Security, cloud, and compliance — published prices

Three product lines, separable or combined. Managed endpoint security, Cyber Essentials certification, and a rolling compliance subscription. Yorkshire SMBs, 10–50 users. No "call for a quote" on any of it.

Managed Endpoint + Cloud

Yorkshire SMBs, 10–50 users — monthly rolling, 5-user minimum

From £14/user/mo
All prices ex-VAT — VAT added at 20% where applicable

Remote management and monitoring, managed threat detection and response (managed EDR, antivirus, identity threat detection, and security event correlation), and optional M365 Business Premium — all in a single monthly bill. Three tiers. Monthly rolling contract on the service layer. M365 licensing follows Microsoft's annual NCE commit — that's disclosed upfront in every proposal.

The recommended tier is Secure. It adds M365 tenant hardening, managed email security, and cloud-to-cloud backup on top of the Protect baseline. For most 10–50-user Yorkshire SMBs, it is the right level and cost-effective against buying the pieces separately.

A one-off onboarding fee (£500–£1,500 depending on user count and starting state) covers tenant hardening, agent rollout, and baseline documentation.

Protect Secure Recommended Govern
Without M365 (client brings own) £14/user/mo £26/user/mo £42/user/mo
With M365 Business Premium (Business Premium only) £34/user/mo £46/user/mo £62/user/mo
Remote management & monitoring — automated patching, remote troubleshooting, device health monitoring, hardware/software inventory tracking
Managed threat detection & response — 24/7 expert-monitored detection on every device, next-generation antivirus, identity-takeover protection across Microsoft 365 accounts, and security event correlation
Monthly posture report
M365 tenant hardening + Conditional Access baseline
Managed email security
Cloud-to-cloud backup (M365 + email)
Quarterly posture review
Advanced phishing & spoofing protection for inbound email — protects against impersonation, attachment-based attacks, and brand-spoofing campaigns
Azure managed services (where applicable)
Quarterly security advisor session — risk register review, strategic roadmap, summary suitable for the board or partners

All prices ex-VAT (20% added where applicable).  |  5-user minimum.  |  Pricing assumes Microsoft 365 (M365) Business Premium. M365 E3 / E5 licensing is priced on consultation — please request a quote.  |  M365 = Microsoft 365.

Book a scoping call

Cyber Essentials Certification

Any size — first-time certification or annual renewal

From £795
Fixed prices — published, no POA — ex-VAT

Published prices. No "call for a quote". CE and CE+ certification with a named lead engineer, included readiness work, one resubmission, and a 30-day post-cert retest window.

Every engagement includes: methodology-driven gap assessment against all five CE control areas, remediation guidance, policy templates, evidence preparation, and submission handling via our certification body. One resubmission is included if needed. After certification, there is a 30-day window to retest any borderline controls at no extra charge.

CE+ is delivered remotely as standard. On-site verification adds £395.

What every engagement includes
  • Named lead engineer throughout (not a handover to a junior)
  • Gap assessment across all five CE control areas
  • Plain-English remediation guidance + policy templates
  • Evidence preparation and submission handling
  • One resubmission included if needed
  • 30-day post-certification retest window
  • CE+ remote-first (on-site +£395)
The five CE control areas
  • Boundary firewalls and internet gateways
  • Secure configuration — default passwords, unnecessary services
  • User access control — admin privilege, MFA on cloud services
  • Malware protection — endpoint, application allow-listing
  • Security update management — 14-day patching for high risk

First-time certification

Service Org size Price (ex-VAT)
CE Starter — Readiness + Cert 1–4 users £795
CE Readiness + Certification Any (default flat) £1,250
CE+ Readiness + Certification — Micro 1–9 users £2,495
CE+ Readiness + Certification — Small 10–49 users £2,995
CE+ Readiness + Certification — Medium 50–99 users £3,950
CE+ Readiness + Certification — Large 100+ users POA
On-site CE+ surcharge (vs remote default) Any +£395

Annual renewal (year 2 onwards)

Service Renewal price (ex-VAT)
CE Starter renewal £495
CE renewal £795
CE+ Micro renewal £1,795
CE+ Small renewal £2,095
CE+ Medium renewal £2,795
Start your CE journey Cyber Essentials — York detail page →

Wolds Watch / Certify / Assure

Recurring compliance subscription — annual or monthly billing

From £300/yr
Published banded prices — ex-VAT

A rolling compliance subscription, banded by organisation size. Three tiers: Watch gives you continuous vulnerability monitoring and policy management. Certify adds a CE certificate, patch management, awareness training, and £25k cyber insurance. Assure adds CE+ and GDPR privacy toolbox on top.

Clients on Managed Endpoint Secure or Govern (Line 1) get 10% off Certify or Assure recurring fee — the bundle discount rewards commitment and ties the relationship together.

Annual billing preferred. Monthly available with a 12-month minimum commitment (this is a platform constraint, passed through honestly).

Wolds Watch

Baseline

£300/yr
1–9 users — or £28/month — ex-VAT
See band table below for larger orgs
No setup fee
  • Continuous vulnerability scanning
  • Policy management dashboard
  • No CE certificate, no insurance

Pricing by organisation size

Tier 1–9 users 10–19 users 20–49 users 50–99 users 100–249 users
Wolds Watch £300/yr £625/yr £1,500/yr £2,350/yr £4,550/yr
Wolds Certify £1,025/yr £1,340/yr £2,285/yr £3,205/yr £4,750/yr
Wolds Assure £2,716/yr £3,255/yr £4,205/yr £5,520/yr £8,190/yr
One-off setup fees (year 1 only — on top of the annual subscription): Wolds Watch — no setup fee. Wolds Certify — one-off setup fee of £395 (standard), or £795 if full CE readiness work is required (saves £455 vs buying Line 2 separately). Wolds Assure — one-off setup fee of £695 (standard), or £1,295 if both CE and CE+ readiness work is required (saves £900 vs a separate Line 2 engagement). From year 2 onwards, you pay the annual recurring subscription only.
Wolds Compliance detail page → Book a discovery call

Three worked examples

These show typical combinations. The lines are separable — you can take just Line 1, just Line 2, or mix and match to fit your situation. All prices ex-VAT.

Example A

15-user client, greenfield (no current MSP)

Managed Endpoint Secure (with M365) ×15 ×12£8,280
Onboarding fee£750
CE+ Micro (readiness + cert)£2,495
Wolds Certify (10–19 band, 10% bundle discount)£1,206
Certify setup fee (lightweight)£395
Year 1: £13,126
Year 2+: £11,281 — approx. £940/month
Example B

8-user client, compliance-led (no current MSP, no existing M365)

Managed Endpoint Protect (with M365) ×8 ×12£3,264
Onboarding fee£500
Wolds Assure (1–9 band) — CE + CE+ + insurance + privacy£2,716
Assure setup fee (full CE + CE+ readiness)£1,295
Year 1: £7,775
Year 2+: £5,980 — no separate Line 2 needed
Example C

25-user client, co-existence (existing M365 supplier, Wolds wraps the security layer)

Managed Endpoint Secure (without M365) ×25 ×12£7,800
Onboarding fee£1,000
CE Readiness + Certification (flat)£1,250
Year 1: £10,050
Year 2+: £8,595 — approx. £716/month

All prices ex-VAT. VAT added at the prevailing rate (currently 20%) where applicable.

What Wolds Cyber does not do

Wolds Cyber is the security and compliance layer. Being explicit about the boundaries is a feature, not a limitation.

  • Telephony and VoIP provisioning
  • Connectivity — leased lines, MPLS, SoGEA, firewall-as-circuit
  • Multi-site on-site break-fix at scale

Wolds Cyber is a solo-principal practice — the capacity guardrail is intentional. If you already have an IT provider, Wolds Cyber can co-exist with them — taking the security and compliance layer without displacing the relationship your team relies on. Talk it through →

Free Website Security Check

Any business with a website — instant results, no sign-up

£0
No sign-up required

Get an objective snapshot of your website's security posture in under 60 seconds. The scanner checks SSL/TLS configuration, HTTP security headers, email security (SPF & DMARC), exposed sensitive files, and technology fingerprinting — all from a single URL.

It is not a substitute for a full security engagement, but it is a useful first look and often surfaces quick wins before we talk.

What it checks
  • SSL/TLS certificate validity and configuration
  • HTTP security headers (HSTS, CSP, X-Frame-Options, and more)
  • DNS email security — SPF and DMARC record validation
  • Exposed sensitive files and directories
  • Technology detection and fingerprinting
  • Results in approximately 60 seconds

Service area

All services available to businesses in York, East Riding of Yorkshire, and North Yorkshire. Wider Yorkshire including Hull, Harrogate, Beverley, Driffield, Scarborough, and Bridlington. Remote-first delivery for managed and compliance services. Travel within the core area included for on-site work. Contact us for locations further afield.

Frequently asked questions

Wolds Cyber Protect starts at £14 per user per month (without M365) — remote management and monitoring plus managed threat detection and response. The recommended Secure tier is £26 per user per month (without M365) and adds M365 tenant hardening, email security, and cloud backup. All prices ex-VAT; VAT added at 20% where applicable. Monthly rolling, 5-user minimum.
Gap assessment, remediation guidance, policy templates, evidence preparation, submission handling, one resubmission if needed, a named lead engineer, and a 30-day post-cert retest window. CE (all org sizes, default flat price) is £1,250 ex-VAT. CE+ is banded: Micro (1–9) £2,495, Small (10–49) £2,995, Medium (50–99) £3,950.
The £25k cyber insurance policy is included for your organisation at Wolds Certify and Wolds Assure tiers. It is a cyber insurance policy for the client business — not Wolds Cyber's own cover. Policy terms are provided via our certification and monitoring platform before you commit. For specific coverage questions, contact us and we will confirm the policy details.
Yes. All prices are published — no POA, no "contact us for a quote". Prices are shown ex-VAT; VAT is added at the prevailing rate (currently 20%) where applicable. The majority of Yorkshire IT and security providers hide their numbers behind a discovery call. We do not do that.
Yes, and this is common. Wolds Cyber takes the security and compliance layer — endpoint security, M365 hardening, email security, and certification — while your existing provider keeps helpdesk and connectivity. We do not need to replace them to add meaningful value.
Yes. East Riding of Yorkshire, North Yorkshire, and wider Yorkshire — Hull, Harrogate, Beverley, Driffield, Scarborough, Bridlington. Managed and compliance services are remote-first, so geography matters less. On-site work has travel included within the core service area. Contact us for locations further afield.

Ready to get started?

The first step is a free 15-minute call. No commitment, no sales pitch — just a conversation about what you need and whether the numbers stack up for your situation.

Book a Free Call