Not every security problem needs a contract

Consulting with James: cyber security help, one job at a time

No retainer and no monthly tie-in. You pick the job, I quote it as a fixed price before anything starts, and you get me directly — not a salesperson and not a junior — plus a written report at the end.

UK-based, since 2010 CISSP certified Price agreed before I start One job at a time, no lock-in 25 years in security Remote, or on site across the South East
Cybersecurity Company of the Year — West Sussex Business Awards 2025 Security Solution Specialists of the Year — E2 Media Awards 2025

Fixed prices, agreed before I start

What do you need answering?

No forms and no discovery call before you can see a number. Find the question closest to yours, see what it costs, and know exactly what you get. Not listed? Ask anyway — it is priced the same way.

First — how many staff?

Set your headcount and the prices below are yours.

10
150100150200

Ask James

Remote only answered within 2 working days

£150

Per question, whatever your size

Sound familiar?

  • “Is this email a scam?”
  • “Is this quote we have been sent any good?”
  • “A client wants our security policy — what do I send?”
  • “We have been told we need this. Do we really?”

One question per booking.

You get: one question answered properly and in writing — my reasoning, not just a verdict.

Ask your question

Second Opinion

Remote only one worry, checked not guessed

£250

Fixed price

Sound familiar?

  • “What can a hacker see about us from the outside?”
  • “Is our IT provider actually covering security?”
  • “We had a scare — are we alright?”
  • “We failed a client’s audit. What now?”

Pick the one that is worrying you.

You get: that one worry looked into properly — my honest view in writing, and what I would do about it.

Get a second opinion
Most popular

Security Review

Remote · one system, gone through properly

£450

Fixed price

Sound familiar?

  • “Is our Microsoft 365 set up safely — and if not, what do we change?”
  • “Is our firewall configured correctly?”
  • “Would we pass Cyber Essentials, and what is stopping us?”
  • “Are our backups really working?”

One system per review. Need two? Book two, or step up to the full review.

You get: that system gone through properly, and a plain-English list of what to change, in the order it matters.

Book a review

Full Business Review

Remote · your whole business

£795

Fixed price

Sound familiar?

  • “Where are we exposed, across the whole business?”
  • “What do we actually need to do to get Cyber Essentials?”
  • “If we got hit tomorrow, would we survive it?”
  • “Are we spending money on the right things?”

All of it, in one go.

You get: everything above across the whole business, a full report, and a follow-up call.

Book the full review

Once I have quoted, the price does not move

We have a free 30-minute call first so I know what I am walking into. After that the number is fixed — if the job turns out to be bigger than it looked, that is my problem, not your invoice.

No clock watching · no “billable” emails · no surprise extras

Want me on site instead?

Remote covers most of this work perfectly well, and it is quicker to book. When it genuinely helps to be in the building, add a site visit to a Security Review or a Full Business Review. A visit takes a full day, so it is priced as one.

Travel — trains, flights, taxis and parking — is charged back at cost, agreed with you before I book anything.

+£450 per visit · Sussex, Surrey, Hampshire & Kent

Doing this more than once a year?

Everything above is a snapshot — a good look at where you stand on the day. If you would rather it was watched continuously, most of this work is already included in a QuantumCare plan, along with monthly proof that you are protected.

Already on QuantumCare? You do not need to book any of the above. It is covered.

See QuantumCare

All prices exclude VAT. A site visit covers one full day on site; anything longer, or outside the South East, is quoted individually. More than 200 staff? The pricing carries on in the same way — ask and I will confirm your number. Need something that is not on this list? Bigger projects, out-of-hours work and incident support are quoted individually — tell me what you are dealing with.

How I do checks and reviews

I do not just work down a checklist. I look at your business the way someone breaking into it would.

Most security reviews are a tick-list exercise. Someone works through a form, marks off what is there, and hands you a pass. I do that part too, because it matters — it is what gets you through Cyber Essentials and past your client’s audit.

But I am also a qualified ethical hacker, and that changes what I am looking for. What is exposed to the internet that you have forgotten about? Which account would I go for first, and what would it get me? Where does one small weakness turn into a way in?

That is the difference between a report telling you that you are compliant, and one telling you where you are actually at risk.

A checklist finds what is missing Settings not turned on, updates not applied, boxes not ticked.
A hacker’s eye finds what is reachable The forgotten login, the exposed service, the shortcut someone took.
You get both, in one price Ranked in the order that matters, in plain English, with no upselling attached.

How it works

Five steps, and nothing happens until you say yes

No onboarding, no contract to sign, no account manager. Here is the whole process from the first email to the invoice.

1

Tell me what you need

An email or the booking form is enough. A sentence about what is worrying you is plenty to start with.

2

A free 30-minute call

So I understand what I would be walking into, and you get a feel for whether you want to work with me. No charge, and no obligation either way.

3

A fixed price, in writing

What is covered, what is not, and what it costs. Nothing starts until you reply and say go ahead.

4

I do the work

Remotely in most cases, on a date we agree. If I need access to anything, I will tell you exactly what and why before we start.

5

You get the report

Plain English, with what to change and in what order. Yours to keep, and to send to whoever needs to see it.

Nothing to pay up front

No deposit, no card details, nothing taken when you book. I invoice towards the end of the month, after the work is done and you have the report in your hands.

Who you’ll be working with

James Batt

Founder, Systems Secure Ltd

Systems Secure has been trading since 2010. In that time the thing that has changed most is not the threats — it is how small a business now has to be before it is worth attacking.

Most of my work is QuantumCare, where I look after a small number of clients month after month. But not every business wants a plan, and not every problem needs one. Plenty of people just want something looked at properly, once, by someone who has no reason to sell them anything afterwards.

That is what this page is for. You choose what you want looked at, you see the price before you commit to anything, and I do the work myself. If it turns out you are in decent shape already, that is what I will tell you — and you will have it in writing to show whoever needed convincing.

When you book, you get me.

Qualifications

What the letters actually mean, since nobody explains them.

CISSP

Certified Information Systems Security Professional

The senior, internationally recognised security qualification. Requires years of documented experience before you can even sit it.

C|CISO

Certified Chief Information Security Officer

Focused on running a security programme — governance, risk and reporting to a board, rather than configuring the technology.

C|EH

Certified Ethical Hacker

Formally trained in the techniques attackers use. It is difficult to defend against methods you have never seen from the other side.

NCSP

Certified NIST Cybersecurity Professional — Practitioner

Qualified to build and run a security programme against the NIST framework — the structure insurers and larger clients increasingly expect to see behind your answers.

Security+

CompTIA Security+

The foundational security certification, and a common baseline requirement in government and defence supply chains.

Recognition

Cybersecurity Company of the Year

Winner — West Sussex Business Awards 2025

Security Solution Specialists of the Year

Winner — E2 Media Awards 2025

Systems Secure Ltd · trading since 2010 · company registration 7295869 · Copthorne, West Sussex

STILL NOT SURE?

Questions you're probably asking

The main ones that come up on almost every call, answered here so you don’t have to book one to find out.

How much does ad-hoc cyber security consulting cost?

Systems Secure offers four fixed-price cyber security services for UK small businesses: Ask James at £150 per question, a Second Opinion at £250, a Security Review at £450, and a Full Business Review at £795. All prices exclude VAT and are based on a business of up to 25 staff. Larger businesses pay more, and the price is always agreed in writing before any work starts.

Do you charge by the hour or by the day?

No. Systems Secure prices ad-hoc cyber security work as fixed-price jobs, not hourly or daily rates. You are quoted a single price for the piece of work before it begins, and that price does not change if the job takes longer than expected. There is no clock running and no billable time added afterwards.

Can I hire a cyber security consultant for just one question?

Yes. Ask James is a £150 fixed-price service for a single cyber security question, answered in writing by James Batt within two working days. It suits questions like whether an email is a scam, whether a supplier's security claims stand up, or how to answer a client's security questionnaire. The price is the same whatever the size of your business.

What is included in a Security Review?

A Systems Secure Security Review is a £450 fixed-price review of one system, carried out remotely. Typical subjects are Microsoft 365 settings, a firewall configuration, a Cyber Essentials gap check, or backups including a tested restore. You receive a written report in plain English listing what to change, ranked in the order it matters. One system is covered per review.

What is the difference between a Security Review and a Full Business Review?

A Security Review covers one system, such as Microsoft 365 or your firewall, and costs £450. A Full Business Review covers the whole business end to end, costs £795, and includes a full written report plus a follow-up call. Both are fixed prices for a business of up to 25 staff, carried out remotely, and both are provided by Systems Secure.

Do prices change depending on how many staff we have?

Yes. Systems Secure prices are built for a business of up to 25 staff. Above that, the price rises with headcount, because more staff means more accounts, more devices and a longer report. Four times the staff is roughly double the price rather than four times, and the exact figure for your headcount is shown on the pricing page before you enquire.

Do your prices include VAT?

No. All Systems Secure consulting prices are quoted excluding VAT. VAT is added to the invoice at the prevailing UK rate. Most business clients reclaim it.

When do I have to pay?

Nothing is paid up front. Systems Secure takes no deposit and no card details at the time of booking. The work is carried out first, you receive the report, and the invoice follows towards the end of the month. The invoice needs to be paid within 30. days

Do I have to sign a contract or commit to a monthly plan?

No. Systems Secure ad-hoc consulting is bought one job at a time, with no contract, no retainer and no minimum commitment. You are quoted for a single piece of work, and once it is delivered there is nothing further to pay and nothing to cancel. A monthly managed service, QuantumCare, exists separately for businesses that want ongoing cover, but it is never a condition of ad-hoc work.

Will you try to sell me something afterwards?

No. Systems Secure sells no security products and takes no commission from vendors, so there is nothing to push. If a review finds that your security is already in reasonable shape, that is what the report will say. Any recommendation is written as an action you can take yourself or give to your existing IT provider.

Do you work with our existing IT provider?

Yes. Systems Secure is regularly brought in alongside an existing IT company or internal IT person, not instead of them. Reports are written so they can be handed straight to whoever looks after your systems, with the actions ranked in priority order. Many clients use an independent review specifically to check that the work their provider is doing is enough.

Do you visit our premises, or is everything remote?

Most Systems Secure consulting work is carried out remotely, which is faster to book and covers the work perfectly well. A site visit can be added to a Security Review or a Full Business Review for £450, covering one full day on site across Sussex, Surrey, Hampshire and Kent. Travel such as trains, flights, taxis and parking is charged at cost and agreed in advance. Ask James and Second Opinion are always remote.

What areas of the UK do you cover?

Systems Secure is based in Copthorne, West Sussex, and has been trading since 2010. Remote consulting is available anywhere in the UK. On-site visits are priced for Sussex, Surrey, Hampshire and Kent, and locations beyond the South East are quoted individually.

What qualifications does James Batt hold?

James Batt, founder of Systems Secure Ltd, holds CISSP (Certified Information Systems Security Professional), C|CISO (Certified Chief Information Security Officer), C|EH (Certified Ethical Hacker), NCSP Practitioner (Certified NIST Cybersecurity Professional) and CompTIA Security+. Systems Secure was named Cybersecurity Company of the Year at the West Sussex Business Awards 2025 and Security Solution Specialists of the Year at the E2 Media Awards 2025.

How is your review different from a standard security checklist?

Most security reviews work down a checklist of settings. Systems Secure does that too, because it is what passes Cyber Essentials and client audits, but James Batt is also a Certified Ethical Hacker and examines the business the way an attacker would: what is exposed to the internet, which account would be targeted first, and where one small weakness becomes a way in. A checklist finds what is missing; that approach finds what is reachable.

Is a Security Review the same as a penetration test?

No. A Systems Secure Security Review examines how a system is configured and reports what should be changed. A penetration test is a separate, more intensive exercise in which a tester actively attempts to break in, and typically costs several thousand pounds. A review is the appropriate starting point for most UK small businesses, and will identify whether a penetration test is worth the money.

Can you help us get Cyber Essentials?

Yes. A Systems Secure Security Review at £450 includes a Cyber Essentials gap check, which identifies what would currently stop you passing. A Full Business Review at £795 covers Cyber Essentials preparation across the whole business. Both are fixed-price and delivered with a written list of the changes needed.

Do we get a written report, and can we share it?

Yes. Every Systems Secure consulting job includes a written report or written answer, in plain English rather than technical jargon. The report is yours to keep and to share with whoever needs it, including your IT provider, your insurer, your accountant or a client who has asked for evidence of your security.

What happens if we need the problems fixed afterwards?

The report is written so that the actions can be carried out by your existing IT provider or in-house IT person, at no further cost from Systems Secure. If you would prefer the fixes done for you, that is quoted separately as its own fixed-price job. There is no obligation, and nothing is added to your invoice without being agreed first.

We are already QuantumCare clients. Do we need to book this?

No. QuantumCare, the Systems Secure managed cyber security service, already includes most of the work covered by these ad-hoc reviews, carried out continuously rather than as a one-off snapshot. QuantumCare clients do not need to book a Security Review or a Full Business Review separately.

How quickly can you start?

The start date is agreed on the free 15-minute call, before any price is confirmed. Ask James questions are answered in writing within two working days.

Cost, payment and commitment

How much does ad-hoc cyber security consulting cost?

Systems Secure offers four fixed-price cyber security services for UK small businesses: Ask James at £150 per question, a Second Opinion at £250, a Security Review at £450, and a Full Business Review at £795. All prices exclude VAT and are based on a business of up to 25 staff. Larger businesses pay more, and the price is always agreed in writing before any work starts.

Do you charge by the hour or by the day?

No. Systems Secure prices ad-hoc cyber security work as fixed-price jobs, not hourly or daily rates. You are quoted a single price for the piece of work before it begins, and that price does not change if the job takes longer than expected. There is no clock running and no billable time added afterwards.

Do prices change depending on how many staff we have?

Yes. Systems Secure prices are built for a business of up to 25 staff. Above that, the price rises with headcount, because more staff means more accounts, more devices and a longer report. Four times the staff is roughly double the price rather than four times, and the exact figure for your headcount is shown on the pricing page before you enquire.

Do your prices include VAT?

No. All Systems Secure consulting prices are quoted excluding VAT. VAT is added to the invoice at the prevailing UK rate. Most business clients reclaim it.

When do I have to pay?

No. Systems Secure ad-hoc consulting is bought one job at a time, with no contract, no retainer and no minimum commitment. You are quoted for a single piece of work, and once it is delivered there is nothing further to pay and nothing to cancel. A monthly managed service, QuantumCare, exists separately for businesses that want ongoing cover, but it is never a condition of ad-hoc work.

Choosing the right service

Can I hire a cyber security consultant for just one question?

Yes. Ask James is a £150 fixed-price service for a single cyber security question, answered in writing by James Batt within two working days. It suits questions like whether an email is a scam, whether a supplier's security claims stand up, or how to answer a client's security questionnaire. The price is the same whatever the size of your business.

What is included in a Security Review?

A Systems Secure Security Review is a £450 fixed-price review of one system, carried out remotely. Typical subjects are Microsoft 365 settings, a firewall configuration, a Cyber Essentials gap check, or backups including a tested restore. You receive a written report in plain English listing what to change, ranked in the order it matters. One system is covered per review.

What is the difference between a Security Review and a Full Business Review?

A Security Review covers one system, such as Microsoft 365 or your firewall, and costs £450. A Full Business Review covers the whole business end to end, costs £795, and includes a full written report plus a follow-up call. Both are fixed prices for a business of up to 25 staff, carried out remotely, and both are provided by Systems Secure.

Is a Security Review the same as a penetration test?

No. A Systems Secure Security Review examines how a system is configured and reports what should be changed. A penetration test is a separate, more intensive exercise in which a tester actively attempts to break in, and typically costs several thousand pounds. A review is the appropriate starting point for most UK small businesses, and will identify whether a penetration test is worth the money.

We are already QuantumCare clients. Do we need to book this?

No. QuantumCare, the Systems Secure managed cyber security service, already includes most of the work covered by these ad-hoc reviews, carried out continuously rather than as a one-off snapshot. QuantumCare clients do not need to book a Security Review or a Full Business Review separately.

What you actually get

How is your review different from a standard security checklist?

Most security reviews work down a checklist of settings. Systems Secure does that too, because it is what passes Cyber Essentials and client audits, but James Batt is also a Certified Ethical Hacker and examines the business the way an attacker would: what is exposed to the internet, which account would be targeted first, and where one small weakness becomes a way in. A checklist finds what is missing; that approach finds what is reachable.

Can you help us get Cyber Essentials?

Yes. A Systems Secure Security Review at £450 includes a Cyber Essentials gap check, which identifies what would currently stop you passing. A Full Business Review at £795 covers Cyber Essentials preparation across the whole business. Both are fixed-price and delivered with a written list of the changes needed.

Do we get a written report, and can we share it?

Yes. Every Systems Secure consulting job includes a written report or written answer, in plain English rather than technical jargon. The report is yours to keep and to share with whoever needs it, including your IT provider, your insurer, your accountant or a client who has asked for evidence of your security.

What if you find nothing wrong?

Then that is what the report says, and the price does not change. Systems Secure charges for the review, not for the number of problems found. A report confirming that your security is in reasonable shape is worth owning — it is evidence you can hand to a client, an insurer or a board that has asked the question. In practice a review at this level usually finds something worth changing, but occasionally there is nothing urgent, and being told so plainly is the point of paying someone who has nothing to sell you afterwards.

What happens if we need the problems fixed afterwards?

The report is written so that the actions can be carried out by your existing IT provider or in-house IT person, at no further cost from Systems Secure. If you would prefer the fixes done for you, that is quoted separately as its own fixed-price job. There is no obligation, and nothing is added to your invoice without being agreed first.

Confidentiality and your information

Will you sign an NDA?

Yes. Systems Secure will sign your non-disclosure agreement before any work starts, at no charge. If you do not have one, a mutual confidentiality agreement can be provided instead. Client names are never used as references, case studies or logos on this site without written permission first — which is why you will not find a client list on it.

Who else sees our information?

Nobody. Every Systems Secure consulting job is carried out by James Batt personally. The work is not subcontracted, offshored, or handed to an associate, and findings are never shared with vendors, insurers or anyone else. The report goes to you and to no one else, and what you then do with it is entirely your decision.

Working notes are kept for six months in case you come back with a question, then deleted.

How the work happens

Do you visit our premises, or is everything remote?

Most Systems Secure consulting work is carried out remotely, which is faster to book and covers the work perfectly well. A site visit can be added to a Security Review or a Full Business Review for £450, covering one full day on site across Sussex, Surrey, Hampshire and Kent. Travel such as trains, flights, taxis and parking is charged at cost and agreed in advance. Ask James and Second Opinion are always remote.

What areas of the UK do you cover?

Systems Secure is based in Copthorne, West Sussex, and has been trading since 2010. Remote consulting is available anywhere in the UK. On-site visits are priced for Sussex, Surrey, Hampshire and Kent, and locations beyond the South East are quoted individually.

Do you work with our existing IT provider?

Yes. Systems Secure is regularly brought in alongside an existing IT company or internal IT person, not instead of them. Reports are written so they can be handed straight to whoever looks after your systems, with the actions ranked in priority order. Many clients use an independent review specifically to check that the work their provider is doing is enough.

How quickly can you start?

The start date is agreed on the free 30-minute call, before any price is confirmed. Ask James questions are answered in writing within two working days.

Who you're dealing with

What qualifications does James Batt hold?

James Batt, founder of Systems Secure Ltd, holds CISSP (Certified Information Systems Security Professional), C|CISO (Certified Chief Information Security Officer), C|EH (Certified Ethical Hacker), NCSP Practitioner (Certified NIST Cybersecurity Professional) and CompTIA Security+. Systems Secure was named Cybersecurity Company of the Year at the West Sussex Business Awards 2025 and Security Solution Specialists of the Year at the E2 Media Awards 2025.

Will you try to sell me something afterwards?

No. Systems Secure sells no security products and takes no commission from vendors, so there is nothing to push. If a review finds that your security is already in reasonable shape, that is what the report will say. Any recommendation is written as an action you can take yourself or give to your existing IT provider.

The next step

One conversation, and you’ll know where you actually stand

You don’t have to decide anything on the call. We tell you what’s exposed, and you keep the findings either way — even if we’re not the right fit.

No obligation · No sales script · You keep the findings either way

James Batt · CISSP, C|CISO Founder, Systems Secure Ltd

Image

Innovation

Fresh, creative solutions.

Excellence

Excellence

FOLLOW US

Systems Secure® Limited·Registered in England and Wales, company no. 07295869 6 The Meadow, Copthorne, West Sussex RH10 3RG·07702 896 910·[email protected]

How to check you’re dealing with us

Serving Crawley, East Grinstead, Brighton and businesses across Sussex · UK-wide remote support

Copyright 2026. Systems Secure. All Rights Reserved.