Security specialists on call for your IT team
You keep the estate running. We handle the certification, testing and out-of-hours monitoring that needs specialist skills, and hand back clear actions your team can own.
What IT managers usually call us about
A tender or contract needs Cyber Essentials
Procurement wants a certificate by a fixed date. We review your answers before submission, so you pass first time, with same-day fast track once you meet the requirements.
The insurer's questionnaire keeps growing
MFA, vulnerability management, training and certification are now standard questions. We give you the evidence to answer them honestly.
Danzell tightened the rules
MFA on every cloud service, the 14-day patching rule and personal devices in scope. We find what will fail before the assessor does.
Nobody watches the alerts at 2am
Our 24/7 SOC and Microsoft 365 MDR investigate alerts out of hours and act, so a weekend compromise doesn't wait until Monday.
Plan both together
Cyber Essentials Plus has to be completed within three months of Cyber Essentials, and since April 2026 a second device sample is tested after fixes. Starting early is the difference between a calm assessment and a scramble.
Micro organisation, self-managed. All Cyber Essentials prices
Readiness check
Scope agreed against your device inventory, MFA audited across every cloud service, patch levels measured against the 14-day rule.
Cyber Essentials
You complete the questionnaire, we review it before submission and flag anything that would fail. Self-managed, assisted or fully managed.
Pre-assessment scan
An authenticated scan of every in-scope device, so third-party apps and devices missing from patching show up now.
Cyber Essentials Plus audit
External and internal testing, malware and MFA checks, mostly done remotely and scheduled around your users.
Ongoing cover your team can lean on
Take one service or combine them. Everything feeds the same DefenceScore, so you can show progress to the board.
Vulnerability management
Continuous scanning, prioritised by real-world risk, with remediation guidance for your engineers.
Microsoft 365 MDR
Detection and response on your tenant: risky sign-ins, mailbox rules, token theft, investigated around the clock.
Penetration testing
Independent infrastructure and web application tests, with findings written for the people who will fix them.
Phishing and training
Realistic simulations and short training that keep staff alert to AI-written phishing and deepfake requests.
Microsoft 365 audit
A configuration review of your tenant against current good practice, with a prioritised fix list.
Incident response retainer
Agreed response times and responders who work alongside your team when something goes wrong.
IT team FAQs
We already have an MSP. Can we still work with you?
How quickly can we get Cyber Essentials?
Is Microsoft 365 in scope?
Does Cyber Essentials Plus testing happen on site?
How long does certification last?
From the blog
Talk to one of our team
We'll be happy to talk through your requirements and work with you to protect your organisation. Already a client? Log in to the IT Team Portal.