Active Cyber Defence Programme - Sixth Year Report
Summary
The UK's National Cyber Security Centre has published the sixth-year report on its Active Cyber Defence (ACD) programme. The report details findings on how the programme has protected the UK from cyber attacks since its launch in 2017.
What changed
The National Cyber Security Centre (NCSC) has released its sixth-year report on the Active Cyber Defence (ACD) programme. This report, published on July 6, 2023, provides key findings and a full analysis of the programme's performance in its sixth year of operation. The ACD programme, launched in 2017, aims to automate protection against a significant proportion of commodity cyber attacks for the majority of UK citizens.
This document serves as an informational notice for cyber security professionals, public sector entities, and organisations of all sizes. It highlights the ongoing efforts and successes of the ACD programme. While no immediate compliance actions are mandated by this report, it provides valuable insights into the UK's cyber defence strategy and the effectiveness of automated protective measures. Regulated entities are encouraged to review the findings to understand the evolving cyber threat landscape and NCSC's approach to national cyber security.
Source document (simplified)
Report Download & print article PDF
ACD - The Sixth Year
Key findings and full report from the 6th year of the Active Cyber Defence (ACD) programme.
The aim of Active Cyber Defence (ACD) is to “Protect the majority of people in the UK from the majority of the harm caused by the majority of the cyber attacks the majority of the time.” It was launched in 2017 and continues to protect the UK, in a relatively automated way, from a significant proportion of commodity cyber attacks.
The full report and a summary from the sixth year of the NCSC's ACD programme can be found in the Downloads section of this page.
Downloads
- 1.16 MB
ACD The Sixth Year - full report
Full report of the findings from the sixth year of the NCSC's Active Cyber Defence programme.
- 592.21 KB
ACD The Sixth Year - summary of key findings
This document summarises some of the key findings from the sixth year of the NCSC's ACD programme.
Download & print article PDF Share Share Facebook LinkedIn X Copy Link
Published
6 July 2023
Written for
Cyber security professionals Public sector Large organisations Small & medium sized organisations
Was this article helpful?
12 Feb 2026
Can you help the NCSC with the next phase of EASM research?
Organisations with experience in external attack surface management can help us shape future ACD 2.0 services.
Information
2 Dec 2025
NCSC Proactive Notifications Service
A service that responsibly reports vulnerabilities to system owners to help them protect their services
Blog Post
6 Nov 2025
NCSC to retire Web Check and Mail Check
By 31 March 2026, organisations should have alternatives to Mail Check and Web Check in place.
Related changes
Source
Classification
Who this affects
Taxonomy
Browse Categories
Get Cybersecurity alerts
Weekly digest. AI-summarized, no noise.
Free. Unsubscribe anytime.
Get alerts for this source
We'll email you when NCSC UK Threat Reports publishes new changes.