Fox-IT
Corporate brand
UnclaimedFox-IT is a Dutch information-security company focused on digital forensics, penetration testing, cryptography, and incident response.
Last updated August 25, 2026
AI crawler reads
No AI crawler has read this profile yet.
Overview
Fox-IT is a Dutch information-security company established in 1999 and associated particularly with digital forensics, penetration testing, cryptography, and investigations of serious cyber incidents. The company has served as an important adviser to the government of the Netherlands, reflecting its position at the intersection of commercial cybersecurity and national digital-security work. A significant early development was Fox-IT's partial acquisition in 2003 of Philips-Crypto, an independent cryptography business within Philips. This expanded Fox-IT's capabilities beyond investigative and advisory work into cryptographic technologies and secure communications. Between 2007 and 2011, the company promoted its technology in Middle Eastern markets, indicating an effort to extend its reach beyond the Dutch market. Fox-IT became closely associated with high-profile Dutch cybersecurity events. In 2011, it investigated the compromise of DigiNotar, a Dutch certificate authority whose failure had major consequences for trust in digital certificates and which subsequently ceased operations. The same year, Fox-IT sold Fox Replay Analyst, a technology associated with network analysis, to NetScout Systems. In 2015, Fox-IT's founders sold the company to NCC Group, an international cybersecurity and assurance group. Under NCC Group ownership, Fox-IT remained a recognizable specialist brand within the broader group, retaining its connection with advanced cyber investigations and government-facing security work. The acquisition also placed Fox-IT's services and technologies within a wider international cybersecurity portfolio. In 2022, Fox-IT released incident-response software under an open-source license. This represented a move toward making at least part of its response tooling available for broader inspection, use, and collaboration rather than keeping all capabilities exclusively proprietary. In 2024, the company sold its cryptographic subsidiary, Fox Crypto, to CR Group. Following the transaction, Fox Crypto was renamed Sentyron, separating that cryptographic business from the Fox-IT brand. Fox-IT's brand position is therefore built around specialist expertise rather than mass-market cybersecurity products. Its historical scope has included forensic investigation, penetration testing, cryptographic technology, incident response, and security advice for public-sector and enterprise customers. The company remains part of NCC Group, while the divestment and renaming of Fox Crypto marked a change in the boundaries of the Fox-IT business.
History
Fox-IT was founded in the Netherlands in 1999 as an information-security company. Its original and continuing identity has centered on specialist cyber expertise, particularly digital forensics and penetration testing. Rather than operating as a consumer antivirus or general-purpose technology brand, Fox-IT developed a profile as a provider of investigative, advisory, and high-assurance security capabilities. The company became an important adviser to the Dutch government. In 2003, Fox-IT partially acquired Philips-Crypto, an independent cryptography company operating within Philips. This transaction broadened Fox-IT's technical scope and gave the company a stronger position in cryptographic security. From 2007 through 2011, Fox-IT promoted its technology in Middle Eastern countries, demonstrating an effort to commercialize its capabilities internationally. The company gained heightened visibility in 2011 through its investigation of the DigiNotar hack. DigiNotar was a Dutch certificate authority, and the breach undermined confidence in certificates issued by the organization. DigiNotar subsequently became defunct. Fox-IT's role in examining the incident reinforced its reputation for handling complex and consequential cyber investigations. Also in 2011, Fox-IT sold Fox Replay Analyst to NetScout Systems, separating that technology from its own portfolio. A major ownership transition occurred in 2015, when Fox-IT's founders sold the company to NCC Group. The acquisition integrated Fox-IT into a larger cybersecurity and assurance organization while preserving Fox-IT as a specialist brand. Its activities continued to be associated with digital forensics, penetration testing, government advice, cryptography, and incident response. In 2022, Fox-IT released incident-response software under an open-source license. The release broadened access to part of the company's incident-response tooling and represented a more open distribution model for a cybersecurity capability. In 2024, Fox-IT sold its cryptographic subsidiary, Fox Crypto, to CR Group. After the sale, Fox Crypto was renamed Sentyron, marking a separation between that business and the Fox-IT name. The documented evolution of Fox-IT shows a company moving from a Dutch specialist security practice toward a broader portfolio of forensic, offensive-security, cryptographic, and incident-response capabilities, followed by integration into NCC Group and later portfolio restructuring. Its brand remains associated with high-sensitivity cyber investigations and professional security services rather than with consumer-facing products.
- 2024
Fox Crypto sold and renamed
[1]CR Group acquired Fox Crypto, which was subsequently renamed Sentyron.
- 2022
Incident-response software released as open source
[1]Fox-IT released incident-response software under an open-source license.
- 2015
Acquired by NCC Group
[1]Fox-IT's founders sold the company to NCC Group.
- 2011
DigiNotar investigation
[1]Fox-IT investigated the compromise of Dutch certificate authority DigiNotar.
- 2011
Fox Replay Analyst divested
[1]Fox-IT sold Fox Replay Analyst to NetScout Systems.
- 2007
Technology promotion begins in Middle Eastern markets
[1]Fox-IT promoted its technology in Middle Eastern countries during the period from 2007 to 2011.
- 2003
Partial acquisition of Philips-Crypto
[1]Fox-IT partially acquired Philips-Crypto, an independent cryptography company within Philips.
- 1999
Fox-IT founded
[1]Fox-IT was established in the Netherlands as an information-security company.
Products and positioning
A specialist cybersecurity and information-security brand serving government and other high-assurance customers through digital forensics, penetration testing, incident response, cryptography, and cyber investigations.
Cybersecurity services
Digital forensics
Digital forensics is one of Fox-IT's core areas. The company investigates digital incidents and analyzes evidence relevant to cyberattacks, compromised systems, and other security events. This capability has supported its role as an adviser to the Dutch government and underpinned its involvement in high-profile investigations such as the DigiNotar compromise.
Cybersecurity services
Penetration testing
Fox-IT provides penetration-testing expertise as part of its information-security portfolio. The service is intended to identify weaknesses in systems and environments through authorized security testing. It complements the company's forensic and advisory work and reflects its positioning as a specialist provider for organizations with demanding security requirements.
Network analysis software
Fox Replay Analyst
Fox Replay Analyst was a Fox-IT technology associated with network analysis. Fox-IT sold the product to NetScout Systems in 2011, so it is no longer documented as a Fox-IT offering after that transaction.
Cryptographic technology
Fox Crypto
Fox Crypto was Fox-IT's cryptographic subsidiary and was linked to the company's expanded cryptography capabilities following its partial acquisition of Philips-Crypto in 2003. Fox-IT sold the subsidiary to CR Group in 2024, after which it was renamed Sentyron.
Incident-response software · 2022
Incident-response software
Fox-IT released incident-response software under an open-source license in 2022. The available reference material does not identify the software by product name or specify its full feature set, but the release reflects Fox-IT's work in tooling for cyber-incident investigation and response.
Brand decisions
2024
Divestment of Fox CryptoM&ABackground
Fox-IT restructured the boundaries of its cryptographic business.
Action taken
Fox-IT sold Fox Crypto to CR Group, and the subsidiary was renamed Sentyron.
Aftermath
The cryptographic business became separate from the Fox-IT brand under new ownership and a new name.
2022
Open-source release of incident-response softwareStrategyBackground
Fox-IT made an incident-response capability available beyond a strictly proprietary distribution model.
Action taken
The company released incident-response software under an open-source license.
Aftermath
The release enabled broader access to the software, although the available reference does not specify adoption or commercial results.
2015
Sale to NCC GroupM&ABackground
Fox-IT's founders decided to transfer ownership of the cybersecurity company.
Action taken
The founders sold Fox-IT to NCC Group.
Aftermath
Fox-IT became a subsidiary of NCC Group while continuing as a specialist cybersecurity brand.
2011
Sale of Fox Replay AnalystOtherBackground
Fox-IT owned Fox Replay Analyst, a technology associated with network analysis.
Action taken
Fox-IT sold Fox Replay Analyst to NetScout Systems.
Aftermath
The product left Fox-IT's portfolio and became associated with NetScout Systems.
2003
Partial acquisition of Philips-CryptoM&ABackground
Fox-IT sought to expand its information-security capabilities into cryptography through a transaction involving Philips-Crypto.
Action taken
Fox-IT partially acquired Philips-Crypto, an independent cryptography company within Philips.
Aftermath
The transaction strengthened the cryptographic dimension of Fox-IT's technology portfolio.
Recent events
Reported
Foxit to acquire eSign Genie[2]
eSign Genie announced that it had agreed to be acquired by Foxit.
- Unconfirmed
Foxit releases version 9.7.2 to fix software vulnerabilities[3]
Foxit released version 9.7.2 to fix vulnerabilities affecting Foxit Reader and PhantomPDF; the article reports that some could allow remote code execution.
Sources3 sources
Cite this profile: Cite the canonical profile. /brand-wiki/fox-it · Editorial policy · How profiles are compiled