Security, cloud, and compliance, published prices
Managed IT security and cyber security consultancy for Yorkshire businesses. Three product lines, separable or combined: managed endpoint security, Cyber Essentials certification, and a rolling compliance subscription. Yorkshire SMBs, 10 to 50 users. No "call for a quote" on any of it.
Managed Endpoint + Cloud
Yorkshire SMBs, 10 to 50 users, monthly rolling, 5-user minimum
Remote monitoring and management (RMM) of your endpoints, including patch management and day-to-day managed IT support, managed threat detection and response (managed EDR, antivirus, identity threat detection, and security event correlation), and optional M365 Business Premium, all in a single monthly bill. Three tiers. Monthly rolling contract on the service layer. M365 licensing follows Microsoft's annual NCE commit, that's disclosed upfront in every proposal.
The recommended tier is Secure. It adds M365 tenant hardening, managed email security, and cloud-to-cloud backup on top of the Protect baseline. For most 10 to 50-user Yorkshire SMBs, it is the right level and cost-effective against buying the pieces separately.
A one-off onboarding fee (£500 to £1,500 depending on user count and starting state) covers tenant hardening, agent rollout, and baseline documentation.
| Protect | Secure Recommended | Govern | |
|---|---|---|---|
| Without M365 (client brings own) | £14/user/mo | £26/user/mo | £42/user/mo |
| With M365 Business Premium (Business Premium only) | £34/user/mo | £46/user/mo | £62/user/mo |
| Remote management & monitoring, automated patching, remote troubleshooting, device health monitoring, hardware/software inventory tracking | ✓ | ✓ | ✓ |
| Managed threat detection & response, 24/7 expert-monitored detection on every device, next-generation antivirus, identity-takeover protection across Microsoft 365 accounts, and security event correlation | ✓ | ✓ | ✓ |
| Monthly posture report | ✓ | ✓ | ✓ |
| M365 tenant hardening + Conditional Access baseline | , | ✓ | ✓ |
| Managed email security | , | ✓ | ✓ |
| Cloud-to-cloud backup (M365 + email) | , | ✓ | ✓ |
| Quarterly posture review | , | ✓ | ✓ |
| Advanced phishing & spoofing protection for inbound email, protects against impersonation, attachment-based attacks, and brand-spoofing campaigns | , | , | ✓ |
| Azure managed services (where applicable) | , | , | ✓ |
| Quarterly security advisor session, risk register review, strategic roadmap, summary suitable for the board or partners | , | , | ✓ |
All prices ex-VAT (20% added where applicable). | 5-user minimum. | Pricing assumes Microsoft 365 (M365) Business Premium. M365 E3 / E5 licensing is priced on consultation, please request a quote. | M365 = Microsoft 365.
A certificate proves a day. We prove the year.
Why Cyber Essentials is included in a subscription, not sold on its own
A Cyber Essentials certificate says that on the day you were assessed, five technical controls were in place. That is worth having, and we get clients through it. It is not the same as being secure in November.
Between one certificate and the next, somebody joins. Somebody leaves and keeps their login. A laptop misses three patch cycles because it lives in a van. For applications registered after 26 April 2026, the scheme agrees with us. Under the Danzell question set, missing multi-factor authentication on a cloud service is an automatic fail, and so is falling more than 14 days behind on a critical patch, whether that patch is for an operating system, a firewall or an application. Those are continuous obligations. A certificate cannot evidence them and a subscription can.
So we do not sell bare certification, and we do not sell one-off assessments. Assessment is how every engagement opens and how every month is reported. Certification is included in Wolds Certify, and CE Plus in Wolds Assure, with a named lead engineer, remediation guidance, evidence preparation, submission handling through our certification body, one resubmission if needed, and a 30-day post-certification retest window.
CE Plus is delivered remotely as standard. On-site verification adds £395.
Wolds Watch / Certify / Assure
Recurring compliance subscription, annual or monthly billing
A rolling compliance subscription, banded by organisation size. Three tiers: Watch gives you continuous vulnerability monitoring and policy management. Certify adds a CE certificate, patch management, awareness training and £25k cyber insurance. Assure adds CE+ and GDPR privacy toolbox on top.
Clients on Managed Endpoint Secure or Govern (Line 1) get 10% off Certify or Assure recurring fee, the bundle discount rewards commitment and ties the relationship together.
Annual billing preferred. Monthly available with a 12-month minimum commitment (this is a platform constraint, passed through honestly).
Baseline
See band table below for larger orgs
- Continuous vulnerability scanning
- Policy management dashboard
- No CE certificate, no insurance
Core
See band table below for larger orgs
- CE certificate included
- Continuous monitoring + patch management
- Learn Lite awareness training
- £25k cyber insurance included
- 10% off for Line 1 Secure/Govern clients
Complete
See band table below for larger orgs
- CE and CE+ certificates included
- Continuous monitoring + patch management
- Full Learn awareness training library
- GDPR Privacy Toolbox (DSAR handling)
- £25k cyber insurance included
- 10% off for Line 1 Secure/Govern clients
Pricing by organisation size
| Tier | 1 to 9 users | 10 to 19 users | 20 to 49 users | 50 to 99 users | 100 to 249 users |
|---|---|---|---|---|---|
| Wolds Watch | £400/yr | £523/yr | £892/yr | £1,251/yr | £1,855/yr |
| Wolds Certify | £1,280/yr | £1,675/yr | £2,856/yr | £4,006/yr | £5,937/yr |
| Wolds Assure | £3,200/yr | £3,835/yr | £4,954/yr | £6,504/yr | £9,649/yr |
UniFi / CCTV install
Network hardware, Wi-Fi, and CCTV, scoped and priced before the visit
Network hardware installation, switching, wireless, and CCTV, with VLAN configuration, structured cabling, and handover documentation included. A practical add-on for clients who want their network and physical security set up properly alongside their cyber posture.
Book a discovery callThree worked examples
These show typical combinations of managed security and a compliance subscription. You can take either line on its own. All prices ex-VAT.
15-user client, greenfield (no current MSP)
8-user client, compliance-led (no current MSP, no existing M365)
25-user client, co-existence (existing M365 supplier, Wolds wraps the security layer)
All prices ex-VAT. VAT added at the prevailing rate (currently 20%) where applicable.
What Wolds Cyber does not do
Wolds Cyber is the security and compliance layer. Being explicit about the boundaries is a feature, not a limitation.
- Telephony and VoIP provisioning
- Connectivity, leased lines, MPLS, SoGEA, firewall-as-circuit
- Multi-site on-site break-fix at scale
Wolds Cyber is a solo-principal practice, the capacity guardrail is intentional. If you already have an IT provider, Wolds Cyber can co-exist with them, taking the security and compliance layer without displacing the relationship your team relies on. Talk it through →
Free Website Security Check
Any business with a website, instant results, no sign-up
Get an objective snapshot of your website's security posture in under 60 seconds. The scanner checks SSL/TLS configuration, HTTP security headers, email security (SPF, DKIM and DMARC), exposed sensitive files, and technology fingerprinting, all from a single URL.
It is not a substitute for a full security engagement, but it is a useful first look and often surfaces quick wins before we talk.
- SSL/TLS certificate validity and configuration
- HTTP security headers (HSTS, CSP, X-Frame-Options, and more)
- DNS email security: SPF, DKIM and DMARC record validation, including DKIM key strength and revocation
- Exposed sensitive files and directories
- Technology detection and fingerprinting
- Results in approximately 60 seconds
Service area
All services available to businesses in York, East Riding of Yorkshire, and North Yorkshire. Wider Yorkshire including Hull, Harrogate, Beverley, Driffield, Scarborough, and Bridlington. Remote-first delivery for managed and compliance services. Travel within the core area included for on-site work. Contact us for locations further afield.
Frequently asked questions
Ready to get started?
The first step is a free 15-minute call. No commitment, no sales pitch, just a conversation about what you need and whether the numbers stack up for your situation.
Book a Free Call