Microsoft 365 and Cyber Essentials for UK small businesses.
Fixed-price support from £12 per person a month, Cyber Essentials from £995 a year, and Microsoft 365 licences at Microsoft's UK list prices. Clear, fixed prices, all excluding VAT.
About three minutes. We reply within 2 business hours, Monday to Friday.
Not sure yet? Start with the £395 audit, credited in full if you move to Managed or Secure within 30 days.
Why cloud365.io
Five things you can check on this site before you talk to us.
Rolling monthly, 30 days' notice
Support plans have no annual tie-in: rolling monthly with 30 days' notice, minimum 5 users. Your tenant, data and domain stay yours. The plans.
Clear, fixed prices
Support from £12 a person a month, the £395 audit, Cyber Essentials from £995, DCC from £1,445, licences from £5.40 at Microsoft's UK list prices, and consultancy. All excluding VAT. See all prices.
Cyber Essentials and DCC cost less on a support plan
For Managed and Secure clients, Cyber Essentials is from £795 a year instead of £995, Plus from £2,195 instead of £2,495, and DCC Level 0 from £1,195 instead of £1,445, because the plan already protects and patches your computers. The packages.
DCC packages ready before the MoD's date
DCC Level 0 from £1,445 and Level 1 from £5,595 a year, with Cyber Essentials included and renewed each year. The MoD has asked its industry partners to reach Level 0 by 31 December 2026. DCC certification.
A fixed monthly price for a fractional Head of AI
From £1,050 a month for 1 day: an AI use policy, a Copilot readiness check of your Microsoft 365, a measured pilot and staff training, with a 3-month minimum. Fractional Head of AI.
How we deliver
How we start
You answer a few short questions, about three minutes. We reply within 2 business hours with any questions or a written quote. Nothing starts until you agree it in writing.
What you get each month
Support Monday to Friday, 8am to 6pm UK time, excluding bank holidays. First reply within 2 business hours, or 1 on Secure. On Managed and Secure, remote fixes are unlimited in those hours. Licences bought through us come on one invoice, at Microsoft's UK list prices.
How we report
Managed includes a monthly security score check and a quarterly review. Secure adds a monthly security report mapped to Cyber Essentials controls and the yearly Microsoft 365 audit. Every audit ends in a written report: what's fine, what's at risk, what to fix first.
The terms
Support plans are rolling monthly with 30 days' notice, minimum 5 users. Managed and Secure have a minimum of £250 a month. Your tenant, data and domain stay yours. We work through named admin accounts protected by MFA, and read-only access for audits.
Support plans
One price per person each month, whoever supplies your licences. Monday to Friday, 8am to 6pm UK time, with your first reply within 2 business hours.
Which plan is for me?
- You want a helpdesk and admin for Microsoft 365, nothing moreEssentials
- You also want your computers monitored, patched and protectedManaged
- You have compliance to show, and want the reports and the yearly audit includedSecure
Essentials
Microsoft 365 help and admin
£12per user per month
Minimum 5 users
10 people£120 a month
First reply within 2 business hours
Included
- Email helpdesk for your staff on Microsoft 365 problems
- Starters and leavers set up and removed
- Licence changes and renewal dates managed
- Password and MFA resets
- Shared mailbox and Teams changes
Not included
- No computers or devices managed
- No endpoint protection: no Huntress EDR, no Defender set up
- No Microsoft 365 backup
- Remote fixes charged at £95 an hour, not unlimited
Managed adds these.
Recommended
Managed
Microsoft 365 and computers, monitored and protected
£35per user per month
Minimum 5 users, and £250 a month
10 people£350 a month
First reply within 2 business hours
Included
- Everything in Essentials
- Unlimited remote fixes for Microsoft 365 and your managed computers, during support hours
- Computers monitored and patched with NinjaOne, up to 2 per user
- Huntress Managed EDR, watched by a 24/7 security team
- Microsoft Defender for Business set up and managed
- Security settings kept: MFA, conditional access where your plan allows, SPF, DKIM and DMARC
- Microsoft 365 security settings applied from a tested baseline and checked for drift, with your policies backed up so they can be restored
- Microsoft 365 backup of email, OneDrive, SharePoint and Teams
- Monthly security score check and a quarterly review
Not included
- Huntress Managed ITDR, watching Microsoft 365 sign-ins 24/7
- Security awareness training and phishing tests for your staff, run with Huntress
- Laptops and phones managed with Intune (Business Premium)
- Monthly security report mapped to Cyber Essentials controls
- The yearly Microsoft 365 audit included
Secure adds these.
Secure
For firms with compliance to show
£55per user per month
Minimum 5 users, and £250 a month
10 people£550 a month
First reply within 1 business hour
Included
- Everything in Managed
- Huntress Managed ITDR, watching Microsoft 365 sign-ins 24/7
- Security awareness training and phishing tests for your staff, run with Huntress
- Laptops and phones managed with Intune (Business Premium)
- Monthly security report mapped to Cyber Essentials controls
- The yearly Microsoft 365 audit included
The totals shown are for 10 people. Per user per month, excluding VAT, on top of your Microsoft 365 licences. Minimum 5 users. Managed and Secure have a minimum of £250 a month. Rolling monthly, 30 days' notice. Onboarding: one month's support fee, waived on a 12-month agreement.
Bespoke. On-site visits, servers, more than 50 people, 24/7 cover or a mix of plans. Get a bespoke quote
Every plan covers
- Licences and renewals. Licence changes made and renewal dates managed, so nothing rolls over by accident.
- Help for your staff. An email helpdesk for Outlook, Teams, OneDrive and SharePoint problems, plus password and MFA resets.
- Starters and leavers. Accounts set up and removed, and shared mailbox and Teams changes made.
Quoted separately, in writing: moves from Google Workspace or another Microsoft 365, Intune set-up, and Copilot readiness checks.
Nothing starts until you agree a written quote.
The Microsoft 365 audit
Not sure what you need yet? Start here. £395 fixed for up to 25 users, credited in full if you move to Managed or Secure within 30 days.
We find the security gaps in your Microsoft 365 setup and give you a list of fixes in priority order. We use read-only admin access, change nothing while we look, and you can remove our access as soon as the report is delivered.
Licence check
Example data| Licence | Paid | In use |
|---|---|---|
| Business Premium | 24 | 21 |
| Business Standard | 12 | 12 |
| Exchange Online (Plan 1) | 8 | 3 |
| Copilot add-on | 6 | 2 |
12 seats paid for that nobody uses
An illustration of one thing the audit looks for. Your numbers will be different.
You get a written report. What's fine, what's at risk and what to fix first. Where they apply, findings are mapped to Cyber Essentials and ISO 27001 controls. The report does not certify your business. Fix it yourselves, or ask us to.
We also sell the support plans that fix what the audit finds, which is why the fee is credited if you move to Managed or Secure within 30 days. You're under no obligation to use us, and the report is yours to give to any provider.
- Sign-in and MFAWhich accounts use MFA, and whether older sign-in methods leave gaps.
- Admin rolesWho holds admin rights, and whether they still need them.
- Conditional accessRules for where, how and from which devices people can sign in.
- SharingWhat SharePoint, OneDrive and Teams share outside the business.
- Email securitySPF, DKIM and DMARC, and protection against phishing.
- DevicesWhich laptops and phones are managed, encrypted and up to date.
- Audit and retentionWhether activity is logged and data is kept as your obligations require.
- LicencesSeats paid for that nobody uses, and plans that don't fit the person.
Read-only access. We change nothing while we look.
Cyber Essentials and DCC
Cyber Essentials is the UK government-backed certificate that shows your business has the basic security controls in place. Defence Cyber Certification (DCC) builds on it for Ministry of Defence suppliers. Every package includes the certification fee and our help to pass.
Which one do you need?
- A customer, tender or insurer asked for Cyber EssentialsCyber Essentials
- The contract says Cyber Essentials PlusCyber Essentials Plus
- A Ministry of Defence contract sets a Cyber Risk ProfileDCC Level 0 or Level 1
Cyber Essentials packages
Cyber Essentials
The government-backed certificate most customers, tenders and insurers ask for
1–9 people: £995a year
£795 if you're on our Managed or Secure plan
10–19 people: £1,295a year
£995 if you're on our Managed or Secure plan
20–49 people: £2,245a year
£1,495 if you're on our Managed or Secure plan
50–99 people: £3,195a year
£1,995 if you're on our Managed or Secure plan
- The certification fee
- We check your answers and support the submission
- Device protection and app patching all year
- IASME cyber insurance if you qualify, and renewal handled
Cyber Essentials Plus
Cyber Essentials plus an independent technical audit, for contracts that ask for Plus
1–9 people: £2,495a year
£2,195 if you're on our Managed or Secure plan
10–19 people: £2,995a year
£2,595 if you're on our Managed or Secure plan
20–49 people: £3,895a year
£3,295 if you're on our Managed or Secure plan
50–99 people: £5,095a year
£4,295 if you're on our Managed or Secure plan
- Everything in Cyber Essentials
- The Plus audit: a remote technical test by an assessor
- Our pre-audit check, and we book the assessor
- GDPR toolkit and policy templates
DCC packages, for Ministry of Defence suppliers
DCC Level 0
For defence contracts that ask for Level 0, with Cyber Essentials included
1–9 people: £1,445a year, 3-year term
£1,195 if you're on our Managed or Secure plan
10–19 people: £1,945a year, 3-year term
£1,545 if you're on our Managed or Secure plan
20–49 people: £2,995a year, 3-year term
£2,395 if you're on our Managed or Secure plan
50–99 people: £4,495a year, 3-year term
£3,495 if you're on our Managed or Secure plan
- Cyber Essentials, renewed each year
- The DCC Level 0 certification fee
- We prepare and support your DCC application
- The yearly DCC check-in handled
DCC Level 1
For defence contracts that ask for Level 1, with Cyber Essentials included
1–9 people: £5,595a year, 3-year term
10–19 people: £6,195a year, 3-year term
20–49 people: £7,295a year, 3-year term
50–99 people: £8,795a year, 3-year term
- Cyber Essentials, renewed each year
- The DCC Level 1 certification fee
- We check your setup against the 101 Level 1 controls
- We prepare and support your DCC application
Already hold Cyber Essentials? The Plus audit on its own is from £1,495, and DCC Level 0 on its own is from £995 for 3 years.
Per organisation, excluding VAT, invoiced yearly. More than 99 people: quoted.
Terms, insurance and timings
Per organisation, per year, excluding VAT. Invoiced yearly in advance. More than 99 people: quoted.
Per organisation, excluding VAT. Level 0 and Level 1 are a 3-year term, invoiced yearly in advance. Level 0 only is one payment for the 3 years. More than 99 people, or Levels 2 and 3: quoted.
Per organisation, per year, excluding VAT, while you're on Managed or Secure. DCC Level 0 is a 3-year term, invoiced yearly. More than 99 people: quoted.
IASME's cyber liability insurance comes with the certificate for UK organisations with turnover under £20m that certify the whole organisation and opt in. It covers incident response up to a £25,000 limit, underwritten by AIG UK. It does not cover money stolen by electronic means or cyber fraud, so check your own cover too.
The Plus audit has to be completed within 3 months of your Cyber Essentials certificate being issued. Book it at least 3 weeks ahead.
Fixing what the review finds: on our Managed and Secure plans, remote fixes to Microsoft 365 and your managed computers are included. On Essentials it is £95 an hour, and £125 an hour without a plan, or a fixed price once we've checked your setup.
Certification is decided by the assessor. We prepare you and support the submission.
DCC is run by the Ministry of Defence with IASME. Each contract's Cyber Risk Profile sets the level.
Levels 0 and 1 need Cyber Essentials. Levels 2 and 3 need Cyber Essentials Plus, and we quote them.
DCC runs on a 3-year cycle with a yearly check-in. Your Cyber Essentials certificate still has to be renewed every year, which the Level 0 and Level 1 packages do.
Level 1 has 101 controls. Work on controls you don't yet have is £95 an hour on our Essentials plan or £125 an hour without a plan, or we fix a price once we've checked your setup. On Managed and Secure, remote fixes to Microsoft 365 and your managed computers are already included. Certification is decided by the certification body.
In detail: Cyber Essentials, Cyber Essentials Plus and DCC certification.
Microsoft 365 licence prices
The same prices as Microsoft's UK list. Through us they're on one invoice, and we time any switch to your renewal date so nobody's email stops.
These prices are for licences only. Per user per month, excluding VAT, on an annual subscription paid yearly. Checked 22 October 2026.
Business plans (up to 300 users)
| Plan | Per user per month |
|---|---|
| Microsoft 365 Business BasicWeb and mobile Word, Excel, PowerPoint and Outlook, business email, Teams and 1 TB of storage per person. | £5.40 |
| Microsoft 365 Business Standard with CopilotDesktop, web and mobile apps, business email and Teams, with Copilot built in. | £18.10 |
| Microsoft 365 Business Premium with CopilotEverything in Standard, plus device management, advanced security and data protection, with Copilot built in. | £24.60 |
Add-ons
| Plan | Per user per month |
|---|---|
| Microsoft 365 Copilot BusinessCopilot for a Microsoft 365 Business plan you already have. | £16.10 |
| Microsoft Teams Phone StandardA cloud phone system for Teams. Phone numbers and call minutes need a calling plan or phone provider. | £7.70 |
| Microsoft Defender for BusinessDevice protection on its own. Already included in Business Premium. | £2.30 |
Other plans, such as Exchange Online, Apps for business, E3 or E5, are quoted at today's price. Time-limited Microsoft offers are not included.
Consultancy
Advice and project work for UK businesses that need more than day-to-day support: a part-time technology director, a network designed properly, a plan before you spend, or a project delivered for a fixed price.
A short call, then a written proposal with a fixed price or a day rate, then delivery with a named point of contact.
Fixed-price pages: fractional CTO, Head of AI, Microsoft 365 migration and Intune setup.
- Fractional CTO or IT director£1,950a month for 2 days
- Fractional Head of AI£1,950a month for 2 days
- Network and Wi-Fi design
- IT strategy and roadmap£3,500fixed, up to 50 people
- Microsoft 365 projects£1,650fixed, migration up to 10 users
- Security and compliance readinessFrom £1,250fixed price
Priced after a short call: a fixed price or a day rate in a written proposal.
Questions
Short answers to what people ask us first. Anything else, email support@cloud365.io and we reply within 2 business hours.
Do we have to buy our licences from you?
No. If you already have Microsoft 365, we can manage it or audit it where it is.
Will moving our licences to you interrupt email or files?
No. Changing who supplies your licences doesn't move your mailboxes or files. We plan the switch around your renewal date so people keep working as normal.
Do we keep our own Microsoft 365 tenant?
Yes. Your tenant, your data and your domain stay yours. We work in it through named admin accounts protected by MFA.
What access do you need for an audit?
Read-only admin access, such as Microsoft's Global Reader role. We look, we don't change anything, and you can remove our access as soon as the report is delivered.
How is support priced?
Licences are charged at the Microsoft prices on this page. Support is a separate plan per person each month: Essentials £12, Managed £35 or Secure £55, excluding VAT, minimum 5 users, rolling monthly with 30 days' notice. Managed and Secure have a minimum of £250 a month, include NinjaOne monitoring and Huntress protection for computers, and include unlimited remote fixes during support hours. The audit is £395 fixed for up to 25 users. For on-site visits, servers, larger teams or 24/7 cover, describe what you need and we'll quote.
We're fewer than 5 people. Can we have a support plan?
Our support plans are priced for at least 5 users. If your team is smaller, message us at support@cloud365.io, through the chat or with the enquiry form, and we'll suggest what fits and quote it in writing.
Can you get us Cyber Essentials?
Yes. Cyber Essentials is £995 a year for up to 9 people and Cyber Essentials Plus is £2,495, excluding VAT, with larger teams priced by size. Both include the certification fee, our help with your answers and submission, a device protection agent, app patching and renewal each year. On our Managed or Secure plan they cost less, from £795 and £2,195, because your plan already protects and patches your computers. UK organisations with turnover under £20m that certify the whole organisation and opt in get IASME's cyber liability insurance with the certificate; it does not cover money lost to cyber fraud. Certification is decided by the assessor.
Do you offer Defence Cyber Certification (DCC)?
Yes, for Ministry of Defence suppliers. For up to 9 people, DCC Level 0 is £1,445 a year and Level 1 is £5,595 a year, excluding VAT, on a 3-year term. Both include Cyber Essentials, renewed each year. On our Managed or Secure plan, Level 0 is £1,195 a year. If you already hold Cyber Essentials, Level 0 on its own is £995 for the 3 years. Levels 2 and 3 need Cyber Essentials Plus and are quoted.
What are your support hours?
Monday to Friday, 8am to 6pm UK time, excluding bank holidays. We reply to support emails within 2 business hours. If email is down or nobody can sign in, put URGENT in the subject line and we pick it up first. Cover outside these hours can be agreed.
Which parts of Microsoft 365 do you cover?
Licences and billing, Exchange Online email, Teams, SharePoint and OneDrive, Entra ID sign-in and MFA, Intune for laptops and phones, and Copilot.
Get a written quote
- Tell us what you need. A few short questions, about three minutes.
- We reply within 2 business hours with any questions, or a written quote.
- You choose. Nothing starts until you agree the quote in writing.
Prefer to talk first? Book a free 15-minute call.
Or email support@cloud365.io. Monday to Friday, 8am to 6pm UK time.
Guides
Plain-English guides for UK businesses that buy, run or check Microsoft 365.
Cyber Essentials Cost in 2026: The Full Price for UK Firms
The real Cyber Essentials cost in 2026: the £320 to £600 fee plus fixes, old PCs, Plus and renewals. Worked examples for firms of 4 to 40 staff.
Read the guide
Microsoft 365 Business Basic, Standard or Premium: Which Fits?
Basic suits email and web apps, Standard adds desktop Office, and Premium adds device and sign-in security. See UK prices and which plan fits your team.
Read the guide
Cyber Essentials or Cyber Essentials Plus: Who Needs Which?
Cyber Essentials or Cyber Essentials Plus? See what UK government, MoD, NHS, education, legal and construction rules ask for, with sources and worked examples.
Read the guide