Specialist security that works alongside your IT team
You keep the estate running. We add the certification, testing and out-of-hours monitoring that needs specialist skills, and hand back clear, prioritised actions your engineers can own.
Not the IT person? See how we help business owners
An extension of your team, not a replacement
Capability you don't have to hire
Penetration testers, Certification Body assessors and SOC analysts, available when you need them, without adding headcount.
Findings your team can act on
Reports written for the people who fix things: affected assets, evidence, risk ranking and remediation steps, plus a summary for the board.
Cover when your team is offline
Our 24/7 SOC and Microsoft 365 MDR watch alerts overnight and at weekends, and escalate to you with what we found and what we did.
What IT teams usually call us about
A tender or contract needs Cyber Essentials
Procurement wants a certificate by a fixed date. We review your answers before submission, so you pass first time, with same-day fast track once you meet the requirements.
The insurer's questionnaire keeps growing
MFA, vulnerability management, training and certification are now standard questions. We give you the evidence to answer them honestly.
Danzell tightened the rules
MFA on every cloud service, the 14-day patching rule and personal devices in scope. We find what will fail before the assessor does.
Nobody watches the alerts at 2am
Our 24/7 SOC and Microsoft 365 MDR investigate alerts out of hours and act, so a weekend compromise doesn't wait until Monday.
Plan both together
Cyber Essentials Plus has to be completed within three months of Cyber Essentials, and since April 2026 a second device sample is tested after fixes. Starting early is the difference between a calm assessment and a scramble.
All prices exclude VAT. Micro organisation, self-managed. All Cyber Essentials prices
Readiness check
Scope agreed against your device inventory, MFA audited across every cloud service, patch levels measured against the 14-day rule.
Cyber Essentials
You complete the questionnaire, we review it before submission and flag anything that would fail. Self-managed, assisted or fully managed.
Pre-assessment scan
An authenticated scan of every in-scope device, so third-party apps and devices missing from patching show up now.
Cyber Essentials Plus audit
External and internal testing, malware and MFA checks, mostly done remotely and scheduled around your users.
Ongoing cover your team can lean on
Take one service or combine them. Everything feeds the same DefenceScore, so you can show progress to the board.
Vulnerability management
Continuous scanning, prioritised by real-world risk, with remediation guidance for your engineers.
Get a quoteMicrosoft 365 MDR
Detection and response on your tenant: risky sign-ins, mailbox rules, token theft, investigated around the clock.
Get a quotePenetration testing
Independent infrastructure and web application tests, with findings written for the people who will fix them.
Get a quotePhishing and training
Realistic simulations and short training that keep staff alert to AI-written phishing and deepfake requests.
Get a quoteMicrosoft 365 audit
A configuration review of your tenant against current good practice, with a prioritised fix list.
Get a quoteIncident response retainer
Agreed response times and responders who work alongside your team when something goes wrong.
Get a quoteFrequently asked questions
We don't have anyone technical. Can we still get Cyber Essentials?
Do you provide day-to-day IT support?
Is cyber insurance included?
We already have an MSP. Can we still work with you?
How quickly can we get Cyber Essentials?
Is Microsoft 365 in scope?
Does Cyber Essentials Plus testing happen on site?
How long does certification last?
From the blog
Talk to one of our team
Talk through your scope, your stack and your deadlines with one of our specialists. Already a client? Log in to the IT Team Portal.