Is your data at risk?

Firewall: your first line of defence

A professional environment needs a Next-Generation Firewall (NGFW). We recommend Sophos firewalls for their advanced capabilities, including intrusion detection (IDS/IPS) and protection against malicious attacks.

When sizing a firewall, the key factor is the number of "full users" — the people using advanced features such as IDS/IPS and web filtering.

Sizing examples

• A 10-person office: everyone counts as a full user, so you need a firewall rated for 10 full users.
• A hotel with 5 back-office staff and 200 Wi-Fi guests: the 5 are full users; the 200 guests do not use advanced features but must sit on a separate VLAN.
• 10-user office: Sophos XGS 87 or XGS 107 — from €900–1200 including protection.
• Hotel, 5 back-office + 200 Wi-Fi: Sophos XGS 116 or XGS 136 — from €1200–1500 including protection.

Note: the final choice depends on your internet speed, throughput requirements and the number of concurrent connections.

Antivirus & EDR: layered protection

Top-tier antivirus is essential on every endpoint. Choose solutions with real-time threat detection, automatic quarantine of infected files and central cloud management.

Sophos Intercept X provides complete protection against ransomware, malware and exploits, using deep learning for signature-less detection, anti-ransomware that halts file encryption, and rollback for affected files.

• Servers: Sophos Intercept X for Server with XDR — detection and response across multi-cloud, on-premises or hybrid environments.
• Desktops and mobiles: Intercept X Advanced, with mobile protection through Sophos Mobile.
• Desktop/mobile protection: roughly €35–€50 per user or device per year.
• Server protection: from €150–€250 per server per year, depending on features.
• Alternatively Datto Antivirus with Anti-Ransomware: roughly €30–€45 per device per year, paired with RMM.

RMM for patching and updates

RMM (Remote Monitoring and Management) is the tool your support company uses to manage and protect your network effectively.

• Easy management: real-time system monitoring, update and patch management.
• Secure remote access over hardened channels, avoiding tools like TeamViewer or AnyDesk that can introduce security gaps.
• Application control: stops staff installing unauthorised software.
• Our recommendation: Datto RMM together with Datto Antivirus and Anti-Ransomware, at roughly €9 per workstation.

BDR: backup and disaster recovery

BDR is critical to business continuity in the event of data loss or an outage. With the right system you can restore data precisely and keep operating.

• Cloud backup: copies stored in the cloud every hour.
• Endpoint backup: PCs and laptops covered as well.
• Fast recovery: a file from a specific date, or a cell in an Excel sheet from three months ago, within minutes.
• Protected on and off site: local and cloud storage, safe even in a physical disaster.
• Automated and dependable, with no human intervention required.
• Our price: €8 per computer or server, with hourly cloud backup.

Microsoft 365 & SaaS backup

Microsoft 365 delivers productivity, security and flexibility. With OneDrive and SharePoint you gain solid infrastructure for storing, sharing and collaborating on files.

• Professional credibility with email on your own domain.
• Integration with Teams, Planner and Outlook.
• Security through Defender for Office 365 against phishing and malware.

Why you still need SaaS backup

Although Microsoft 365 offers strong data protection, it includes no granular backup tool. It does not protect you from human error, malicious deletion, or limited retention policies.

• Microsoft 365 Kiosk (F1/F3): email via Outlook Web App and Teams — roughly €2–€3 per user/month.
• Microsoft 365 Business Basic: Exchange Online 50GB, OneDrive 1TB, web apps — roughly €5–€6 per user/month.
• Microsoft 365 Business Standard: everything above plus installable Office apps — roughly €11–€12 per user/month.
• Datto SaaS Backup: from €3 per user, backing up Microsoft 365 or Google Workspace.

Passing a pen test and securing cyber insurance

Meeting security standards and passing a penetration test are essential both to protect your business and to earn the confidence of cyber insurers.

Supported devices & upgrades

• Every device, from computers to printers, must still be supported by its manufacturer.
• Windows 7 machines have received no security updates since 2020.
• Older printers lack modern security protocols and can become an entry point for attacks.

Information leaks & the dark web

• Breaches routinely leak credentials and financial data onto the dark web.
• Consequences: unauthorised account access and loss of customer trust.
• Solution: dark web monitoring tools to spot leaks early and act preemptively.

Mobile device security (BYOD)

• Unsecured public Wi-Fi puts company data at risk.
• Without MDM there is no control over what users install.
• Recommendations: adopt MDM and enable VPN for secure access to company data.

Staff training & policies

• Transferring money without multi-step verification and opening phishing emails are common risks.
• Train staff on cyber threats and run phishing tests to gauge exposure.
• Keep software and firmware regularly updated.
• Enforce least-privilege access policies.
• Maintain adequate incident detection and response procedures.