Slide 1: Interim Results
Interim Results Unaudited H1 results to 31 March 2026 11 June 2026 Together we're creating a more secure digital future NCC Group classification: Public
Slide 2: Highlights
Highlights • Escode sale completed on 29 May 2026, and NCC is now a pure-play Cyber business. • Strategic review of the Cyber business is now complete • The Board intends to commence a £170m tender offer followed by a new £15m share buy-back subject to due process to create sufficient distributable
Slide 3: H1 2026 key takeaways
H1 2026 key takeaways Mike Maddison Chief Executive Officer NCC Group plc classification: Public
Slide 4: From historic complexity to focus
From historic complexity to focus Strategic inflexion point The pivot Driving growth 2023 to 2024 2024 to 2025 2026+ Recognising the need to Portfolio and operational reset Transition to pure-play Cyber simplify and refocus the Group Divesting non-core assets, Simplifying the business, aligning the
Slide 5: Structural tailwinds
Structural tailwinds The accelerating pace of digital transformation has proliferated security- related challenges, increasing demand for outsourced security teams Ongoing digitisation (including AI) expands Geopolitics and the Increasing regulation, the attack surface age of “unreliability” oversig
Slide 6: AI is a disruptor but also an opportunity
AI is a disruptor but also an opportunity AI creates more opportunity than risk for NCC Group Cyber will disrupt industry players AI is an opportunity to build AI creates new vulnerabilities who have a one-dimension offering efficiency, speed and add scale. and the opportunity for provide or commodi
Slide 7: AI: where insight leads innovation
AI: where insight leads innovation 2. Informing and influencing Government policy direction 1. Cutting edge client services 3. Deep AI discovery, delivered to build resilience vulnerability and Insight, exploit research intelligence and influence on AI 5. Technical thought leadership 4. Go-to expert
Slide 8: NCC today
NCC today Shaping cyber security solutions for the world’s leading companies and governments Full-cycle cyber services coverage - one partner Client focus delivering global, end-to-end protection hnical assurance Tec Deep technical knowledge of security vulnerabilities in complex and highly regulate
Slide 9: Pathway to strategic partner
Pathway to strategic partner The pathway to turn client’s compliance spending into high-value strategic partnerships and unlock greater wins 20x revenue 4x revenue Embed Becoming a strategic partner and 1x revenue Elevate part of the client’s core DNA Establish Elevating value and footprint across t
Slide 10: 1-4-20: Scaling client value and deepening relationships
1-4-20: Scaling client value and deepening relationships Our Cyber solutions …with a clear history …a fast cover multiple of expanding and growing Managed … with long-term retention verticals… cross-selling across clients Services offering 85% FY26 (H1) cyber revenue Top 20 Accounts average Managed
Slide 11: The sales strategy shifted revenue momentum in every market and capability
The sales strategy shifted revenue momentum in every market and capability H1 FY26 YOY% Revenue Revenue £m FY25 H1 FY26 73.9 (0.6%) +12.5% UK & APAC 25.0 North America (12.9%) (8.1%) 19.5 Europe (0.5%) +3.2% 45.0 Technical Assurance Services (15.0%) +0.2% 40.0 Managed Services +2.8% +4.7% 26.1 Consu
Slide 12: Adapting to a different dynamic in North America
Adapting to a different dynamic in North America NA Revenue Mix (in millions GBP) 40.0 • Structural shift in North America 35.0 technology demand 5.0 • Impact concentrated in large 30.0 4.3 2.8 3.3 4.3 technology clients 25.0 5.0 2.9 4.1 8.5 • Broader client base more stable 7.7 3.4 20.0 2.9 6.4 5.1
Slide 13: An enviable reputation and recognised for it
An enviable reputation and recognised for it Awards and recognition Government Affairs • Security Excellence Awards 2026 • Reform of Computer Misuse Act to introduce • PICASSO awards legal protections for cyber professionals, a huge • PRCA Public Affairs Awards success for NCC Group’s long running c
Slide 14: Financial Review
Financial Review Guy Ellis Chief Financial Officer NCC Group plc classification: Public
Slide 15: Group financial summary excluding Fox Crypto
Group financial summary excluding Fox Crypto LFL1 Revenue LFL1 Gross margin % LFL1 Adjusted EBITDA 5.0% constant +2.7% pts 27.7% increase currency increase +£6.8m +£5.1m +£7.2m LFL1 Operating profit LFL1 Profit Before Tax Net debt 101.7% increase 328.0% increase (£10.2m) +£6.0m +£8.2m 15 NCC Group p
Slide 16: Group income statement highlights
Group income statement highlights 1 Unaudited results to 31 March 2026 6-months to 6-months to • Continued growth in core Cyber revenues Actual rates 31 March 2026 31 March 2025 % change (£m) (£m) reflects improving commercial momentum Revenue 151.3 145.3 4.1% Gross Profit 69.5 62.7 10.8% • Margin p
Slide 17: FY26 Cyber financial framework
FY26 Cyber financial framework Scale Strengthen Simplify Creating Value • Growth in key accounts • Increase % of recurring • Leverage global delivery • EBITDA margin and reoccurring revenue model and AI to drive consistent with peers • Like for like growth in utilisation and revenue established mark
Slide 18: Cyber Security LFL Revenue and Adjusted EBITDA
Cyber Security LFL Revenue and Adjusted EBITDA 1 Unaudited H1 period ended 31 March 2026 Like for Like Revenue by region 2 H1 2026 regional half-on-half constant Trajectory currency like-for-like growth Constant currency • Return to revenue growth driven by UK & APAC & Europe UK & APAC +12.5% North
Slide 19: Cyber Security LFL revenue by capability
Cyber Security LFL revenue by capability Unaudited H1 period ended 31 March 2026 LFL Revenue by capability H1 2026 capability half-on-half Enriched and growing revenue Constant currency constant currency LFL growth TAS +0.2% • Continuing to see a shift of revenue mix C&I +19.7% towards Consulting &
Slide 20: Escode revenue and adjusted EBITDA
Escode revenue and adjusted EBITDA Unaudited H1 period ended 31 March 2026 H1 2026 regional half-on-half Revenue by region constant currency growth Revenue by service line H1 2026 regional service line half-on-half constant Constant currency UK - Constant currency currency growth North America +3.3%
Slide 21: Net debt (exc. lease liabilities)
Net debt (exc. lease liabilities) Net debt arises due to share buyback programme, and improved significantly post period end following the Escode completion 40.0 300.0 20.3 30.0 (1.7) 250.0 0.0 262.8 230.0 (3.3) (1.4) (0.5) 20.0 (2.1) (6.5) 200.0 13.1 Net debt (£m) 10.0 Net debt (£m) 150.0 0.0 100.0
Slide 22: Analyst guidance
Analyst guidance • Escode proceeds and accounting treatment • Net proceeds £252.8m (including costs of c£10m) • H2 below the line gain on disposal from Escode sale • Capital reduction process commenced – facilitates the return £185m to shareholders, £170m via Tender Offer and £15m via a subsequent s
Slide 23: Summary and outlook
Summary and outlook Mike Maddison Chief Executive Officer 23 NCC Group plc classification: Public
Slide 24: Our investment case
Our investment case Creating value for all stakeholders We are a focused, Large, durable, Structural A scalable Clear value pure-play cyber non-discretionary differentiation built go-to-market upside from business - the market demand on expertise, IP model driving mix, execution, margin reset is com
Slide 25: Activity plan
Activity plan Scale Strengthen Simplify Creating Value • North America • Managed Services • Simplification of • Tender Offer sales automation back-office £170m transformation • Expanding AI into processes • £15m share buy • NCC Select more aspects of • Escode separation back Programme delivery such
Slide 26: Outlook
Outlook • The Board anticipates mid to low single-digit Cyber Security revenue growth for the full year ending 30 September 2026 as pipeline continues to build • FY26 Group Adjusted EBITDA is expected to be in line with the Board’s expectations and is anticipated to grow faster than revenue, resulti
Slide 27: Questions
Questions
Slide 28: Disclaimer
Disclaimer This presentation, including a hard copy of these slides, the talks given by the presenters, the information communicated during any delivery of the presentation and any question and answer session and any document or material distributed at or in connection with the presentation (togethe