Cyber security for small businesses
Practical protection for your website, email and accounts. We close the gaps attackers actually use against small businesses, and explain it all without the jargon.
- SSL
- DMARC
- 2FA
- Backups
Most attacks on small businesses aren’t sophisticated. They are fake invoices sent from a spoofed email address, reused passwords, an outdated plugin, or an account without two-factor sign-in.
We fix those gaps first. Then we put simple monitoring and backups in place, so if something does go wrong, you find out quickly and can recover.
Most clients pair this with hosting & care and website design & build.
Everything in the box.
Website hardening
HTTPS everywhere, security headers, up-to-date software and the removal of anything you don’t need.
Email protection
SPF, DKIM and DMARC set up on your domain, so criminals can’t easily send email that looks like it came from you.
Account security
Two-factor sign-in on email, banking-adjacent tools and admin accounts, and a password manager for the team.
Backups that restore
Automatic backups of your website and key data, and a tested way to get them back.
Monitoring
Uptime, certificate and domain expiry checks, with alerts to us before they become your problem.
Cyber Essentials readiness
Help preparing for the UK government-backed Cyber Essentials scheme, often required for public sector and larger contracts.
From first call to results.
Health check
We review your website, domain, email setup and key accounts.
Report
A short, prioritised list of risks in plain English, starting with the quickest wins.
Fix
We make the changes, or walk your team through the ones only you can do.
Keep watch
Ongoing monitoring and a yearly re-check as part of a care plan.
Security questions
Straight answers to the questions we hear most.
Yes, mostly by automated attacks that don’t care how big you are. Small businesses are attractive precisely because they tend to have fewer protections in place.
Three records on your domain that tell other email providers which servers are allowed to send email as you. Without them, it’s easy for someone to send a convincing fake invoice in your name.
Certification is issued by accredited certification bodies. We help you get ready: fixing the gaps the assessment looks for and preparing your answers.
Let’s talk about your security.
Tell us about your business and what you need. We reply within one working day with straight advice and a clear next step.