Not every security problem needs a contract
No retainer and no monthly tie-in. You pick the job, I quote it as a fixed price before anything starts, and you get me directly — not a salesperson and not a junior — plus a written report at the end.
Fixed prices, agreed before I start
No forms and no discovery call before you can see a number. Find the question closest to yours, see what it costs, and know exactly what you get. Not listed? Ask anyway — it is priced the same way.
Set your headcount and the prices below are yours.
Remote only answered within 2 working days
£150
Per question, whatever your size
Sound familiar?
One question per booking.
You get: one question answered properly and in writing — my reasoning, not just a verdict.
Ask your questionRemote only one worry, checked not guessed
£250
Fixed price
Sound familiar?
Pick the one that is worrying you.
You get: that one worry looked into properly — my honest view in writing, and what I would do about it.
Get a second opinionRemote · one system, gone through properly
£450
Fixed price
Sound familiar?
One system per review. Need two? Book two, or step up to the full review.
You get: that system gone through properly, and a plain-English list of what to change, in the order it matters.
Book a reviewRemote · your whole business
£795
Fixed price
Sound familiar?
All of it, in one go.
You get: everything above across the whole business, a full report, and a follow-up call.
Book the full reviewWe have a free 30-minute call first so I know what I am walking into. After that the number is fixed — if the job turns out to be bigger than it looked, that is my problem, not your invoice.
No clock watching · no “billable” emails · no surprise extras
Remote covers most of this work perfectly well, and it is quicker to book. When it genuinely helps to be in the building, add a site visit to a Security Review or a Full Business Review. A visit takes a full day, so it is priced as one.
Travel — trains, flights, taxis and parking — is charged back at cost, agreed with you before I book anything.
Everything above is a snapshot — a good look at where you stand on the day. If you would rather it was watched continuously, most of this work is already included in a QuantumCare plan, along with monthly proof that you are protected.
Already on QuantumCare? You do not need to book any of the above. It is covered.
All prices exclude VAT. A site visit covers one full day on site; anything longer, or outside the South East, is quoted individually. More than 200 staff? The pricing carries on in the same way — ask and I will confirm your number. Need something that is not on this list? Bigger projects, out-of-hours work and incident support are quoted individually — tell me what you are dealing with.
How I do checks and reviews
Most security reviews are a tick-list exercise. Someone works through a form, marks off what is there, and hands you a pass. I do that part too, because it matters — it is what gets you through Cyber Essentials and past your client’s audit.
But I am also a qualified ethical hacker, and that changes what I am looking for. What is exposed to the internet that you have forgotten about? Which account would I go for first, and what would it get me? Where does one small weakness turn into a way in?
That is the difference between a report telling you that you are compliant, and one telling you where you are actually at risk.
How it works
No onboarding, no contract to sign, no account manager. Here is the whole process from the first email to the invoice.
An email or the booking form is enough. A sentence about what is worrying you is plenty to start with.
So I understand what I would be walking into, and you get a feel for whether you want to work with me. No charge, and no obligation either way.
What is covered, what is not, and what it costs. Nothing starts until you reply and say go ahead.
Remotely in most cases, on a date we agree. If I need access to anything, I will tell you exactly what and why before we start.
Plain English, with what to change and in what order. Yours to keep, and to send to whoever needs to see it.
No deposit, no card details, nothing taken when you book. I invoice towards the end of the month, after the work is done and you have the report in your hands.

James Batt
Founder, Systems Secure Ltd
Systems Secure has been trading since 2010. In that time the thing that has changed most is not the threats — it is how small a business now has to be before it is worth attacking.
Most of my work is QuantumCare, where I look after a small number of clients month after month. But not every business wants a plan, and not every problem needs one. Plenty of people just want something looked at properly, once, by someone who has no reason to sell them anything afterwards.
That is what this page is for. You choose what you want looked at, you see the price before you commit to anything, and I do the work myself. If it turns out you are in decent shape already, that is what I will tell you — and you will have it in writing to show whoever needed convincing.
When you book, you get me.
What the letters actually mean, since nobody explains them.
CISSP
The senior, internationally recognised security qualification. Requires years of documented experience before you can even sit it.
C|CISO
Focused on running a security programme — governance, risk and reporting to a board, rather than configuring the technology.
C|EH
Formally trained in the techniques attackers use. It is difficult to defend against methods you have never seen from the other side.
NCSP
Qualified to build and run a security programme against the NIST framework — the structure insurers and larger clients increasingly expect to see behind your answers.
Security+
The foundational security certification, and a common baseline requirement in government and defence supply chains.
Winner — West Sussex Business Awards 2025
Winner — E2 Media Awards 2025
Systems Secure Ltd · trading since 2010 · company registration 7295869 · Copthorne, West Sussex
The main ones that come up on almost every call, answered here so you don’t have to book one to find out.
Systems Secure offers four fixed-price cyber security services for UK small businesses: Ask James at £150 per question, a Second Opinion at £250, a Security Review at £450, and a Full Business Review at £795. All prices exclude VAT and are based on a business of up to 25 staff. Larger businesses pay more, and the price is always agreed in writing before any work starts.
No. Systems Secure prices ad-hoc cyber security work as fixed-price jobs, not hourly or daily rates. You are quoted a single price for the piece of work before it begins, and that price does not change if the job takes longer than expected. There is no clock running and no billable time added afterwards.
Yes. Ask James is a £150 fixed-price service for a single cyber security question, answered in writing by James Batt within two working days. It suits questions like whether an email is a scam, whether a supplier's security claims stand up, or how to answer a client's security questionnaire. The price is the same whatever the size of your business.
A Systems Secure Security Review is a £450 fixed-price review of one system, carried out remotely. Typical subjects are Microsoft 365 settings, a firewall configuration, a Cyber Essentials gap check, or backups including a tested restore. You receive a written report in plain English listing what to change, ranked in the order it matters. One system is covered per review.
A Security Review covers one system, such as Microsoft 365 or your firewall, and costs £450. A Full Business Review covers the whole business end to end, costs £795, and includes a full written report plus a follow-up call. Both are fixed prices for a business of up to 25 staff, carried out remotely, and both are provided by Systems Secure.
Yes. Systems Secure prices are built for a business of up to 25 staff. Above that, the price rises with headcount, because more staff means more accounts, more devices and a longer report. Four times the staff is roughly double the price rather than four times, and the exact figure for your headcount is shown on the pricing page before you enquire.
No. All Systems Secure consulting prices are quoted excluding VAT. VAT is added to the invoice at the prevailing UK rate. Most business clients reclaim it.
Nothing is paid up front. Systems Secure takes no deposit and no card details at the time of booking. The work is carried out first, you receive the report, and the invoice follows towards the end of the month. The invoice needs to be paid within 30. days
No. Systems Secure ad-hoc consulting is bought one job at a time, with no contract, no retainer and no minimum commitment. You are quoted for a single piece of work, and once it is delivered there is nothing further to pay and nothing to cancel. A monthly managed service, QuantumCare, exists separately for businesses that want ongoing cover, but it is never a condition of ad-hoc work.
No. Systems Secure sells no security products and takes no commission from vendors, so there is nothing to push. If a review finds that your security is already in reasonable shape, that is what the report will say. Any recommendation is written as an action you can take yourself or give to your existing IT provider.
Yes. Systems Secure is regularly brought in alongside an existing IT company or internal IT person, not instead of them. Reports are written so they can be handed straight to whoever looks after your systems, with the actions ranked in priority order. Many clients use an independent review specifically to check that the work their provider is doing is enough.
Most Systems Secure consulting work is carried out remotely, which is faster to book and covers the work perfectly well. A site visit can be added to a Security Review or a Full Business Review for £450, covering one full day on site across Sussex, Surrey, Hampshire and Kent. Travel such as trains, flights, taxis and parking is charged at cost and agreed in advance. Ask James and Second Opinion are always remote.
Systems Secure is based in Copthorne, West Sussex, and has been trading since 2010. Remote consulting is available anywhere in the UK. On-site visits are priced for Sussex, Surrey, Hampshire and Kent, and locations beyond the South East are quoted individually.
James Batt, founder of Systems Secure Ltd, holds CISSP (Certified Information Systems Security Professional), C|CISO (Certified Chief Information Security Officer), C|EH (Certified Ethical Hacker), NCSP Practitioner (Certified NIST Cybersecurity Professional) and CompTIA Security+. Systems Secure was named Cybersecurity Company of the Year at the West Sussex Business Awards 2025 and Security Solution Specialists of the Year at the E2 Media Awards 2025.
Most security reviews work down a checklist of settings. Systems Secure does that too, because it is what passes Cyber Essentials and client audits, but James Batt is also a Certified Ethical Hacker and examines the business the way an attacker would: what is exposed to the internet, which account would be targeted first, and where one small weakness becomes a way in. A checklist finds what is missing; that approach finds what is reachable.
No. A Systems Secure Security Review examines how a system is configured and reports what should be changed. A penetration test is a separate, more intensive exercise in which a tester actively attempts to break in, and typically costs several thousand pounds. A review is the appropriate starting point for most UK small businesses, and will identify whether a penetration test is worth the money.
Yes. A Systems Secure Security Review at £450 includes a Cyber Essentials gap check, which identifies what would currently stop you passing. A Full Business Review at £795 covers Cyber Essentials preparation across the whole business. Both are fixed-price and delivered with a written list of the changes needed.
Yes. Every Systems Secure consulting job includes a written report or written answer, in plain English rather than technical jargon. The report is yours to keep and to share with whoever needs it, including your IT provider, your insurer, your accountant or a client who has asked for evidence of your security.
The report is written so that the actions can be carried out by your existing IT provider or in-house IT person, at no further cost from Systems Secure. If you would prefer the fixes done for you, that is quoted separately as its own fixed-price job. There is no obligation, and nothing is added to your invoice without being agreed first.
No. QuantumCare, the Systems Secure managed cyber security service, already includes most of the work covered by these ad-hoc reviews, carried out continuously rather than as a one-off snapshot. QuantumCare clients do not need to book a Security Review or a Full Business Review separately.
The start date is agreed on the free 15-minute call, before any price is confirmed. Ask James questions are answered in writing within two working days.
Systems Secure offers four fixed-price cyber security services for UK small businesses: Ask James at £150 per question, a Second Opinion at £250, a Security Review at £450, and a Full Business Review at £795. All prices exclude VAT and are based on a business of up to 25 staff. Larger businesses pay more, and the price is always agreed in writing before any work starts.
No. Systems Secure prices ad-hoc cyber security work as fixed-price jobs, not hourly or daily rates. You are quoted a single price for the piece of work before it begins, and that price does not change if the job takes longer than expected. There is no clock running and no billable time added afterwards.
Yes. Systems Secure prices are built for a business of up to 25 staff. Above that, the price rises with headcount, because more staff means more accounts, more devices and a longer report. Four times the staff is roughly double the price rather than four times, and the exact figure for your headcount is shown on the pricing page before you enquire.
No. All Systems Secure consulting prices are quoted excluding VAT. VAT is added to the invoice at the prevailing UK rate. Most business clients reclaim it.
No. Systems Secure ad-hoc consulting is bought one job at a time, with no contract, no retainer and no minimum commitment. You are quoted for a single piece of work, and once it is delivered there is nothing further to pay and nothing to cancel. A monthly managed service, QuantumCare, exists separately for businesses that want ongoing cover, but it is never a condition of ad-hoc work.
Yes. Ask James is a £150 fixed-price service for a single cyber security question, answered in writing by James Batt within two working days. It suits questions like whether an email is a scam, whether a supplier's security claims stand up, or how to answer a client's security questionnaire. The price is the same whatever the size of your business.
A Systems Secure Security Review is a £450 fixed-price review of one system, carried out remotely. Typical subjects are Microsoft 365 settings, a firewall configuration, a Cyber Essentials gap check, or backups including a tested restore. You receive a written report in plain English listing what to change, ranked in the order it matters. One system is covered per review.
A Security Review covers one system, such as Microsoft 365 or your firewall, and costs £450. A Full Business Review covers the whole business end to end, costs £795, and includes a full written report plus a follow-up call. Both are fixed prices for a business of up to 25 staff, carried out remotely, and both are provided by Systems Secure.
No. A Systems Secure Security Review examines how a system is configured and reports what should be changed. A penetration test is a separate, more intensive exercise in which a tester actively attempts to break in, and typically costs several thousand pounds. A review is the appropriate starting point for most UK small businesses, and will identify whether a penetration test is worth the money.
No. QuantumCare, the Systems Secure managed cyber security service, already includes most of the work covered by these ad-hoc reviews, carried out continuously rather than as a one-off snapshot. QuantumCare clients do not need to book a Security Review or a Full Business Review separately.
Most security reviews work down a checklist of settings. Systems Secure does that too, because it is what passes Cyber Essentials and client audits, but James Batt is also a Certified Ethical Hacker and examines the business the way an attacker would: what is exposed to the internet, which account would be targeted first, and where one small weakness becomes a way in. A checklist finds what is missing; that approach finds what is reachable.
Yes. A Systems Secure Security Review at £450 includes a Cyber Essentials gap check, which identifies what would currently stop you passing. A Full Business Review at £795 covers Cyber Essentials preparation across the whole business. Both are fixed-price and delivered with a written list of the changes needed.
Yes. Every Systems Secure consulting job includes a written report or written answer, in plain English rather than technical jargon. The report is yours to keep and to share with whoever needs it, including your IT provider, your insurer, your accountant or a client who has asked for evidence of your security.
Then that is what the report says, and the price does not change. Systems Secure charges for the review, not for the number of problems found. A report confirming that your security is in reasonable shape is worth owning — it is evidence you can hand to a client, an insurer or a board that has asked the question. In practice a review at this level usually finds something worth changing, but occasionally there is nothing urgent, and being told so plainly is the point of paying someone who has nothing to sell you afterwards.
The report is written so that the actions can be carried out by your existing IT provider or in-house IT person, at no further cost from Systems Secure. If you would prefer the fixes done for you, that is quoted separately as its own fixed-price job. There is no obligation, and nothing is added to your invoice without being agreed first.
Yes. Systems Secure will sign your non-disclosure agreement before any work starts, at no charge. If you do not have one, a mutual confidentiality agreement can be provided instead. Client names are never used as references, case studies or logos on this site without written permission first — which is why you will not find a client list on it.
Nobody. Every Systems Secure consulting job is carried out by James Batt personally. The work is not subcontracted, offshored, or handed to an associate, and findings are never shared with vendors, insurers or anyone else. The report goes to you and to no one else, and what you then do with it is entirely your decision.
Working notes are kept for six months in case you come back with a question, then deleted.
Most Systems Secure consulting work is carried out remotely, which is faster to book and covers the work perfectly well. A site visit can be added to a Security Review or a Full Business Review for £450, covering one full day on site across Sussex, Surrey, Hampshire and Kent. Travel such as trains, flights, taxis and parking is charged at cost and agreed in advance. Ask James and Second Opinion are always remote.
Systems Secure is based in Copthorne, West Sussex, and has been trading since 2010. Remote consulting is available anywhere in the UK. On-site visits are priced for Sussex, Surrey, Hampshire and Kent, and locations beyond the South East are quoted individually.
Yes. Systems Secure is regularly brought in alongside an existing IT company or internal IT person, not instead of them. Reports are written so they can be handed straight to whoever looks after your systems, with the actions ranked in priority order. Many clients use an independent review specifically to check that the work their provider is doing is enough.
The start date is agreed on the free 30-minute call, before any price is confirmed. Ask James questions are answered in writing within two working days.
James Batt, founder of Systems Secure Ltd, holds CISSP (Certified Information Systems Security Professional), C|CISO (Certified Chief Information Security Officer), C|EH (Certified Ethical Hacker), NCSP Practitioner (Certified NIST Cybersecurity Professional) and CompTIA Security+. Systems Secure was named Cybersecurity Company of the Year at the West Sussex Business Awards 2025 and Security Solution Specialists of the Year at the E2 Media Awards 2025.
No. Systems Secure sells no security products and takes no commission from vendors, so there is nothing to push. If a review finds that your security is already in reasonable shape, that is what the report will say. Any recommendation is written as an action you can take yourself or give to your existing IT provider.
The next step
You don’t have to decide anything on the call. We tell you what’s exposed, and you keep the findings either way — even if we’re not the right fit.
No obligation · No sales script · You keep the findings either way
James Batt · CISSP, C|CISO Founder, Systems Secure Ltd

Innovation
Fresh, creative solutions.


Excellence

Systems Secure® Limited·Registered in England and Wales, company no. 07295869 6 The Meadow, Copthorne, West Sussex RH10 3RG·07702 896 910·[email protected]
How to check you’re dealing with usServing Crawley, East Grinstead, Brighton and businesses across Sussex · UK-wide remote support
Copyright 2026. Systems Secure. All Rights Reserved.