The collapse of Adarma, once one of the UK’s largest independent cyber security services providers, sent shockwaves through the industry in 2025. For a company that had built a strong reputation over more than fifteen years, its sudden move into administration raised uncomfortable questions about the pressures facing even well-established players in the cyber security sector.
Who Were Adarma?
Adarma was an Edinburgh-headquartered cyber security specialist, founded in 2009 and originally known as ECS Security before rebranding as Adarma in 2019 following a management buyout backed by private equity firm Livingbridge. The company grew to become one of the UK’s largest independent cyber threat management businesses, providing security operations centre (SOC) services, threat detection, incident response, and consulting to enterprise clients, including organisations in the FTSE 350 and other highly regulated sectors such as financial services and luxury goods.
At its peak, Adarma employed 176 staff, primarily at its Fountainbridge headquarters in Edinburgh, with an additional office in London and a number of remote workers. In October 2022, the company had received a £2 million grant from Scottish Enterprise intended to create more than 50 new cyber security roles, reflecting its status at the time as one of the sector’s notable growth stories.
The Collapse
In July 2025, Adarma filed for administration and ceased trading almost immediately, resulting in the sudden redundancy of 173 of its 176 staff, with only a handful of senior managers remaining to assist administrators with winding down the business. Joint administrators Will Wright and Alistair McAlinden of Interpath Advisory were appointed to oversee the process.
According to the administrators, Adarma had faced sustained margin and cashflow pressures that ultimately proved insurmountable, compounded by intense competition, rising operational costs, and a continual need for further investment in the business. Private equity backer Livingbridge withdrew its support shortly before the administration, having previously invested in the company through its 2019 management buyout. The company’s directors had reportedly pursued a formal sale process in an effort to secure fresh investment or a buyer, but this failed to produce a viable outcome before the business ran out of options.
Impact on Staff
The sudden nature of the collapse left many employees without notice or unpaid wages, with reports at the time citing more than 100 workers affected. Thompsons Solicitors Scotland subsequently represented a number of the affected employees, pursuing claims for a protective award — additional compensation available to employees who are made redundant without the legally required consultation period. Administrators stated they were working with affected staff to support the redundancy process, including assistance with applications to the Redundancy Payments Office.
What the Collapse Signals for the Cyber Security Sector
Adarma’s failure was notable not just for its scale, but because it happened to a company widely regarded as an established and reputable player in UK cyber security — not a struggling startup. Industry commentary at the time linked the collapse, alongside the separate failure of Crossword Cybersecurity, to broader questions about the sustainability of mid-sized, independent cyber security service providers in a market experiencing rapid consolidation, as larger players make major acquisitions and smaller firms face intensifying competition and rising costs.
Lessons for Businesses Choosing a Security Provider
The collapse serves as a reminder that even well-regarded, established cyber security providers can face sudden financial difficulty. Organisations relying on outsourced security services, particularly managed SOC or incident response providers, may want to consider factors such as a provider’s financial stability, contingency and business continuity arrangements, and contractual protections in the event a supplier suddenly ceases trading, alongside the more familiar considerations of service quality and technical capability.
Final Thoughts
Adarma’s collapse into administration in July 2025 marked the sudden end of a business that had spent over fifteen years building a reputation as one of the UK’s leading independent cyber security firms. The episode highlights the intense financial pressures facing the sector even among established providers, and offers a cautionary lesson for any organisation evaluating the resilience, not just the capability, of its cyber security partners.