Helideck Certification Agency

Profile narrative

The Helideck Certification Agency, also known by its alias, is based in Scotland, United Kingdom.
The organisation’s primary activity is the vetting and certification of helicopter landing sites, commonly referred to as helidecks.
It provides assessment services that determine whether a helideck meets safety and operational standards for helicopter use.
Its clients include operators that require verified helideck facilities for offshore, onshore, or maritime operations.
The agency’s work supports the safe integration of helicopter operations with various industrial and transport sectors.

The agency specialises exclusively in helideck certification, a niche within the broader aviation safety domain.
This focus distinguishes it from general aviation consultancies that offer a wider range of services.
By concentrating on helidecks, the agency develops detailed expertise in the structural, lighting, and operational requirements specific to helicopter landing areas.
Its services help clients comply with relevant regulatory frameworks and industry best practices for helideck safety.
The specialised nature of its work means the agency often collaborates with offshore oil and gas platforms, wind farms, and emergency medical service providers that rely on helideck operations.

Ownership and parent‑subsidiary relationships of the Helideck Certification Agency are not disclosed in the available source material.
In April 2026, the organisation was identified as one of several victims of a ransomware attack carried out by the Russian‑speaking group Aur0ra.
The attack involved the misuse of SpaceX’s AI coding assistant Cursor, which was powered by Anthropic’s Claude Sonnet 4.5 model, to facilitate intrusion and credential‑testing activities.
Exposure of chat logs between the attackers and the AI assistant allowed security researchers to uncover the breach and attribute it to the gang.
The incident highlights the cybersecurity risks faced by specialised service providers even when their core business is unrelated to information technology.

Incidents

1 incident linked to this organisation.