Protect
Cyber security services for UK small businesses
Practical protection for UK businesses, from Cyber Essentials to incident response.
Security services on this page
Cyber Essentials certification support
Cyber Essentials is a UK government-backed certification showing that your business has five basic security controls in place. It suits businesses bidding for public sector or larger corporate contracts. We review your systems against the requirements, help you fix the gaps, support you through the assessment, and advise on Cyber Essentials Plus and annual renewal.
Who it’s for
Businesses bidding for public sector or larger corporate contracts, and anyone wanting a clear baseline of protection.
What’s included
- A gap review against the Cyber Essentials requirements
- Help fixing the gaps we find
- Support completing the assessment questionnaire
- Guidance on Cyber Essentials Plus, where you need it
- Help staying compliant for renewal each year
Need devices kept patched to stay certified? See Managed IT services
Managed detection and response (MDR)
Managed detection and response (MDR) is a service that watches your devices and accounts for signs of attack and acts when it finds them. It suits businesses that hold valuable data but have no one watching for threats. We monitor laptops, servers and Microsoft 365, investigate suspicious activity, isolate affected devices and report in plain English.
Who it’s for
Businesses that hold valuable data and have no one watching for attacks.
What’s included
- Monitoring of laptops, servers and Microsoft 365 accounts
- Investigation of suspicious activity
- Isolating affected devices to contain a threat
- Plain-English reports on what happened and what we did
Want your systems looked after as well as watched? See Managed IT services
Email security
Email security stops phishing, malware and spam reaching your team, and stops criminals sending email that pretends to come from your business. It suits every business that uses email, especially those handling payments or customer data. We filter incoming email, check links and attachments, and set up SPF, DKIM and DMARC for your domain.
Who it’s for
Every business that uses email, especially those handling payments or customer data.
What’s included
- Filtering of phishing, malware and spam
- SPF, DKIM and DMARC set-up to stop others sending email as you
- Protection against suspicious links and attachments
- Reporting on blocked threats
Not on Microsoft 365 yet? See Microsoft 365 support and migration
Penetration testing
Penetration testing means testing your networks, websites and applications the way an attacker would, so you can fix weaknesses before they are used against you. It suits businesses with customer portals or exposed systems, and those whose customers ask for testing. We agree the scope first, report findings ranked by risk, and re-test your fixes.
Who it’s for
Businesses with websites, customer portals or networks that need to know where they are exposed, or whose customers ask for testing.
What’s included
- Agreed scope and rules before any testing starts
- External and internal network testing
- Web application testing
- A report ranked by risk, with clear steps to fix each finding
- A re-test to confirm fixes have worked
Need help fixing what the test finds? See Business networking and Wi-Fi
Security awareness training
Security awareness training teaches staff to spot phishing emails and scams and to handle data safely. It suits teams of any size, especially new starters and anyone who handles payments. We provide short online training modules and simulated phishing emails, with progress reports and training records you can show to customers and auditors.
Who it’s for
Teams of any size, especially new starters and anyone who handles payments.
What’s included
- Short online training modules
- Simulated phishing emails to practise spotting scams
- Reports showing progress across the team
- Training records you can show to customers and auditors
Want a helpdesk your staff can call when something looks wrong? See IT support and helpdesk
UK GDPR and ISO 27001 compliance
UK GDPR and ISO 27001 compliance support helps you protect personal data properly and prove it to customers and regulators. It suits businesses that handle personal data and those whose customers ask for ISO 27001. We review your gaps, help write the policies and records you need, carry out risk assessments and prepare you for certification audits.
Who it’s for
Businesses handling personal data, and those whose customers ask for ISO 27001.
What’s included
- Gap reviews against UK GDPR and ISO 27001
- Help writing the policies and records you need
- Risk assessments
- Preparation for ISO 27001 certification audits
Planning wider changes to your IT? See IT consultancy
Cyber incident response
Cyber incident response is help to contain an attack, recover your systems and find out what happened. It suits businesses that think they have been hacked, and those who want a plan before it happens. We help contain the incident, investigate it, restore systems and data, guide you on reporting to the ICO, and write a response plan.
Who it’s for
Businesses that think they have been hacked, and those who want a plan before it happens.
What’s included
- Help containing an active incident
- Investigation of how it happened and what was affected
- Recovery of systems and data
- Guidance on reporting, including to the ICO where required
- An incident response plan written for your business
Want backups you know you can restore? See Backup and disaster recovery
Security questions
Last updated:
Find out where your IT and security stand
Book a free review. We will look at your set-up and tell you what to fix first.