Enterprise-grade managed cyber security.
Atema Cyber Protection brings the security tools large enterprises rely on into a single managed service, priced per user, and we run it for you. No extra staff, no complicated software to learn, and no guessing whether you are covered.
Book a free security assessmentCybercriminals do not target big companies. They target easy ones.
Most attacks on small businesses do not start with sophisticated hacking. They start with one convincing email, one reused password, or one laptop missing an update. Attackers know smaller firms rarely have a security team, so they go after them first.
The cost is not just the ransom. It is days of downtime, lost data, worried customers, regulatory headaches, and an insurance claim that may be challenged if the right protections were not in place.
Atema Cyber Protection closes those gaps, run for you and priced per user, so you always know you are covered.
How it works.
Four steps, run by us. You see where you stand before you commit to anything.
We assess
We scan your Microsoft 365 environment, devices and online footprint to show you exactly where you are exposed, before you commit to anything.
We deploy
We roll out protection across your staff accounts, email and devices, with minimal disruption to your day.
We watch
Your environment is monitored continuously. Threats are detected, investigated and dealt with, often before you would ever know they existed.
We report
Every month you get a clear, plain-English report showing your risk level, what we have stopped and what has improved.
Pick the level of cover that fits.
Each plan builds on the one before it. Every plan includes a free assessment, full onboarding, ongoing management and a monthly report. All prices exclude VAT.
Essential
The foundation every business needs
Protects the three places almost every attack begins: your people, your email and your accounts.
- Account takeover protection. We watch your Microsoft 365 accounts for logins from unusual places, suspicious mailbox rules and other signs an account has been compromised.
- Smart email filtering. Phishing, malware, spam and malicious links are stopped before they reach the inbox.
- Managed antivirus. Every device is protected and kept up to date, centrally managed by us.
- Staff security training. Short, regular training that adapts to each person, so your team becomes your first line of defence.
- Phishing simulations. Realistic test emails show who clicks, with extra training where it is needed.
- Dark web monitoring. We alert you if staff email addresses or passwords show up in a data breach.
- External exposure scanning. We check your domain, website and internet-facing systems for the weaknesses attackers look for.
- File sharing oversight. We flag sensitive files shared publicly or outside the business through OneDrive and SharePoint.
- Monthly security report. A clear, plain-English summary of your risk level, what we have stopped and what has improved.
Advanced
Everything in Essential, plus 24/7 detection and response
Antivirus on its own is no longer enough. Modern attacks, ransomware especially, are built to slip past it. Advanced adds the protection insurers and security professionals now treat as standard. Includes SentinelOne on one device per user, with additional devices at £2.99 a month.
- SentinelOne endpoint detection and response (EDR). Replaces standard antivirus with protection that watches how devices behave, not just for known viruses. If ransomware starts encrypting files it is stopped, and an infected device can be cut off from your network.
- 24/7 managed detection and response (MDR). Real threats are escalated to security analysts day and night, including weekends and bank holidays. Alerts are triaged within minutes, with a target of under 15, and infected devices isolated or compromised accounts locked out typically within 30 minutes.
- Check Point advanced email security. Warning banners on suspicious and external messages, plus scanning of outgoing email so a compromised account cannot be used to attack your customers and suppliers.
Complete
Everything in Advanced, plus compliance and investigation
For businesses with more at stake. Includes SentinelOne Complete on one device per user, with additional devices at £3.99 a month.
- SentinelOne Complete. Full visibility of device activity, with advanced threat-hunting tools to find hidden threats before they act.
- Email data loss prevention and encryption. Stops sensitive information such as bank details, personal data or client records leaving the business by email, and encrypts confidential messages.
- Secure business browser. Protects web access and cloud apps on company and personal devices where it is installed, controlling where company data can go.
- Forensic investigation. If a device is compromised, specialists establish exactly what happened, what was accessed and how to stop it happening again. Vital evidence for insurers, regulators and the ICO.
Every plan includes
Compare plans.
Where each tier picks up, side by side. All prices exclude VAT.
| Essential | Advanced | Complete | |
|---|---|---|---|
| Price per user, per month | £7.49 | £10.99 | £14.49 |
| Device with SentinelOne included | – | 1 per user | 1 per user |
| Additional devices, per month | – | £2.99 | £3.99 |
| Microsoft 365 account protection | |||
| Email filtering | |||
| Managed antivirus or EDR | |||
| Staff training and phishing tests | |||
| Dark web and exposure monitoring | |||
| SentinelOne EDR | – | ||
| 24/7 analyst-led response | – | ||
| Advanced email security | – | ||
| Threat hunting tools | – | – | |
| Email DLP and encryption | – | – | |
| Secure business browser | – | – | |
| Device forensic investigation | – | – |
What happens when something goes wrong?
Friday, 11pm. Earlier that day, a member of your team clicked a link and entered their password into a fake Microsoft login page.
The attacker logs in over the weekend, quietly reads emails, sends fake invoices to your customers and plants ransomware. You find out on Monday morning.
The suspicious login is flagged instantly. Within minutes the security team confirms the threat, signs the attacker out, resets the password and multi-factor authentication, and blocks further access. On Monday you receive a short summary of what happened and what was done. Business carries on as normal.
Why Atema.
We can run your cyber security on its own, or fold it into the rest of your IT when we look after that too.
One partner for IT and security
We already know your systems, so nothing falls through the gaps between providers.
Local and accountable
A Gloucestershire-based team you can actually speak to, backed by a global 24/7 security operations centre.
Simple, predictable pricing
Per user, per month, with one protected device per user included. Add or remove staff and devices as you grow.
No jargon
We explain your risk in plain English and show you the results every month.
Insurers increasingly expect EDR, round-the-clock monitoring and staff training before they will offer cover or renew. Advanced and Complete give you documented evidence those controls are in place, which makes renewal questionnaires far simpler.
The rest of our cyber security services.
Cyber Protection is the day-to-day defence. These sit alongside it, and you can see them all on our cyber security overview.
Cyber Essentials
A UK Government-backed certification showing clients, partners and insurers you take cyber security seriously.
Learn moreCyber Essentials Plus
The audited level, with an independent, hands-on technical check that your controls hold up in practice, not just on paper.
Learn moreCyber Insurance
Specialist cover underwritten by Hiscox, up to £1,000,000, for the financial fallout if an incident still gets through.
Learn morePenetration Testing
We test your systems the way a real attacker would, monthly from £150 or as a one-off, then report on what to fix.
Learn moreVulnerability Assessment
Monthly or annual scans that catch outdated software and missing patches before they are used against you.
Learn moreCyber Protection, answered.
Still wondering something? Send us an enquiry below and we will answer directly, no pitch attached.
How is this different from the antivirus we already have?
Standard antivirus only looks for known viruses. Our Advanced and Complete plans use SentinelOne, which watches how a device behaves and can stop ransomware as it starts, then cut the device off from your network. On top of that, a security team watches around the clock, which antivirus on its own does not give you.
Do we have to be an existing Atema IT client?
No. Cyber Protection can be set up as a standalone service, whether or not we look after the rest of your IT. It fits together neatly when we do, because we already know your systems, but that is not a requirement.
Which plan do most businesses choose?
Advanced. Antivirus on its own no longer meets what most insurers and security professionals expect, and the 24/7 detection and response in Advanced is what contains a serious incident quickly. Complete adds compliance and investigation tools for businesses with more at stake.
Is there a minimum number of users or a long contract?
No minimum number of users, and billing is monthly. You can add or remove staff and devices as your business changes.
What is included on each device?
Every plan protects your people, email and Microsoft 365 accounts. Advanced and Complete also include SentinelOne on one device per user, with extra devices at £2.99 a month on Advanced and £3.99 a month on Complete.
Will this help with our cyber insurance?
Yes. Insurers increasingly expect endpoint detection and response, round-the-clock monitoring and staff training before they will offer cover or renew. Advanced and Complete give you documented evidence those controls are in place, which makes renewal questionnaires far simpler.
Where is our data held?
The platform Cyber Protection is built on is SOC 2 Type II certified, with EU data residency.
Find out exactly where you stand.
Book a free, no-obligation security assessment and we will show you exactly what an attacker sees when they look at your business. Or pick a time straight from our calendar.