Security, cloud, and compliance, published prices

Managed IT security and cyber security consultancy for Yorkshire businesses. Three product lines, separable or combined: managed endpoint security, Cyber Essentials certification, and a rolling compliance subscription. Yorkshire SMBs, 10 to 50 users. No "call for a quote" on any of it.

Managed Endpoint + Cloud

Yorkshire SMBs, 10 to 50 users, monthly rolling, 5-user minimum

From £14/user/mo
All prices ex-VAT, VAT added at 20% where applicable

Remote monitoring and management (RMM) of your endpoints, including patch management and day-to-day managed IT support, managed threat detection and response (managed EDR, antivirus, identity threat detection, and security event correlation), and optional M365 Business Premium, all in a single monthly bill. Three tiers. Monthly rolling contract on the service layer. M365 licensing follows Microsoft's annual NCE commit, that's disclosed upfront in every proposal.

The recommended tier is Secure. It adds M365 tenant hardening, managed email security, and cloud-to-cloud backup on top of the Protect baseline. For most 10 to 50-user Yorkshire SMBs, it is the right level and cost-effective against buying the pieces separately.

A one-off onboarding fee (£500 to £1,500 depending on user count and starting state) covers tenant hardening, agent rollout, and baseline documentation.

Protect Secure Recommended Govern
Without M365 (client brings own) £14/user/mo £26/user/mo £42/user/mo
With M365 Business Premium (Business Premium only) £34/user/mo £46/user/mo £62/user/mo
Remote management & monitoring, automated patching, remote troubleshooting, device health monitoring, hardware/software inventory tracking
Managed threat detection & response, 24/7 expert-monitored detection on every device, next-generation antivirus, identity-takeover protection across Microsoft 365 accounts, and security event correlation
Monthly posture report
M365 tenant hardening + Conditional Access baseline ,
Managed email security ,
Cloud-to-cloud backup (M365 + email) ,
Quarterly posture review ,
Advanced phishing & spoofing protection for inbound email, protects against impersonation, attachment-based attacks, and brand-spoofing campaigns , ,
Azure managed services (where applicable) , ,
Quarterly security advisor session, risk register review, strategic roadmap, summary suitable for the board or partners , ,

All prices ex-VAT (20% added where applicable).  |  5-user minimum.  |  Pricing assumes Microsoft 365 (M365) Business Premium. M365 E3 / E5 licensing is priced on consultation, please request a quote.  |  M365 = Microsoft 365.

A certificate proves a day. We prove the year.

Why Cyber Essentials is included in a subscription, not sold on its own

A Cyber Essentials certificate says that on the day you were assessed, five technical controls were in place. That is worth having, and we get clients through it. It is not the same as being secure in November.

Between one certificate and the next, somebody joins. Somebody leaves and keeps their login. A laptop misses three patch cycles because it lives in a van. For applications registered after 26 April 2026, the scheme agrees with us. Under the Danzell question set, missing multi-factor authentication on a cloud service is an automatic fail, and so is falling more than 14 days behind on a critical patch, whether that patch is for an operating system, a firewall or an application. Those are continuous obligations. A certificate cannot evidence them and a subscription can.

So we do not sell bare certification, and we do not sell one-off assessments. Assessment is how every engagement opens and how every month is reported. Certification is included in Wolds Certify, and CE Plus in Wolds Assure, with a named lead engineer, remediation guidance, evidence preparation, submission handling through our certification body, one resubmission if needed, and a 30-day post-certification retest window.

CE Plus is delivered remotely as standard. On-site verification adds £395.

Wolds Watch / Certify / Assure

Recurring compliance subscription, annual or monthly billing

From £400/yr
Published banded prices, ex-VAT

A rolling compliance subscription, banded by organisation size. Three tiers: Watch gives you continuous vulnerability monitoring and policy management. Certify adds a CE certificate, patch management, awareness training and £25k cyber insurance. Assure adds CE+ and GDPR privacy toolbox on top.

Clients on Managed Endpoint Secure or Govern (Line 1) get 10% off Certify or Assure recurring fee, the bundle discount rewards commitment and ties the relationship together.

Annual billing preferred. Monthly available with a 12-month minimum commitment (this is a platform constraint, passed through honestly).

Wolds Watch

Baseline

£400/yr
1 to 9 users, or £40/month, ex-VAT
See band table below for larger orgs
No setup fee
  • Continuous vulnerability scanning
  • Policy management dashboard
  • No CE certificate, no insurance

Pricing by organisation size

Tier 1 to 9 users 10 to 19 users 20 to 49 users 50 to 99 users 100 to 249 users
Wolds Watch £400/yr £523/yr £892/yr £1,251/yr £1,855/yr
Wolds Certify £1,280/yr £1,675/yr £2,856/yr £4,006/yr £5,937/yr
Wolds Assure £3,200/yr £3,835/yr £4,954/yr £6,504/yr £9,649/yr
One-off setup fees (year 1 only, on top of the annual subscription): Wolds Watch, no setup fee. Wolds Certify, one-off setup fee of £395 (standard), or £795 if full CE readiness work is required (saves £455 vs buying Line 2 separately). Wolds Assure, one-off setup fee of £695 (standard), or £1,295 if both CE and CE+ readiness work is required (saves £900 vs a separate Line 2 engagement). From year 2 onwards, you pay the annual recurring subscription only.

UniFi / CCTV install

Network hardware, Wi-Fi, and CCTV, scoped and priced before the visit

Day-rate
Quoted per project, ex-VAT

Network hardware installation, switching, wireless, and CCTV, with VLAN configuration, structured cabling, and handover documentation included. A practical add-on for clients who want their network and physical security set up properly alongside their cyber posture.

Book a discovery call

Three worked examples

These show typical combinations of managed security and a compliance subscription. You can take either line on its own. All prices ex-VAT.

Example A

15-user client, greenfield (no current MSP)

Managed Endpoint Secure (with M365) ×15 ×12£8,280
Onboarding fee£750
Wolds Assure (10 to 19 band, 10% bundle discount), CE + CE+ included£3,451
Assure setup fee (full CE + CE+ readiness)£1,295
Year 1: £13,776
Year 2+: £11,731, approx. £978/month
Example B

8-user client, compliance-led (no current MSP, no existing M365)

Managed Endpoint Protect (with M365) ×8 ×12£3,264
Onboarding fee£500
Wolds Assure (1 to 9 band), CE + CE+ + insurance + privacy£3,200
Assure setup fee (full CE + CE+ readiness)£1,295
Year 1: £8,259
Year 2+: £6,464, no separate Line 2 needed
Example C

25-user client, co-existence (existing M365 supplier, Wolds wraps the security layer)

Managed Endpoint Secure (without M365) ×25 ×12£7,800
Onboarding fee£1,000
Wolds Certify (20 to 49 band, 10% bundle discount), CE included£2,570
Certify setup fee (standard)£395
Year 1: £11,765
Year 2+: £10,370, approx. £864/month

All prices ex-VAT. VAT added at the prevailing rate (currently 20%) where applicable.

What Wolds Cyber does not do

Wolds Cyber is the security and compliance layer. Being explicit about the boundaries is a feature, not a limitation.

  • Telephony and VoIP provisioning
  • Connectivity, leased lines, MPLS, SoGEA, firewall-as-circuit
  • Multi-site on-site break-fix at scale

Wolds Cyber is a solo-principal practice, the capacity guardrail is intentional. If you already have an IT provider, Wolds Cyber can co-exist with them, taking the security and compliance layer without displacing the relationship your team relies on. Talk it through →

Free Website Security Check

Any business with a website, instant results, no sign-up

£0
No sign-up required

Get an objective snapshot of your website's security posture in under 60 seconds. The scanner checks SSL/TLS configuration, HTTP security headers, email security (SPF, DKIM and DMARC), exposed sensitive files, and technology fingerprinting, all from a single URL.

It is not a substitute for a full security engagement, but it is a useful first look and often surfaces quick wins before we talk.

What it checks
  • SSL/TLS certificate validity and configuration
  • HTTP security headers (HSTS, CSP, X-Frame-Options, and more)
  • DNS email security: SPF, DKIM and DMARC record validation, including DKIM key strength and revocation
  • Exposed sensitive files and directories
  • Technology detection and fingerprinting
  • Results in approximately 60 seconds

Service area

All services available to businesses in York, East Riding of Yorkshire, and North Yorkshire. Wider Yorkshire including Hull, Harrogate, Beverley, Driffield, Scarborough, and Bridlington. Remote-first delivery for managed and compliance services. Travel within the core area included for on-site work. Contact us for locations further afield.

Frequently asked questions

Wolds Cyber Protect starts at £14 per user per month (without M365), remote management and monitoring plus managed threat detection and response. The recommended Secure tier is £26 per user per month (without M365) and adds M365 tenant hardening, email security, and cloud backup. All prices ex-VAT; VAT added at 20% where applicable. Monthly rolling, 5-user minimum.
We do not sell bare certification. Cyber Essentials is included in Wolds Certify and Cyber Essentials Plus in Wolds Assure. Each includes gap assessment, remediation guidance, policy templates, evidence preparation, submission handling, one resubmission if needed, a named lead engineer, and a 30-day post-cert retest window. The subscriptions are banded by organisation size, from £1,280 per year for Certify and £3,200 for Assure at 1 to 9 users, ex-VAT.
The £25k cyber insurance policy is included for your organisation at Wolds Certify and Wolds Assure tiers. It is a cyber insurance policy for the client business, not Wolds Cyber's own cover. Policy terms are provided via our certification and monitoring platform before you commit. For specific coverage questions, contact us and we will confirm the policy details.
Yes. All prices are published, no POA, no "contact us for a quote". Prices are shown ex-VAT; VAT is added at the prevailing rate (currently 20%) where applicable. The majority of Yorkshire IT and security providers hide their numbers behind a discovery call. We do not do that.
Yes, and this is common. Wolds Cyber takes the security and compliance layer, endpoint security, M365 hardening, email security, and certification, while your existing provider keeps helpdesk and connectivity. We do not need to replace them to add meaningful value.
Yes. East Riding of Yorkshire, North Yorkshire, and wider Yorkshire, Hull, Harrogate, Beverley, Driffield, Scarborough, Bridlington. Managed and compliance services are remote-first, so geography matters less. On-site work has travel included within the core service area. Contact us for locations further afield.

Ready to get started?

The first step is a free 15-minute call. No commitment, no sales pitch, just a conversation about what you need and whether the numbers stack up for your situation.

Book a Free Call