Pricing is a fixed monthly fee of £370 for the security programme, plus a per-account fee for every licensed Microsoft 365 account. The per-account fee is £36 on rolling monthly, or £34 on a 12-month agreement.

The minimum is ten accounts, so the entry price is £710 per month. Your first email domain is included; each additional domain is £30 per month. All prices exclude VAT.

Use the calculator further up this page to see your exact figure before you speak to anyone.

No. Nobody credible can promise that — and you should be wary of anyone who does. What we do commit to is fast action and clear evidence: quick detection, rapid containment, tested recovery, and a one-page update each month you can put straight in front of your board. The goal is simple — fewer incidents, smaller impact, faster recovery — with proof you can show your insurer, your clients and your board.

James Batt. Every conversation, every quarterly review, every time you pick up the phone. Not an account manager, not a rota, and not somebody who needs your setup explained to them again.

That is the whole reason the client list is capped at twenty. Past that number the promise stops being true, so we stop taking clients on.

The advice, the reviews and the relationship are one person, deliberately. That is what buys you someone who knows your systems rather than someone reading a ticket.

The protection behind it is not one person. Monitoring, detection and containment run around the clock through a dedicated security operations centre, on enterprise security tooling. None of that waits for anyone here to be at a desk.

You get a named, accountable person sitting on top of infrastructure that never sleeps.

Your protection carries on exactly as normal. Monitoring, detection, isolation and containment are handled by the security operations centre, twenty-four hours a day, every day of the year. A compromised machine gets shut off at 3am on a bank holiday without anyone here being involved.

I take planned leave a few times a year and you’ll know well ahead. Routine advisory questions get answered within two working days rather than the same day. Anything security-critical reaches me wherever I am.

It is a fair question to ask of any small provider, and you should ask it of anyone you are considering.

Security only works when someone knows your business well enough to spot what is out of place, and has the capacity to act the moment something does. Neither of those scales to hundreds of clients.

We stop taking on new Business Pro clients at twenty, and we will not onboard a business alongside a direct competitor. If we're full, we'll tell you on the first call.

No — and that protection runs both ways. If you join, we will not onboard a business that competes directly with you for as long as you are a client. If one of your competitors is already with us, we'll tell you on the first call and turn you down, rather than take your money and hope you never find out.

By direct competitor we mean a business selling the same thing to the same kind of customer in the same market — not simply another firm in your industry. Where it is borderline, we'll talk it through with you rather than decide behind closed doors.

This matters because security work means seeing how your business actually runs — your systems, your data, your weak points. You should never have to wonder whether the person who knows all that also knows your rival's.

No. We work alongside them. If you'd rather we handled IT support too, ask — but it isn't part of QuantumCare.

Yes. QuantumCare isn't insurance and doesn't replace it — the two do different jobs. Insurance pays out after something goes wrong; QuantumCare is there to stop it going wrong in the first place. What it does do is help you meet what your insurer asks for: multi-factor authentication, endpoint protection, patching, backups, staff training and email authentication are now standard conditions on most cyber policies, and we put them in place and evidence them. That matters at renewal — if you declare controls you don't actually have, a claim can be refused.

We aren't insurance brokers and can't advise on cover; speak to your broker about what's right for your business, and we'll make sure the technical side stands up.

Three simple things—kept as light as possible:

- Install a small helper tool on each company device (you or your IT can do this; we’ll provide a click-by-click guide).

- Give us the right access to a few agreed areas so we can set things up and keep watch.

- Name a decision-maker we can reach quickly for approvals.

That’s it. We’ll handle the rest and keep you updated in plain English.

Most work is remote for speed and cost. If you need on-site help (e.g., a major incident or board session), we can arrange it—clearly scoped and scheduled.

UK organisations with 10–250 people who want predictable costs, clear reporting, and tangible improvements—not a one-off audit.

You’ll see simple monthly proof: how quickly we found issues, how fast we contained them, what improved, and what’s next. No long reports—just what leaders need.

Only if you choose to be.

Rolling monthly is the default. Thirty days' notice, no penalty, no exit fee — you can leave whenever you like.

The 12-month option exists because some clients would rather have a frozen price than the flexibility. It's £34 per account instead of £36, and your rate cannot change for the full term. Both are billed monthly, with nothing to pay upfront.

There is one exception. If you want us to take you through Cyber Essentials certification, that moves you onto a 12-month term. A certificate is only meaningful if the controls behind it stay in place for the year it covers, and we won't put our name to one we can't stand behind.

Rolling monthly is £36 per account and you can leave any time with 30 days' notice. The 12-month agreement is £34 per account, and your price is frozen for the full term.

Both are billed monthly. There is nothing to pay upfront either way.

Every licensed account — staff email accounts and administrator accounts alike. It is the number of licences you pay Microsoft for.

It's usually a little higher than your headcount, because most businesses have admin and service accounts alongside their people.

Onboarding usually takes 1 week from agreement. We usually have the organisation fully secured within the 1st month.

A Chief Information Security Officer, on call, shared. You get the seniority and judgement without the salary.

Threats are monitored around the clock by a dedicated security operations centre, with isolation and remediation happening whether or not anyone's awake. You'll have a report waiting in the morning.

No.

Yes — your bill follows your headcount.

We calculate the head count at the beginning of each month.

Yes. Getting you ready for Cyber Essentials is part of the security programme — we do the technical work, put the controls in place and handle the questionnaire.

The certification itself is charged separately. That is the certification body's own fee, and we'll tell you what it is before you commit to anything.

One condition: if you want us to take you through certification, your agreement moves from rolling monthly to a 12-month term. A certificate is only meaningful if the controls behind it stay in place for the year it covers, and we won't put our name to one we can't stand behind.

Your first is included. Each additional domain is £30 per month, and every one gets taken to full DMARC enforcement