Founder Spotlight: Chris Eastwood & Alistair Kennedy, The Rybec Group — Cyber Runway

Founder Spotlight: Chris Eastwood & Alistair Kennedy, The Rybec Group — Cyber Runway

This is the third in a short series of conversations with founders and key players from Cyber Runway Grow, a UK government-backed accelerator for cybersecurity startups. As we near the end of the program, I wanted to take the time to highlight some of the incredible companies and, more importantly, the people behind them.

I can only slightly relate to Chris and Alistair’s journey. While my career took me deep into threat intelligence and cybersecurity, I actually started in digital forensics, working closely with police services. In the early days, I helped local and state police handle digital evidence and, later on, had the opportunity to work with international enforcement agencies on several occasions (though those stories are for another time).

Chris and Alistair, however, didn’t just work alongside law enforcement — they were law enforcement. And their transition from cybercrime police officers to cybersecurity entrepreneurs is one of the more unique and impactful stories to come out of this year’s Cyber Runway Grow program.

From Fighting Cybercrime to Educating and Protecting Businesses

Unlike many founders who enter cybersecurity from a technical or corporate background, Chris Eastwood and Alistair Kennedy spent years in the trenches of law enforcement, working in cybercrime units across the UK. They saw cyber threats not from the outside looking in but from the perspective of the investigators tracking down the criminals behind them.

When they retired early, they didn’t have a clear business plan. “We didn’t leave the police thinking, ‘let’s start a company,’” Alistair told me. “It was more like… let’s figure out what’s next. But we knew there was a gap that needed to be filled.”

That gap was education and prevention.

While in the force, they spent a significant amount of time doing outreach and education — warning businesses about cybersecurity risks and working with young people at risk of crossing into cybercrime. But over time, they saw police cyber engagement decline. There simply weren’t enough resources.

“The police just stopped doing it,” Chris said. “I don’t want to sound like I’m bashing law enforcement, but after COVID, it was like cybersecurity education and engagement just disappeared. No one was going out and warning businesses, no one was talking to schools. That’s when we decided — if they’re not doing it, we will.”

And just like that, The Rybec Group was born.

Building a Cybersecurity Startup (With No Business Background)

One thing that makes Rybec’s journey different from many startups in the cybersecurity space is that Chris and Alistair didn’t have a background in business. They were experts in cybercrime, investigations, and compliance — but running a company? That was a whole different challenge.

“The startup ecosystem in the UK is actually great,” Alistair admitted. “There’s a lot of support, a lot of funding, but you have to know where to look.”

The founders’ first exposure into startup life began with an introduction to Barclays Eagle Labs, which led them to join the Greater Manchester Digital Security Hub (DiSH) accelerator program — run collaboratively by Barclays Eagle Labs, Plexal, and Manchester City Council — where they connected with founders at various stages of their journeys. I can personally attest to the impact of the Barclays Eagle Labs program on early-stage success.

But unlike some early-stage startups, Rybec was completely bootstrapped.

“We put our own pensions into this,” Chris said. “There’s no outside funding. So every pound we spend has to be thought through. We had to build the company with strong foundations, minimal costs, and a focus on sustainable growth.”

They started with education-focused work, doing cybersecurity awareness training in schools. Their first job? A free cybersecurity awareness session for teachers.

That first session quickly turned into a paying contract with a group of schools, and from there, they expanded into governance, risk, and compliance (GRC), ISO 27001 certification, and cybersecurity audits.

Their ability to bridge the gap between law enforcement and business security needs set them apart.

“We know how cybercriminals think,” Alistair explained. “We’ve worked cases involving kids as young as 9 hacking school systems and teenagers getting groomed by cybercriminal groups. Businesses don’t often see that side of things — but we do, and we bring that experience into our work.”

Lessons from Cyber Runway

For Rybec, Cyber Runway Grow wasn’t about learning cybersecurity — it was about growing as a business.

“We already had a clear direction, but Cyber Runway helped us refine our strategy and, most importantly, expand our network,” Alistair said.

Chris pointed out that the most valuable takeaway wasn’t necessarily the structured sessions, but rather the connections made within the cohort.

“You get out what you put in,” he said. “Some companies come in full of energy and engagement, and by the end, they’re gone. You can’t just sit back and expect things to happen — you have to be proactive.”

Would they recommend Cyber Runway to other startups?

“Yes — but go in knowing what you want to get out of it. And be prepared for the time commitment,” Alistair added.

What’s Next for Rybec?

Since resolving some early business challenges (including a difficult founder departure that nearly derailed the company), Rybec has been on a steep growth trajectory.

• They broke the £100,000 turnover mark last year — doubling their first-year revenue.

• They are targeting 5x growth in the coming year.

• They’re expanding their ISO 27001 and compliance services while keeping education as a core mission.

But the next big goal? Building a proper team.

“Right now, it’s mostly us and a few subcontractors,” Alistair said. “We need to grow to the point where we have a full management team, dedicated staff, and the ability to scale without stretching ourselves too thin.”

In the broader cybersecurity landscape, they see compliance becoming more critical than ever.

“As AI, quantum computing, and emerging threats evolve, governance and risk management will become a bigger priority for businesses,” Alistair explained. “With new regulations like the Cyber Resilience Act and DORA coming into effect, companies won’t have a choice — they’ll need to get serious about security and compliance.”

And Rybec plans to be at the forefront of that shift.

Chris and Alistair’s transition from cybercrime investigators to cybersecurity entrepreneurs is a perfect example of how real-world experience translates into impactful business solutions.

Rybec isn’t just another compliance consultancy — it’s a company built by people who have seen the full spectrum of cybersecurity threats firsthand. They’re not just advising businesses on security — they’re applying decades of investigative knowledge to protect them.

With a strong mission, growing momentum, and a unique perspective on cybersecurity, The Rybec Group is a company to watch in the coming years.

📍 Want to follow Rybec’s journey? Website LinkedIn