DSC-RC-001 / Standard rate card / Rev 2026.10
Our standard published rates: managed services, certification, and indicative project bands. All figures excluding VAT. We quote from these rates; what a consultation settles is the scope. Project bands are indicative and are not quotations.
| Charge | Basis | Rate |
|---|---|---|
| Managed IT support | per supported user | £65 |
| Minimum managed charge | per month | £650 |
| macOS support | per supported user | £65 |
| Endpoint support, per-device basis | per device | £55 |
| Additional device, covered user | per device | £15 |
| Physical server or host | per host | £85 |
| Virtual server instance | per instance | £45 |
| Storage appliance or NAS | per unit | £30 |
| Firewall management | per firewall | £125 |
| Wi-Fi management | per site | £65 |
| Network management, primary site | per month | £125 |
| Network management, each further site | per site | £45 |
| Hosted business VPN | per user | £11 |
| VoIP phone system | per user | £12 |
| Web hosting | per month | £30 |
| Web maintenance | per month | £50 |
| Domains, DNS and TLS certificates | per organisation, up to 5 | £15 |
| User cloud backup | per user | £4 |
| Server backup | per protected instance | £40 |
| SharePoint and Teams backup | per month | £50 |
| Vulnerability scanning | per month | £100 |
| Intune, additional enrolled device | per device | £4 |
| DSCS Protect 365, managed security over Microsoft 365 | per user | £15 |
| Charge | Basis | Rate |
|---|---|---|
| Microsoft 365 tenant setup | one off | £250 |
| DSCS Protect 365 implementation | one off | £2,500 |
| Onboarding, by complexity | one off | £0, £750 or £2,500 |
| Transition from an incumbent provider | one off | £0 |
Transition is included where the outgoing provider co-operates and hands over documentation, administrative credentials and asset records. Recovery work beyond that is scoped, quoted and agreed before it starts.
| Charge | Basis | Rate |
|---|---|---|
| Backup storage, first 1 TB | per month | Included |
| Backup storage beyond that | per TB per month | £60 |
| New starter, standard build | per starter | £95 |
| New starter, specialist application set | per starter | £250 |
| Leaver offboarding | per leaver | £45 |
| Mobile device enrolment | per device | £25 |
| Hardware and equipment procurement | on supplier cost | 8% |
Backup storage covers everything we hold for you, servers, endpoints, mailboxes, SharePoint and file data together. It is measured as stored data after compression and deduplication, including every retained version, which is the figure our own suppliers bill us on. The first 1 TB is included with any backup line, and beyond that it is billed in 0.5 TB steps. Most organisations never reach the allowance.
Hardware procurement carries a minimum handling charge of £25, and the supplier invoice is shown. Consumption rates are fixed for the contract term.
| Charge | Basis | Rate |
|---|---|---|
| Onsite visit | per day | £750 |
| Onsite visit | per half day | £450 |
| Onsite retainer, a half day each quarter | per month | £150 |
| Onsite retainer, a half day each month | per month | £450 |
| Ad-hoc or out-of-scope labour | per hour | £125 |
| Project and professional services | per day | £750 |
| Senior or architect work | per day | £950 |
| Outside standard cover, Monday to Saturday | multiplier | 1.5× |
| Sundays and public holidays | multiplier | 2.0× |
Ad-hoc work is billed at whichever is lower: the hourly rate, or the half-day or day rate where that is cheaper. Minimum charge 30 minutes. Travel is included within 40 miles of Reading; beyond that, 45p per mile at the HMRC approved rate plus travel time at half the hourly rate. A managed package at £2,000 a month or more includes a quarterly half-day visit, and at £3,500 a month or more a monthly one.
| Cover | Basis | Rate |
|---|---|---|
| Standard cover, 07:30 to 18:00 UK, Monday to Friday | per user | Included |
| 24/7 infrastructure monitoring and alerting | per user | Included |
| Extended cover to 22:00 UK | per organisation | £350 |
| Early cover from 03:30 UK | per organisation | £350 |
| Out-of-hours on-call, up to 10 people | per organisation | £350 |
| Out-of-hours on-call, 10 to 50 people | per organisation | £600 |
| Out-of-hours on-call, above 50 people | per organisation | £900 |
| Severity | Response, committed | Resolution, target |
|---|---|---|
| Service down | 15 minutes | 2 hours |
| P1 critical | 30 minutes | 4 hours |
| P2 urgent | 1 hour | 8 hours |
| P3 important | 2 hours | 1 working day |
| P4 change request | 4 hours | 2 working days |
| P5 information | Same working day | 3 working days |
Response times are contractual and carry service credits of five per cent of the monthly managed fee per missed commitment, capped at twenty five per cent of one month. Resolution times are measured targets reported monthly, not guarantees, because resolution depends on the fault. The service level clock pauses while awaiting a client authorisation.
| Headcount | Cyber Essentials | Cyber Essentials Plus |
|---|---|---|
| Up to 10 people | £85 / month | £265 / month |
| 10 to 50 people | £105 / month | £295 / month |
| Above 50 people | £125 / month | £325 / month |
| Each additional entity under common control | 50% | 50% |
| Fixed-price gap analysis | £950 | £1,500 |
| IASME scheme certification fee | Included | Included |
| Annual recertification | Included | Included |
The monthly figure covers holding the certification continuously: the controls managed, remediation included, the evidence maintained, and the annual recertification handled, with the IASME scheme fee included. Nothing further is payable to stay certified. A single assessment, and guided certification, are priced separately.
| Charge | Basis | Rate |
|---|---|---|
| Co-managed platform | per user per month | £22 |
| Engineer time block, 2 days a month | per month | £1,200 |
| Engineer time block, 4 days a month | per month | £2,200 |
For organisations running their own first line. The platform fee covers monitoring, patching, the security baseline, detection and response, and escalation. Time blocks are discounted against the published day rate for committed monthly volume.
| Rule | Position |
|---|---|
| Headcount growth | The fee never rises because you added people. Where a band change lowers it, the lower figure applies |
| 20 to 49 users | 10% volume discount on the published per-user rate |
| 50 to 99 users | 15% volume discount |
| 100 users and above | 20% volume discount. Above 100, one fixed monthly managed-service figure is quoted after consultation |
| Rolling term | 1.10 multiplier |
| 12 months | 1.00 multiplier, the baseline |
| 24 months | 0.97 multiplier |
| 36 months | 0.95 multiplier |
| Registered charity | 15% on the support fee |
| Work | Indicative range |
|---|---|
| Fixed-price discovery, 2 days, producing a scope and a firm quote | £1,500 |
| Marketing or brochure site | £4,000 to £15,000 |
| Online store | £9,000 to £35,000 |
| Small automation | £2,000 to £10,000 |
| Custom software build | £5,000 to £50,000 |
| Legacy modernisation | £15,000 to £90,000 |
| IT and security audit | £3,000 to £8,000 |
| Compliance readiness | £6,000 to £18,000 |
| ISO 27001 support | £12,000 to £30,000 |
Project bands are scope dependent and must not be treated as quotations. Discovery is credited against the build if it proceeds. Nothing starts without a written scope and an approved price. A web app or platform is built as bespoke software and is priced on that band rather than as a website.
NCSC Cyber Advisor engagements begin with the same fixed-price readiness review as the Cyber Essentials gap analysis, at £950. The implementation that follows is quoted from the review and fixed once scoped.
| Cost | Treatment | Note |
|---|---|---|
| Microsoft 365 licences | At Microsoft price | Supplied on our CSP agreement with no markup, invoice shown. Administration is included in the per-user fee. Where a tender mandates per-plan rates they are quoted from the agreement at the time. |
| Cyber Essentials scheme fees | At the scheme rate | Set by IASME by headcount and identical at every certification body. Confirmed at the current rate before order. |
| Domain, DNS and certificate registrations | At cost | Registrar and certificate authority charges. We price the management of them. |
| Connectivity, line rentals and telephony | At carrier cost | Carrier pricing changes independently and varies by postcode, so it is quoted rather than published. |
| Backup software licensing | At vendor cost | We price the management and the storage. |
We publish our own rates. A third-party cost is passed through at the supplier's current price and shown as its own line, because a figure we do not control has no business being fixed in our rate card. Hardware is the single exception, at cost plus 8 per cent, because sourcing, asset tagging, warranty registration and keeping the asset register current is work we do.