How would you like to book your review?

A Cyber Security Review is a free, no-obligation 30-minute conversation with an experienced security specialist about how your business is currently protected. We look at the areas that cause most SME breaches: email and Microsoft 365 configuration, password and multi-factor authentication practice, device and endpoint protection, remote access, backups, patching and staff awareness. You come away with a short, prioritised view of your main risks and sensible next steps. It is a diagnostic conversation rather than a formal audit or penetration test, and it is deliberately practical — the aim is that you can act on it whether or not you work with us.

Nothing needs preparing. Book a slot in the calendar or send the enquiry form and we will confirm a time, usually within a working day. The review runs by video call or phone, and on site if you are near our Ripon or Tortola offices. We ask questions about how your business actually works — how many staff, what systems you use, who has admin access, how you handle invoices and passwords — and translate that into a risk picture. Afterwards you receive a written summary with prioritised recommendations. If you would like a quote, we include one; if not, we do not chase you.

Yes, it is free and there is no obligation whatsoever. We do not ask for payment details, we do not require a contract, and you are not committing to a proposal by booking. The reason we offer it is simple: most SMEs cannot judge a security provider from a website, and the most convincing thing we can do is be useful before any money changes hands. Plenty of businesses take the summary and act on it themselves or with their existing IT provider. If it later makes sense to work together, that conversation happens on your timetable, not ours.

The call itself takes around 30 minutes, and we keep to that. Booking is immediate through the online calendar, and the written summary usually follows within a couple of working days. If your environment is more complex — several sites, industrial systems, or a compliance deadline such as a tender or insurance renewal — we may suggest a longer follow-up session or a full cyber security assessment, and we will tell you that clearly rather than stretching a free call. For most SMEs, half an hour is enough to identify the handful of gaps that matter most.

Ideally whoever makes decisions about IT spend, plus anyone who knows the day-to-day detail. In a small business that is often the owner or managing director on their own. In larger SMEs it might be a finance director with an office manager, or your IT provider joining as well — we are happy for them to attend and we work alongside existing IT partners regularly. You do not need a technical person present. Our questions are about how your business operates, and we translate the technical implications for you rather than expecting you to know them.

No. After the review you receive a prioritised summary of risks and recommendations. If you asked for pricing, we send a fixed-price quote for the specific work discussed, such as Cyber Essentials certification, awareness training or managed endpoint protection and monitoring. There is no pressure, no artificial deadline and no follow-up campaign. If you would prefer to try something yourself first, the Cyber Shield free trial runs for 14 days without a credit card and without a sales call. We would rather you started with the right thing at the right time.

Yes — small teams often get the most from it, because they rarely have anyone whose job is to think about security. We regularly review businesses of five to twenty people, including sole practitioners who need Cyber Essentials for a client contract. The conversation is scaled to your situation: no enterprise frameworks, no jargon, just the specific things putting your business at risk and what they would cost to fix. Many small firms find that two or three low-cost changes — multi-factor authentication, better backups and staff training — remove most of their exposure.

The free review is a 30-minute conversation based on what you tell us; a paid cyber security assessment is a structured examination of your actual environment, including configuration checks, external exposure, user and access review and a detailed written report with a remediation plan. The review is the right starting point when you want direction, a second opinion or a price. An assessment is the right choice when you need evidence for a client, an insurer or a board, or when you already know something is wrong. Most clients start with the review and move to an assessment only if it is genuinely needed.