, Head of Service Delivery

For me, 2025 was the year of change, not only for me as an individual, but for SEP2 as a whole. We have stepped up our service offerings to include more core vendor technology than ever before, driven by a re-envisioning of both how and who delivers services to our customers.

How We Deliver

SEP2 knows that simply throwing more bodies at a “problem” is not a long-term solution for getting the best Cyber Security Service Delivery outcomes, at least not when considering medium and long-term strategies for business growth.

For SEP2, our path to change started with a Google-authored paper called Autonomic Security Operations (ASO) 10X Transformation of the Security Operations Center. Taking the elements that worked for us (let’s be honest, we are not the size of Google, but we have grand visions), we developed our own version: Wingman Security Operations (WSO). We were already implementing parts of this approach and were partly along the journey. ASO articulated the concept well, so we incorporated some of their ideas into our own framework.

WSO takes our Security Operations Center (SOC) of analysts, specialists and engineers and Network Security of technicians and engineers and brings them together to break silos and deliver services cross-team, with a specific focus on our skills matrix to help build out and develop the right skills in the right service delivery function.

Why is this important? Our WSO vision takes these core elements – People, Process, and Technology – and challenges us to achieve a 10X output. Simply doubling or quadrupling our efforts does not yield the tangible growth required to scale effectively.

Who is Delivering

Our service delivery team has continued to grow into a leading security organisation, ready to tackle any challenge with expertise and confidence.

In 2026, we are starting the year ~100 strong. Over 60% of our hires throughout SEP2 are technical resources capable of driving success for our customers. WSO provides these teams the opportunities to bridge skill gaps and drive efficiency through cross-team methodologies, training, and hands-on labs.

Customer Success Team

This year, SEP2 grew our very own Customer Success Team. Our aim was to break away from the norm of the industry-standard “Advocacy Team,” which is generally brought in to manage awkward situations like product failure or communication breakdowns.

At SEP2, we strive to stay ahead of the curve, taking proactive measures to ensure lasting success.

Why? We know our customers well enough to see that, while each has unique challenges, they all strive for the same outcome: timely, secure, and cost-effective delivery of their objectives. We believe lessons learned from one customer should be shared across our network to drive greater efficiency and service excellence.

2025 was the year we built momentum. We reimagined our cyber security service delivery, strengthened our teams, and created a model that scales with purpose. As we head into 2026, the challenge isn’t just to climb higher, it’s to bring others with us. By connecting people, process, and technology in meaningful ways, we’re shaping a future where security isn’t a barrier but an enabler.

AI Journey and Agentic SOC Strategy for 2026

James Woodward, Head of Technology

2025 wasn’t exactly quiet for the tech team. We’ve been busy pulling apart old ways of working, stitching in new ones, and generally making life easier for everyone at SEP2. From swapping productivity suites to containerising pretty much everything, and even giving AI a seat at the table. It’s been a year of big moves.

Here’s a quick look at what we’ve done and what’s coming next.

Move to Google Workspace

As SEP2’s relationship with Google grew stronger, it made sense to take a hard look at our main office productivity suite. Was sticking with Microsoft 365 still the right call? In the end, we decided to make the switch to Google Workspace. Now, the entire company uses it as our primary tool for productivity and communication. This move also opened the door for more flexibility, with our end users now able to choose platforms like macOS and ChromeOS, giving them more freedom in how they work.

Containerise the World

This year, we set out to modernise our infrastructure and move away from monolithic platform deployments. The mission? Run everything as a container on Kubernetes and only fall back to standalone operating systems when absolutely necessary. We’ve gone from managing over 100 virtual machines to fewer than 10, with the rest now container-based applications. The result: simpler maintenance and a much leaner, more efficient setup.

The Start of Our AI Journey

2025 saw AI activity skyrocket across the industry, and SEP2 wasn’t about to sit on the sidelines. We explored how AI could make life easier for our analysts and help them branch into areas they might not feel comfortable with at first. Enter Wingman AI: our very own AI bot. Acting as a central point for queries and linked to various products via MCP, Wingman AI is already creating learning opportunities and helping us plan for the future.

Agentic SOC

Continuing on our AI journey, 2026 will see the general roll out of the SEP2 bot and continued expansion of its capabilities through tuning and greater integrations. Our SOC analysts will be more empowered than ever as we introduce agentic SOC capabilities.

SEP2 App

We want working with SEP2 to be as seamless as possible. That means breaking down barriers and giving customers easy access to the information they need. So, we’re building our own app view – a single pane of glass that pulls together data from all our services.

This is just the beginning. Soon, customers will be able to consume SEP2 services on demand with just a few clicks.

Insights from Our Cyber Security Service Delivery Review

John Cumiskey, Head of Information Security

2025 has been a year of real progress for Information Security at SEP2. We’ve expanded the breadth of services we deliver and deepened the impact they have on our customers’ security programmes. From enhancing threat intelligence to introducing new capabilities across our Wingman portfolio, we’ve focused on helping organisations build stronger, more resilient foundations for the future.

Expanding Wingman Services

This year, we increased the cadence of delivering multiple Wingman services to customers. I’m proud that we’ve been able to strengthen our technically-led services with consultancy around compliance and our vCISO offering – helping customers improve their security programmes from the ground up. A highlight has been introducing Wingman MDR Enhanced and Wingman Cloud, enabling us to deliver better outcomes across all our services.

Driving Threat Intelligence in MDR

Within our MDR service, we’ve taken a significant step forward by embedding more threat intelligence-driven outcomes through Wingman MDR Enhanced. Partnering with Google Threat Intelligence has been a real achievement, allowing us to accelerate threat hunting scenarios and support attribution hypotheses during incident investigations. These capabilities are already making a tangible difference for our customers.

By expanding our Wingman portfolio and embedding deeper threat intelligence into MDR, we’ve set a new standard for how we support organisations. The progress we’ve made this year gives us a solid foundation to build on, and I’m excited to see how we continue to raise the bar in 2026.

Leading With Purpose in 2025

Paul Starr, Co-Founder and CEO

Wingman Service Rebrand

In March 2025, SEP2 took a bold step to redefine how it delivered cyber security services. The new Wingman brand brought clarity, consistency, and depth to our core offerings. It reflected who SEP2 was, what we do best, and where we’re headed. This rebrand was not just cosmetic. It created a unified identity that strengthened partnerships, broadened engagement, and positioned SEP2 to lead in a market shaped by AI, automation, and evolving threats.

Making a Difference in Leeds

SEP2’s Charity Committee proudly partnered with Homeless Street Angels as our Charity of the Year, a local organisation committed to helping people move from the streets into safe, stable housing. From fundraising events and volunteer days to donation drives, our team has rallied behind their mission to eradicate homelessness in Leeds through fundraisers, volunteering their time, and donation food drives.

One standout moment? In September, we donated 16 sleeping bags through our Sleeping Bag Appeal, providing warmth and comfort to those who need it most.

Cyber School Initiative

Throughout the year, SEP2’s HQ in Leeds welcomed students from Bradford College, Roundhay School, Notre Dame Catholic Sixth Form College for our Cyber School sessions. Each event gave students a hands-on look at the industry through our three core PODS – Attack, Defend, Analyse – plus CV workshops, quizzes, and plenty of practical insight.

A special highlight was having guest speaker Arron Thundercliffe, Cyber Defence and Threat Intelligence at Google, who shared his career journey and inspired students with real-world perspectives on breaking into the industry. These sessions wouldn’t be possible without the dedication of Team SEP2, who make it all happen and I’m excited to see what they do in 2026.

Looking Forward

There’s so much on the horizon for SEP2 in 2026. Next year marks our 10th anniversary, the return of our third SEP2 Cyber Summit, and the continued evolution of our services (watch this space!) It’s set to be a year of important moments and steady progress, and I look forward to sharing each step with you.

2025 Cyber Security Service Delivery Review and What’s Ahead for 2026

Table of Contents