Fox-IT

Fox-IT is a Dutch information-security company established in 1999 and associated particularly with digital forensics, penetration testing, cryptography, and investigations of serious cyber incidents. The company has served as an important adviser to the government of the Netherlands, reflecting its position at the intersection of commercial cybersecurity and national digital-security work. A significant early development was Fox-IT's partial acquisition in 2003 of Philips-Crypto, an independent cryptography business within Philips. This expanded Fox-IT's capabilities beyond investigative and advisory work into cryptographic technologies and secure communications. Between 2007 and 2011, the company promoted its technology in Middle Eastern markets, indicating an effort to extend its reach beyond the Dutch market. Fox-IT became closely associated with high-profile Dutch cybersecurity events. In 2011, it investigated the compromise of DigiNotar, a Dutch certificate authority whose failure had major consequences for trust in digital certificates and which subsequently ceased operations. The same year, Fox-IT sold Fox Replay Analyst, a technology associated with network analysis, to NetScout Systems. In 2015, Fox-IT's founders sold the company to NCC Group, an international cybersecurity and assurance group. Under NCC Group ownership, Fox-IT remained a recognizable specialist brand within the broader group, retaining its connection with advanced cyber investigations and government-facing security work. The acquisition also placed Fox-IT's services and technologies within a wider international cybersecurity portfolio. In 2022, Fox-IT released incident-response software under an open-source license. This represented a move toward making at least part of its response tooling available for broader inspection, use, and collaboration rather than keeping all capabilities exclusively proprietary. In 2024, the company sold its cryptographic subsidiary, Fox Crypto, to CR Group. Following the transaction, Fox Crypto was renamed Sentyron, separating that cryptographic business from the Fox-IT brand. Fox-IT's brand position is therefore built around specialist expertise rather than mass-market cybersecurity products. Its historical scope has included forensic investigation, penetration testing, cryptographic technology, incident response, and security advice for public-sector and enterprise customers. The company remains part of NCC Group, while the divestment and renaming of Fox Crypto marked a change in the boundaries of the Fox-IT business.

Fox-IT was founded in the Netherlands in 1999 as an information-security company. Its original and continuing identity has centered on specialist cyber expertise, particularly digital forensics and penetration testing. Rather than operating as a consumer antivirus or general-purpose technology brand, Fox-IT developed a profile as a provider of investigative, advisory, and high-assurance security capabilities. The company became an important adviser to the Dutch government. In 2003, Fox-IT partially acquired Philips-Crypto, an independent cryptography company operating within Philips. This transaction broadened Fox-IT's technical scope and gave the company a stronger position in cryptographic security. From 2007 through 2011, Fox-IT promoted its technology in Middle Eastern countries, demonstrating an effort to commercialize its capabilities internationally. The company gained heightened visibility in 2011 through its investigation of the DigiNotar hack. DigiNotar was a Dutch certificate authority, and the breach undermined confidence in certificates issued by the organization. DigiNotar subsequently became defunct. Fox-IT's role in examining the incident reinforced its reputation for handling complex and consequential cyber investigations. Also in 2011, Fox-IT sold Fox Replay Analyst to NetScout Systems, separating that technology from its own portfolio. A major ownership transition occurred in 2015, when Fox-IT's founders sold the company to NCC Group. The acquisition integrated Fox-IT into a larger cybersecurity and assurance organization while preserving Fox-IT as a specialist brand. Its activities continued to be associated with digital forensics, penetration testing, government advice, cryptography, and incident response. In 2022, Fox-IT released incident-response software under an open-source license. The release broadened access to part of the company's incident-response tooling and represented a more open distribution model for a cybersecurity capability. In 2024, Fox-IT sold its cryptographic subsidiary, Fox Crypto, to CR Group. After the sale, Fox Crypto was renamed Sentyron, marking a separation between that business and the Fox-IT name. The documented evolution of Fox-IT shows a company moving from a Dutch specialist security practice toward a broader portfolio of forensic, offensive-security, cryptographic, and incident-response capabilities, followed by integration into NCC Group and later portfolio restructuring. Its brand remains associated with high-sensitivity cyber investigations and professional security services rather than with consumer-facing products.

1. 2024Fox Crypto sold and renamed

   CR Group acquired Fox Crypto, which was subsequently renamed Sentyron.

   Source
2. 2022Incident-response software released as open source

   Fox-IT released incident-response software under an open-source license.

   Source
3. 2015Acquired by NCC Group

   Fox-IT's founders sold the company to NCC Group.

   Source
4. 2011DigiNotar investigation

   Fox-IT investigated the compromise of Dutch certificate authority DigiNotar.

   Source
5. 2011Fox Replay Analyst divested

   Fox-IT sold Fox Replay Analyst to NetScout Systems.

   Source
6. 2007Technology promotion begins in Middle Eastern markets

   Fox-IT promoted its technology in Middle Eastern countries during the period from 2007 to 2011.

   Source
7. 2003Partial acquisition of Philips-Crypto

   Fox-IT partially acquired Philips-Crypto, an independent cryptography company within Philips.

   Source
8. 1999Fox-IT founded

   Fox-IT was established in the Netherlands as an information-security company.

   Source

A specialist cybersecurity and information-security brand serving government and other high-assurance customers through digital forensics, penetration testing, incident response, cryptography, and cyber investigations.

• Digital forensicsCybersecurity services

  Digital forensics is one of Fox-IT's core areas. The company investigates digital incidents and analyzes evidence relevant to cyberattacks, compromised systems, and other security events. This capability has supported its role as an adviser to the Dutch government and underpinned its involvement in high-profile investigations such as the DigiNotar compromise.

• Penetration testingCybersecurity services

  Fox-IT provides penetration-testing expertise as part of its information-security portfolio. The service is intended to identify weaknesses in systems and environments through authorized security testing. It complements the company's forensic and advisory work and reflects its positioning as a specialist provider for organizations with demanding security requirements.

• Fox Replay AnalystNetwork analysis software

  Fox Replay Analyst was a Fox-IT technology associated with network analysis. Fox-IT sold the product to NetScout Systems in 2011, so it is no longer documented as a Fox-IT offering after that transaction.

• Fox CryptoCryptographic technology

  Fox Crypto was Fox-IT's cryptographic subsidiary and was linked to the company's expanded cryptography capabilities following its partial acquisition of Philips-Crypto in 2003. Fox-IT sold the subsidiary to CR Group in 2024, after which it was renamed Sentyron.

• Incident-response softwareIncident-response software2022

  Fox-IT released incident-response software under an open-source license in 2022. The available reference material does not identify the software by product name or specify its full feature set, but the release reflects Fox-IT's work in tooling for cyber-incident investigation and response.

• 2024Divestment of Fox CryptoM&A

  Fox-IT restructured the boundaries of its cryptographic business.

  What changed. Fox-IT sold Fox Crypto to CR Group, and the subsidiary was renamed Sentyron.

  Aftermath. The cryptographic business became separate from the Fox-IT brand under new ownership and a new name.

  Source
• 2022Open-source release of incident-response softwareStrategy

  Fox-IT made an incident-response capability available beyond a strictly proprietary distribution model.

  What changed. The company released incident-response software under an open-source license.

  Aftermath. The release enabled broader access to the software, although the available reference does not specify adoption or commercial results.

  Source
• 2015Sale to NCC GroupM&A

  Fox-IT's founders decided to transfer ownership of the cybersecurity company.

  What changed. The founders sold Fox-IT to NCC Group.

  Aftermath. Fox-IT became a subsidiary of NCC Group while continuing as a specialist cybersecurity brand.

  Source
• 2011Sale of Fox Replay AnalystOther

  Fox-IT owned Fox Replay Analyst, a technology associated with network analysis.

  What changed. Fox-IT sold Fox Replay Analyst to NetScout Systems.

  Aftermath. The product left Fox-IT's portfolio and became associated with NetScout Systems.

  Source
• 2003Partial acquisition of Philips-CryptoM&A

  Fox-IT sought to expand its information-security capabilities into cryptography through a transaction involving Philips-Crypto.

  What changed. Fox-IT partially acquired Philips-Crypto, an independent cryptography company within Philips.

  Aftermath. The transaction strengthened the cryptographic dimension of Fox-IT's technology portfolio.

  Source

• 2024Fox Crypto sold and renamed Sentyron

  Fox-IT sold its cryptographic subsidiary Fox Crypto to CR Group. The business was subsequently renamed Sentyron.

  M&ALeadership change
  Source
• 2022Fox-IT releases incident-response software under an open-source license

  Fox-IT made incident-response software available under an open-source license.

  Product launch
  Source
• 2015Fox-IT acquired by NCC Group

  The founders of Fox-IT sold the company to NCC Group, making Fox-IT part of a larger international cybersecurity group.

  M&A
  Source
• 2011Fox-IT investigates the DigiNotar compromise

  Fox-IT conducted an investigation into the hack of DigiNotar, a Dutch certificate authority that later went out of business.

  Other
  Source
• 2011Fox Replay Analyst sold to NetScout Systems

  Fox-IT sold Fox Replay Analyst, a network-analysis technology, to NetScout Systems.

  M&A
  Source

1. Fox-IT