Managed Endpoint + Cloud
Yorkshire SMBs, 10–50 users — monthly rolling, 5-user minimum
Remote management and monitoring, managed threat detection and response (managed EDR, antivirus, identity threat detection, and security event correlation), and optional M365 Business Premium — all in a single monthly bill. Three tiers. Monthly rolling contract on the service layer. M365 licensing follows Microsoft's annual NCE commit — that's disclosed upfront in every proposal.
The recommended tier is Secure. It adds M365 tenant hardening, managed email security, and cloud-to-cloud backup on top of the Protect baseline. For most 10–50-user Yorkshire SMBs, it is the right level and cost-effective against buying the pieces separately.
A one-off onboarding fee (£500–£1,500 depending on user count and starting state) covers tenant hardening, agent rollout, and baseline documentation.
| Protect | Secure Recommended | Govern | |
|---|---|---|---|
| Without M365 (client brings own) | £14/user/mo | £26/user/mo | £42/user/mo |
| With M365 Business Premium (Business Premium only) | £34/user/mo | £46/user/mo | £62/user/mo |
| Remote management & monitoring — automated patching, remote troubleshooting, device health monitoring, hardware/software inventory tracking | ✓ | ✓ | ✓ |
| Managed threat detection & response — 24/7 expert-monitored detection on every device, next-generation antivirus, identity-takeover protection across Microsoft 365 accounts, and security event correlation | ✓ | ✓ | ✓ |
| Monthly posture report | ✓ | ✓ | ✓ |
| M365 tenant hardening + Conditional Access baseline | — | ✓ | ✓ |
| Managed email security | — | ✓ | ✓ |
| Cloud-to-cloud backup (M365 + email) | — | ✓ | ✓ |
| Quarterly posture review | — | ✓ | ✓ |
| Advanced phishing & spoofing protection for inbound email — protects against impersonation, attachment-based attacks, and brand-spoofing campaigns | — | — | ✓ |
| Azure managed services (where applicable) | — | — | ✓ |
| Quarterly security advisor session — risk register review, strategic roadmap, summary suitable for the board or partners | — | — | ✓ |
All prices ex-VAT (20% added where applicable). | 5-user minimum. | Pricing assumes Microsoft 365 (M365) Business Premium. M365 E3 / E5 licensing is priced on consultation — please request a quote. | M365 = Microsoft 365.
Cyber Essentials Certification
Any size — first-time certification or annual renewal
Published prices. No "call for a quote". CE and CE+ certification with a named lead engineer, included readiness work, one resubmission, and a 30-day post-cert retest window.
Every engagement includes: methodology-driven gap assessment against all five CE control areas, remediation guidance, policy templates, evidence preparation, and submission handling via our certification body. One resubmission is included if needed. After certification, there is a 30-day window to retest any borderline controls at no extra charge.
CE+ is delivered remotely as standard. On-site verification adds £395.
- Named lead engineer throughout (not a handover to a junior)
- Gap assessment across all five CE control areas
- Plain-English remediation guidance + policy templates
- Evidence preparation and submission handling
- One resubmission included if needed
- 30-day post-certification retest window
- CE+ remote-first (on-site +£395)
- Boundary firewalls and internet gateways
- Secure configuration — default passwords, unnecessary services
- User access control — admin privilege, MFA on cloud services
- Malware protection — endpoint, application allow-listing
- Security update management — 14-day patching for high risk
First-time certification
| Service | Org size | Price (ex-VAT) |
|---|---|---|
| CE Starter — Readiness + Cert | 1–4 users | £795 |
| CE Readiness + Certification | Any (default flat) | £1,250 |
| CE+ Readiness + Certification — Micro | 1–9 users | £2,495 |
| CE+ Readiness + Certification — Small | 10–49 users | £2,995 |
| CE+ Readiness + Certification — Medium | 50–99 users | £3,950 |
| CE+ Readiness + Certification — Large | 100+ users | POA |
| On-site CE+ surcharge (vs remote default) | Any | +£395 |
Annual renewal (year 2 onwards)
| Service | Renewal price (ex-VAT) |
|---|---|
| CE Starter renewal | £495 |
| CE renewal | £795 |
| CE+ Micro renewal | £1,795 |
| CE+ Small renewal | £2,095 |
| CE+ Medium renewal | £2,795 |
Wolds Watch / Certify / Assure
Recurring compliance subscription — annual or monthly billing
A rolling compliance subscription, banded by organisation size. Three tiers: Watch gives you continuous vulnerability monitoring and policy management. Certify adds a CE certificate, patch management, awareness training, and £25k cyber insurance. Assure adds CE+ and GDPR privacy toolbox on top.
Clients on Managed Endpoint Secure or Govern (Line 1) get 10% off Certify or Assure recurring fee — the bundle discount rewards commitment and ties the relationship together.
Annual billing preferred. Monthly available with a 12-month minimum commitment (this is a platform constraint, passed through honestly).
Baseline
See band table below for larger orgs
- Continuous vulnerability scanning
- Policy management dashboard
- No CE certificate, no insurance
Core
See band table below for larger orgs
- CE certificate included
- Continuous monitoring + patch management
- Learn Lite awareness training
- £25k cyber insurance included
- 10% off for Line 1 Secure/Govern clients
Complete
See band table below for larger orgs
- CE and CE+ certificates included
- Continuous monitoring + patch management
- Full Learn awareness training library
- GDPR Privacy Toolbox (DSAR handling)
- £25k cyber insurance included
- 10% off for Line 1 Secure/Govern clients
Pricing by organisation size
| Tier | 1–9 users | 10–19 users | 20–49 users | 50–99 users | 100–249 users |
|---|---|---|---|---|---|
| Wolds Watch | £300/yr | £625/yr | £1,500/yr | £2,350/yr | £4,550/yr |
| Wolds Certify | £1,025/yr | £1,340/yr | £2,285/yr | £3,205/yr | £4,750/yr |
| Wolds Assure | £2,716/yr | £3,255/yr | £4,205/yr | £5,520/yr | £8,190/yr |
Three worked examples
These show typical combinations. The lines are separable — you can take just Line 1, just Line 2, or mix and match to fit your situation. All prices ex-VAT.
15-user client, greenfield (no current MSP)
8-user client, compliance-led (no current MSP, no existing M365)
25-user client, co-existence (existing M365 supplier, Wolds wraps the security layer)
All prices ex-VAT. VAT added at the prevailing rate (currently 20%) where applicable.
What Wolds Cyber does not do
Wolds Cyber is the security and compliance layer. Being explicit about the boundaries is a feature, not a limitation.
- Telephony and VoIP provisioning
- Connectivity — leased lines, MPLS, SoGEA, firewall-as-circuit
- Multi-site on-site break-fix at scale
Wolds Cyber is a solo-principal practice — the capacity guardrail is intentional. If you already have an IT provider, Wolds Cyber can co-exist with them — taking the security and compliance layer without displacing the relationship your team relies on. Talk it through →
Free Website Security Check
Any business with a website — instant results, no sign-up
Get an objective snapshot of your website's security posture in under 60 seconds. The scanner checks SSL/TLS configuration, HTTP security headers, email security (SPF & DMARC), exposed sensitive files, and technology fingerprinting — all from a single URL.
It is not a substitute for a full security engagement, but it is a useful first look and often surfaces quick wins before we talk.
- SSL/TLS certificate validity and configuration
- HTTP security headers (HSTS, CSP, X-Frame-Options, and more)
- DNS email security — SPF and DMARC record validation
- Exposed sensitive files and directories
- Technology detection and fingerprinting
- Results in approximately 60 seconds
Service area
All services available to businesses in York, East Riding of Yorkshire, and North Yorkshire. Wider Yorkshire including Hull, Harrogate, Beverley, Driffield, Scarborough, and Bridlington. Remote-first delivery for managed and compliance services. Travel within the core area included for on-site work. Contact us for locations further afield.
Frequently asked questions
Ready to get started?
The first step is a free 15-minute call. No commitment, no sales pitch — just a conversation about what you need and whether the numbers stack up for your situation.
Book a Free Call