Cybersecurity
Protect Plus
For firms with customer data or tenders to win: Standard plus quarterly access reviews, policy upkeep and Cyber Essentials kept current.
For clinics, law firms, agencies and other businesses that hold customer data or need to win tenders. Protect Plus adds compliance upkeep on top of Standard: quarterly access reviews with your sign-off, Cyber Essentials evidence kept ready for renewal and policies updated each year.
What's included
- Everything in Protect Standard
- Quarterly access review: who can see what, with your sign-off
- Cyber Essentials evidence pack kept up to date for renewal
- Security policies and incident plan updated each year
- Half-yearly online tabletop exercise pack
- Up to 2 hours of security changes a month
- Reply within 4 business hours
- Minimum 3 users · cancel any time
What you get
Illustrative exampleNot included
- Vendor and certification fees
- Penetration testing or managed SOC monitoring (CSA-licensed providers only)
- Acting as your DPO or legal adviser
What we need from you
- Admin access to the tools covered
- A named person to approve access reviews
How it goes
- 1
Order & brief
Answer a few questions about your business — about 3 minutes.
- 2
Pay securely
PayNow or card through Stripe. Receipt issued straight away.
- 3
Give access
We send step-by-step instructions to invite us — no passwords by email.
- 4
Review & done
We deliver, you review on your order page, we refine until it's right.
Protect Plus — questions
It keeps your evidence pack current for renewal. Getting ready the first time is CSA Cyber Essentials Readiness, and certification is decided by the certification body.
Up to 2 hours a month of security changes, such as a new sharing rule or onboarding a new tool.
No. Both need a CSA licence. We can point you to licensed providers and prepare your systems before they start.
More in cybersecurity
Cybersecurity
Security Health Check
A written review of your domain, website, email and Microsoft 365 / Google Workspace settings — with a fix list.
3 business days
Cybersecurity
Microsoft 365 / Google Security Lockdown
Turn on MFA for everyone, block phishing and risky sign-ins, and stop accidental file sharing.
5 business days
Cybersecurity
Website Security Hardening
Lock down WordPress or your CMS: updates, firewall, backups, login protection and security headers.
3 business days