Security partnership. Priced with intent.
Managed security, Cyber Sprint entry work and ongoing protection tiers for SMEs that need clear ownership and practical defence.
Windows, Mac, Linux and servers. All covered.
GHOSTLINE protects the machines your business actually uses, from desktops and laptops to servers, whether they sit in your office or in the cloud.
Security partnership. Priced with intent.
While the GHOSTLINE platform is in active development, our managed security services are live and operational. Real protection, delivered today, built on the same principles that power the platform.
Start with a five-day Sprint, then roll the full cost into ongoing monitoring.
The Cyber Sprint gives you a clear, jargon-free view of your exposure, control gaps, breached credentials, email security, incident readiness and the first 30-60-90 day action plan. If you move into any GHOSTLINE monitoring retainer, the £950 Sprint fee is credited against your onboarding and first phase of work.
Cyber Sprint
A focused five-day engagement for businesses that want to understand current exposure, priority risks, and what the next phase should look like before committing to ongoing monitoring.
GHOSTLINE Micro
The same protection as Assured Foundations, sized for a business running fewer than 10 computers. You pay for what you actually have, and there is no large upfront figure to get going.
Drag the slider to match your business. Most micro businesses land between £75 and £250 a month. Go past 10 computers and you simply roll into Assured Foundations at the same £25 per system.
A system is any computer we look after: a laptop, a desktop, or a server. One person usually means one laptop, so a team of five tends to have around five systems. Think of it like fitting a smoke alarm in each room. You only pay for the rooms you actually have.
- We keep watch over every computer for signs of a break-in
- We screen your email for scams and dodgy attachments
- We check the dark web in case your passwords have leaked
- We set hidden tripwires that catch intruders early
- We scan for weak spots regularly and tell you what to fix first
- We get you ready for the government's Cyber Essentials badge
- A clear, jargon-free security report every month
- A reply by the next working day when you need advice
Need cover overnight and at weekends with a faster response? That is Active Defence, just below.
You pay £25 per system, per month. Ten computers is £250, three computers is £75. That is the whole sum.
It is capped, so once you are running larger numbers the price stops climbing and settles at the Assured Foundations figure. A bigger team is never punished for growing. Think of it like an off-peak day travelcard. Past a certain point you have paid the daily maximum, and every extra journey is free.
The three options below are not really about size. They are about how much cover you want. Foundations keeps watch and reports back. Active Defence adds cover overnight and at weekends with a faster response. Strategic Partner adds a named security lead who works alongside your business.
ASSURED FOUNDATIONS
- Managed endpoint monitoring (TRACE)
- Email security baseline (INBOX)
- Quarterly vulnerability scanning
- Monthly security report (WATCH)
- Cyber Essentials readiness (BASELINE)
- Canary and exposure monitoring (VEIL)
- Credential / dark web checks (SIGNAL)
- Next-business-day advisory response
- 30-day data retention (ARCHIVE)
ACTIVE DEFENCE
- Everything in Assured Foundations
- Round-the-clock monitoring (CORE)
- Automated response to common threats
- User account and Microsoft 365 monitoring
- Threat awareness integration (SIGNAL)
- Monthly external checks (SURFACE)
- Ongoing tuning to reduce noise
- Quarterly security review (WATCH)
- 4-hour response target
- 90-day evidence retention (ARCHIVE)
STRATEGIC PARTNER
- Everything in Active Defence
- Your own dedicated security lead
- Senior security advisory (up to 4 hrs/month)
- Board-ready security reporting (WATCH)
- Compliance support and roadmap (BASELINE)
- Incident readiness planning
- Help answering client security questionnaires
- Custom rules tuned to your business
- 1-hour response target
- 180-day evidence retention (ARCHIVE)
- Preferred rates on offensive testing
Cut through the jargon
Security is full of odd words. Here is what the ones above actually mean, with no buzzwords.
What is a "system" or "endpoint"? ▶
Any computer we protect: a laptop, a desktop, or a server. We use the two words to mean the same thing. If your team has five laptops, that is five systems.
Endpoint monitoring (EDR) ▶
Software on each computer that watches for signs of a break-in and flags anything suspicious to us. Think of it as a silent alarm fitted to every machine.
Dark web and credential checks ▶
The dark web is the hidden corner of the internet where stolen passwords get bought and sold. We watch it for yours. Like your bank texting you the moment your card turns up somewhere it should not.
Canary and exposure monitoring ▶
A decoy file or login left out as bait. The instant an intruder touches it, we know they are inside. A tripwire in the dark.
Vulnerability scanning ▶
A regular sweep that hunts for weak spots before an attacker does, then tells you what to fix first. Like walking the building and checking which doors and windows are unlocked.
Cyber Essentials ▶
A UK government-backed badge that shows clients and insurers you take the basics seriously. Some contracts now require it. A bit like a food hygiene rating, but for your cyber security.
Response target (SLA) ▶
Our promise on how quickly we act when something is wrong. A 4-hour target means we are on it within four hours, every time. The shorter the promise, the faster the fire brigade turns up.
Round-the-clock monitoring ▶
Cover every hour of every day, including nights and weekends, because attacks rarely happen at a convenient time. A night guard who never clocks off.
Extend Your Protection
Common Questions
Do I pay per computer? ▶
Yes. It is £25 per system, per month, on Micro and Assured Foundations. The price is capped at £695, so once you pass roughly 28 systems it stops climbing. You are never charged for more than you run.
We only have a handful of computers. Are we too small? ▶
Not at all. That is exactly what Micro is for. A business with three or four computers gets the same watchful protection as a larger client, for £75 to £100 a month.
How is pricing scoped? ▶
The figures shown are starting points. Final pricing depends on endpoint count, identity scope, cloud footprint, retention needs, and response expectations.
Minimum contract? ▶
Monthly rolling is available. Annual commitments reduce the effective monthly rate by around 10% and are better suited to longer-term programmes.
What is in the GHOSTLINE module names? ▶
Module names like TRACE, INBOX, SIGNAL, VEIL, WATCH, ARCHIVE, and BASELINE map to our managed service capabilities today and will become the native platform modules when GHOSTLINE launches. Same principles, same philosophy.
What happens when the platform launches? ▶
Existing managed service clients transition to the platform with priority access and preferred pricing. The managed service wraps around the platform. Nothing breaks.
Can I start small? ▶
Yes. The Cyber Clarity Review is a one-off engagement that gives you a grounded view of where you stand. From there, we scope a retainer that fits.
The GHOSTLINE Platform
The platform is being built. Nine modules, three pillars, one unified intelligence fabric. Current managed service clients get priority access and seamless transition when it launches.
ESSENTIAL
- CORE + TRACE + INBOX + BASELINE
- Three pillars: WATCH, VEIL, ARCHIVE
- Jargon-free alerts via ORACLE
PROFESSIONAL
- Essential + SIGNAL + SURFACE + ORACLE
- Threat intelligence fusion
- Attack surface monitoring
ENTERPRISE
- Full platform + SPECTRE testing
- Senior security advisory
- Custom rules, guaranteed response times
Platform pricing will be published closer to launch. Managed service clients receive priority access and preferred rates.
SPECTRE
Continuous offensive exposure validation. Also in active development alongside the platform.
RECON
- Attack surface discovery
- DARK MIRROR monitoring
- WATCHTOWER drift alerts
VALIDATE
- RECON + VERIFY + EVIDENCE
- Exposure validation with proof
- DOSSIER reporting engine
ADVERSARY
- Full 14-module platform
- PHANTOM adversary emulation
- NEURAL CHAIN attack paths
Offensive testing is available now as a managed add-on. The SPECTRE platform will launch alongside GHOSTLINE.