Do we need this if we're a small business?

Yes. Attackers go after small businesses because defenses are thinner. The basics above stop most common attacks.

Will this satisfy our cyber insurance?

It covers many of the controls insurers ask about, and we help you complete the questionnaire. Requirements vary by insurer.

Pricing depends on your size and what you already have. We quote a fixed monthly price in writing after a free assessment.

Threat detection and response. Modern endpoint protection on every computer, watched by people, so ransomware is caught as it starts.
Identity and access. Multi-factor sign-in, single sign-on, rules that block risky logins, and a company password manager.
Email and phishing protection. Filtering for fake invoices, spoofed executives, and bad links.
Security awareness training. Short, regular lessons and phishing tests, tracked so you can show who has finished.
Vulnerability scanning. Regular scans with a prioritized list of what to fix first.
Dark web monitoring. Alerts when your company email addresses appear in known breach data.
Backup and recovery. Offsite backups, tested restores, and a written recovery plan.

Week 1. Inventory your devices and accounts, and turn on multi-factor sign-in.
Week 2. Add email protection and confirm your backups actually restore.
Week 3. Install endpoint protection and put patching on a schedule.
Week 4. Start staff training and write your incident response plan.

You get a written playbook and a team that contains the problem, restores your systems, and helps you decide who needs to be notified.