
The Forum of Incident Response and Security Teams (FIRST) has been connecting security teams since 1990. Today it brings together more than 700 teams across over 100 countries — from national CERTs and government agencies to MSSPs, financial institutions, and technology companies.
FIRST membership signals that your team meets a recognised standard of incident response maturity and trustworthiness. It gives you access to a trusted community where teams share intelligence, coordinate on incidents, and learn from each other’s experience. For many organisations, FIRST membership is a meaningful credential that demonstrates your commitment to professional security operations.

We take a methodical approach to FIRST membership — starting with a clear picture of where your team stands today, then working with you to close the gaps before you apply. This means your application is well-prepared and your team genuinely benefits from the process, not just the credential.
We assess your team against the Security Incident Management Maturity Model (SIM3) — the same framework FIRST uses to evaluate applicants. This gives you a clear, structured baseline across organisation, human, tools, and processes so you know exactly where you stand and what needs attention.
Based on the gap analysis, we work with your team to address the areas that need improvement. This might include documenting incident response procedures, clarifying team roles, improving tooling, or strengthening your information-sharing practices. We focus on practical changes that improve your operations — not just ticking boxes.
Once improvements are in place, we run a second SIM3 assessment to confirm your team is ready to apply. This gives you confidence that your application will stand up to scrutiny and that your team genuinely meets the maturity standards FIRST expects.
We help you prepare and submit your FIRST membership application, drawing on our experience with the process and our relationships within the FIRST community. We guide you through the application requirements, help you present your team’s capabilities clearly, and support you through to acceptance.


FIRST (Forum of Incident Response and Security Teams) is the world’s largest community of incident response teams. Founded in 1990, it connects more than 700 teams across over 100 countries — including national CERTs, government agencies, financial institutions, technology companies, and managed security service providers.
FIRST provides a trusted environment for member teams to share threat intelligence, coordinate incident response, develop standards, and learn from each other. It also runs the annual FIRST Conference, one of the most respected defender-oriented security events globally.
FIRST membership is for organisations that operate a security incident response team — whether that’s a CSIRT, SOC, PSIRT, or MSSP. Membership gives your team access to trusted intelligence-sharing channels, collaboration with peers worldwide, training and workshops, and participation in Special Interest Groups that develop the standards and frameworks used across the industry.
It also signals to your stakeholders, customers, and partners that your team meets a recognised standard of incident response maturity.
FIRST membership gives your team access to resources and relationships that are difficult to build on your own. You get access to the FIRST MISP server for shared threat intelligence, discounted access to the annual FIRST Conference, and the ability to collaborate directly with experienced incident response teams from around the world.
Beyond the practical benefits, FIRST membership is a credential that demonstrates your organisation’s commitment to professional security operations. It can strengthen your position with regulators, partners, and customers who want assurance that your security team operates to an international standard.
You absolutely can apply on your own — and some teams do successfully. But the FIRST application process involves a structured maturity assessment, and applications are evaluated against specific criteria that aren’t always obvious from the outside. Teams that go in without preparation sometimes find their application takes longer than expected, or they discover gaps they didn’t anticipate.
Working with us gives you the advantage of experience. We’ve been through the process, we understand what FIRST evaluators look for, and we can help you avoid common pitfalls. The SIM3 gap analysis we do upfront also delivers genuine operational improvements — so even before you submit your application, your team is already stronger.

Tell us about your organisation and where you are in the FIRST application process.
Pipedrive form will go here.