Cyber Security Packages for Business: Three Tiers, What's Included and UK Prices

Searching for a cyber security package usually means one of two things: you need a certificate for a contract, an insurer or a tender, or you have realised nobody is actually looking after security on your devices. The three packages below cover both situations. Each is built from what Connection Technologies sells today, with the published price where one exists and "quoted per business" where the price depends on your users, devices and cover hours.

The Three Cyber Security Packages

1. Cyber Essentials, fully managed (from £103/month ex VAT)

The government-backed baseline, done for you. We deploy a compliance agent across every Windows, macOS, iOS and Android device (up to five per user), automate the five technical controls, submit your IASME-validated self-assessment and own the annual renewal. Most clients are certified inside four weeks. The package includes:

• Cyber Essentials self-assessment, including the IASME submission and certification fee
• Active Protect compliance agent on up to 5 devices per user
• Third-party application patching for Windows and Mac
• 18-module Learn Lite security-awareness training
• Smart Policies templates and policy manager
• £25k cyber-liability insurance that comes with certification

Right for: most UK SMEs, and any business that needs to show Cyber Essentials for procurement, a supplier portal or an insurer. See the full Cyber Essentials service and price bands.

2. Cyber Essentials Plus (from £272/month ex VAT)

The same five controls, verified by an independent IASME-licensed assessor rather than self-attested: an external vulnerability scan of your internet-facing systems, an internal authenticated scan of a sample of every device type in scope, email and web malware tests, and account separation and MFA checks on every cloud service. The audit must be booked within three months of Cyber Essentials being issued. The bundle adds:

• Everything in the Cyber Essentials package
• Cyber Essentials Plus audit and certification by an IASME-licensed assessor
• 70+ module Learn security-awareness training with phishing simulation
• Privacy Toolbox: GDPR tools and document templates
• Optional Vulnerability Manager add-on from £18.50/month: continuous CE Plus-grade scanning and reporting on every device

Right for: suppliers to UK government, the MoD and the NHS supply chain, and businesses whose enterprise customers ask for Plus during vendor onboarding.

3. Managed IT security (quoted per business)

If nobody is monitoring your devices day to day, a certificate on its own will not keep you protected between renewals. Our business IT support packages build security into the support contract:

• Professional RMM Support: proactive monitoring of every device through Pulseway, automated security patching and updates, antivirus management and threat response, network management and priority response for critical issues, on top of an unlimited UK helpdesk and Microsoft 365 administration.
• Enterprise Managed IT: everything in Professional plus a dedicated IT manager, quarterly on-site visits, 24/7 emergency support and compliance documentation and reporting.
• Optional monitoring services: SIEM security monitoring for log collection and correlation across your network, and managed detection and response for 24/7 endpoint protection against ransomware.

These are priced on users, devices, cover hours and the security stack you need, so they are quoted per business. Fully managed IT packages commonly fall around £55–£65 per user per month, and Cyber Essentials or Cyber Essentials Plus can be rolled into the same contract.

Right for: businesses without in-house IT, or with a stretched IT person who needs monitoring, patching and threat response covered.

What Each Package Includes

Cyber Security Package Prices by Business Size

Certification pricing is published by user band on our Cyber Essentials page. All prices are ex VAT, UK only; monthly orders run on a 12-month term and renewal falls exactly 12 months from the order date.

Managed IT security is not priced by band because the cost depends on how many devices and servers we monitor, your support hours and whether you need SIEM or MDR. Ask for a scoped quote and we will show the certification and support lines separately so you can compare them with any other package.

Which Package Do You Need?

• A customer, tender or insurer has asked for Cyber Essentials. Start with the managed Cyber Essentials package. It is the fastest route to a certificate and covers the five controls most attacks exploit.
• The contract specifies Cyber Essentials Plus. UK government, MoD and NHS supply-chain work usually does. Buy the Plus bundle from the start so the audit is booked inside the three-month window.
• Nobody looks after your devices day to day. Choose managed IT security (Professional RMM Support or Enterprise Managed IT) and add the certification you need. Monitoring and patching are what keep you compliant between renewals.
• You already have an IT person or provider. Buy Cyber Essentials or Plus as a standalone package, or ask about co-managed IT support if they need monitoring and threat-response cover.
• You handle sensitive data or face regulatory scrutiny. Add continuous scanning (Vulnerability Manager) and consider SIEM monitoring or managed detection and response, both quoted per business.

What Any Business Cyber Security Package Should Cover

Whichever provider you use, check the package covers the five Cyber Essentials controls (firewalls, secure configuration, access control including multi-factor authentication, malware protection and patch management), plus the two things the scheme does not mandate but every business needs: tested backups and regular staff awareness training. If a package is priced without saying which devices, users and controls it covers, ask before you buy. Our guide to cyber security services explains what each service does and what it typically costs in the UK.

How to Buy

1. Tell us your headcount through the Cyber Essentials quote form, or ask for a managed IT quote if you need support as well.
2. Get a fixed price within one working day, with certification and support itemised.
3. We deploy the compliance agent to every device and remediate the technical controls.
4. We submit your IASME assessment; most clients are certified inside four weeks. For Plus, the audit is booked once Cyber Essentials is issued.
5. We own the renewal 12 months later, so the certificate does not lapse.

Frequently Asked Questions