Home/Pricing/Protected Operations

11–25 people

Protected Operations

Everything in Foundations, plus a security baseline that is held and audited rather than set once, and the vendor management that comes with real complexity.

Who it is for

Enough people that you cannot see everything, and enough at stake that an incident would be a board-level event rather than a bad afternoon.

Bands are by headcount because that is what actually drives the work. If you are on a boundary we will put you in the lower one and move you when it stops being true.

Monthly$900 a month, flat
OnboardingQuoted after assessment
SupportUnlimited, business hours, Central time
Minimum termTwelve months, then month to month
What is included

Everything, listed.

  • Everything in Foundations

    The whole stage stays in place.

  • Security baseline held and audited

    Written down, measured against, and reported on, not configured once and forgotten.

  • Email protection and phishing simulation

    Because business email compromise is the loss category that hits companies your size hardest.

  • Vendor and licence management

    We become the person who calls your phone provider, your software vendor, your internet company.

  • Quarterly roadmap session

    What is ageing, what needs replacing, what it will cost and when.

  • Evidence for insurers

    The controls carriers now treat as a minimum, documented so renewals stop being stressful.

Evidence

Why this matters at your size.

Required

MFA on all remote, privileged and sensitive access is now a minimum for insurability, with critical patches inside three to seven days.

Marsh, twelve key cyber controls

$38k

is the median insured cost of an incident at a small business, but the worst 2.5% of cases pass 7% of annual revenue.

Verizon Breach Impact Study, 2026

52%

of small businesses have a formal cyber security policy, down from 59% the year before.

UK Government Cyber Security Breaches Survey, 2026

What this is not

Said plainly, before you buy.

  • Not twenty-four-hour coverage. Say so on the call if you need it.
  • Not a substitute for an external audit where one is genuinely required.
Next step

Is Protected Operations the right band?

Thirty minutes. We will tell you which band you belong in and what the onboarding would actually involve.

What happens on the call

  1. You talk, we listen

    Ten minutes on what is actually going wrong and what you have already tried.

  2. We name the first move

    One recommendation, in order of priority, with the reason behind it.

  3. You get a number

    A real price range before you leave the call. No proposal cycle, no chasing.

No sales script. No obligation. If we are not the right fit we will say so and point you somewhere better.

Visual directionThe Ledger