Most providers sell you a server and leave the security to you, or sell you security and have no say over the infrastructure. We do both, so nothing falls between the two.
Every package includes the hosting. The difference is how much of the running and defending we take on. You can also buy any single service on its own. The packages simply price the common combinations sensibly.
Hosting, hardened and monitored
Pricing on request
Request a quoteHosting plus a security team
Pricing on request
Request a quoteResilient, audited, always covered
Priced to the estate
Talk to usAnything marked as an add-on can be bought separately at any tier. The packages are a starting point, not a cage.
| Capability | Essentials | Managed | Enterprise |
|---|---|---|---|
| Infrastructure | |||
| Server hostingDedicated or virtual, single-tenant hardware | ✓ | ✓ | ✓ |
| Hardened OS buildCIS-aligned baseline, key-only SSH, no default credentials | ✓ | ✓ | ✓ |
| Host firewall & fail2banBrute-force defence configured at handover | ✓ | ✓ | ✓ |
| Automatic security updatesUnattended upgrades on an agreed window | ✓ | ✓ | ✓ |
| Backups with tested restoresRestores verified on a schedule, not just jobs run | ✓ | ✓ | ✓ |
| Off-site backup replicationSecond copy on separate infrastructure | Add-on | ✓ | ✓ |
| High availabilityClustering, load balancing, automated failover | — | Add-on | ✓ |
| DDoS mitigationNetwork-edge filtering | ✓ | ✓ | ✓ |
| CDN & edge deliveryOrigin shielding, cache tuning, geo-routing | — | Add-on | ✓ |
| Monitoring & response | |||
| Infrastructure monitoringUptime, capacity, disk, service health | ✓ | ✓ | ✓ |
| Security monitoringHost IDS, file-integrity monitoring, audit-log shipping | — | ✓ | ✓ |
| 24/7 analyst triageSomeone looking at it, not just an alert queue | — | ✓ | ✓ |
| Threat huntingProactive search for what alerts missed | — | — | ✓ |
| Incident response retainerGuaranteed responder availability | — | Add-on | ✓ |
| Named engineer rotationYou know who is on call | — | ✓ | ✓ |
| Assurance | |||
| Vulnerability scanningRecurring authenticated scans | Add-on | ✓ | ✓ |
| Penetration testingManual, objective-led testing | — | Annual | Bi-annual |
| Free retest after remediationVerification that fixes worked | — | ✓ | ✓ |
| Cyber Essentials supportPreparation and submission | Add-on | ✓ | ✓ |
| ISO 27001 readinessGap analysis, ISMS build, internal audit | — | Add-on | ✓ |
| Quarterly DR drillRehearsed recovery, documented outcome | — | — | ✓ |
| Working with us | |||
| Support channelHow you reach us | Email + Slack/Teams | Dedicated channel | |
| P1 response targetCritical issues | 4 hours | 30 minutes | 15 minutes |
| Operations reviewScheduled review of the estate | — | Quarterly | Monthly |
| Blameless postmortemsWritten up within 48 hours | — | ✓ | ✓ |
| Runbook & handover docsYour team can operate it without us | ✓ | ✓ | ✓ |
Engagements that sit outside a monthly retainer, quoted individually, delivered by the same engineers.
Active-active and active-passive topologies built and proven under controlled failure, not assumed to work.
Retire the flat VPN. Per-application access tied to identity and device posture, with the edge doing the filtering.
Scanning is easy; knowing which twelve of four thousand findings matter is the work. We do the triage.
Tell us what you run today and what you are obliged to demonstrate. We will recommend a tier, including the cheapest one that genuinely covers you.
Talk it through