A clear check of your online business.
Practical help to put things right.
Business email, domain, website, Google, payment accounts and social pages, checked against one written list for a fixed price. Choose a check on its own, or a check with agreed fixes.
Is your business at risk?
As businesses change, old accounts, recovery details and security settings can be overlooked. Attackers look for exactly these gaps.
Source: UK Government, Cyber Security Breaches Survey 2025 (businesses, fieldwork 2024 to 2025), gov.uk.
The five Cyber Essentials controls
- Firewalls: the connection between your devices and the internet is protected.
- Secure configuration: default passwords and settings you do not need are changed or removed.
- Security update management: software and devices get security updates on time.
- User access control: people have only the access they need, and admin accounts are kept separate.
- Malware protection: devices are protected against viruses and other harmful software.
Cyber Essentials is the UK Government's certification scheme. Certificates are issued only by certification bodies licensed by IASME. Sayah Consulting is not a certification body: we check your business against the five controls and help you put the gaps right before you apply.
One checklist. Ten areas.
A fixed price.
We first ran this check on a UK online shop under the same ownership. In one morning it found five real gaps, including security alerts going to an unknown address, a former developer still able to sign in to the payment account, and an email domain that was not protected against spoofing.
- Fixed price, agreed in writing before we start
- Read-only access wherever possible; we never ask for your passwords
- Domain, DNS and payment account changes: we prepare and check them, you apply them with our click-by-click steps
- Changes documented, with rollback or recovery steps where available
What this service covers
Three packages
Online Setup Check
The ten-area check and your written report, with the steps to fix each item. A check only: no changes are made.Check and Fix Recommended
The check, then the agreed fixes completed and rechecked within 15 working days, with anything that depends on others clearly documented.Monthly Care
A recheck of all ten areas once a month, with one hour of help. Starts after a Check or Check and Fix.What you receive
| Included | Online Setup Check | Check and Fix | Monthly Care |
|---|---|---|---|
| Check of all ten areas against our written list | Included | Included | Included once a month |
| Written report: red, amber or green for each area | Included | Included | Included monthly summary |
| Click-by-click steps for every item, with pictures | Included | Included | Included |
| Email authentication records (SPF, DKIM, DMARC) prepared and checked; you or your provider add them | Not included | Included | Within the hour |
| Website, Google tools and social page settings fixed using access you give us | Not included | Included | Within the hour |
| Two-step sign-in switched on for every user, with help for staff | Not included | Included | Within the hour |
| Accounts of people who have left found and closed, after your written approval | Not included | Included | Within the hour |
| One company email signature, set for everyone | Not included | Included | Not included |
| Payment account review: you make the changes, guided by us | Review | Included guided | Within the hour |
| Change log: what changed, the old setting, and rollback or recovery steps where available | Not included | Included | Included |
| Agreed fixes rechecked, then our access removed | Not included | Included | Not included |
| Help by email or video call | 30-minute walk-through | Within the agreed scope, 15 working days | 1 hour a month |
Prices
Set by the number of people who sign in to your business email. Shared mailboxes that nobody signs in to directly are not counted. Each price covers one domain, one website, one Stripe and one PayPal account.
| People who sign in | Online Setup Check | Check and Fix | Monthly Care |
|---|---|---|---|
| 1 to 10 | £295 | £795 | £95 a month |
| 11 to 25 | £445 | £1,195 | £145 a month |
| 26 to 50 | £595 | £1,695 | £195 a month |
| Over 50 | Quoted after a free 20-minute call | ||
Each extra domain or website: £150 one-off with the Check or Check and Fix, or £25 a month added to Monthly Care. Cyber Essentials readiness: from £395 under its own written scope; the certification body’s fee is paid separately. Upgrade from the Check to Check and Fix within 30 days and the Check fee is taken off. Sayah Consulting is not VAT registered, so no VAT is added.
How the price compares
Published UK figures, so you can judge the value yourself.
| Option | What it costs | What you get |
|---|---|---|
| A security consultant by the day | £625 a day median, England | Time, billed by the day. About 1.5 days for the same work is around £940, before travel. |
| Cyber Essentials certificate on its own | £320 + VAT IASME fee, up to 9 staff | A certificate for five technical controls. You answer the questions and make the fixes yourself. |
| Sayah Check and Fix | £795 fixed, no VAT added | Ten areas checked, agreed fixes completed and rechecked, with a change log and written report. |
Sources: ITJobsWatch, Security Consultant contract daily rate in England, six months to 11/01/2026; IASME Cyber Essentials fees, checked 28/10/2026. The 1.5-day estimate is our own calculation.
How it works
- 1
Free call
20 minutes to agree what is included and the fixed price.
- 2
Written scope
A short agreement before any work starts. You add us as a user; we never ask for your passwords.
- 3
Check and fix
We check all ten areas and complete the agreed fixes. You apply domain and payment changes with our steps.
- 4
Report and recheck
Your written report, a final recheck, and our access removed.