Our cyber security solutions
Here are the common cyber security gaps small businesses face and the tools we use to fix them.
You probably don't need every cyber security tool. You need the right gaps closed.
You may already have IT support, Microsoft 365, antivirus, backups or some security controls in place. Good.
This page helps you choose the missing layer: protect devices, secure email, monitor suspicious activity, manage passwords, train people, recover data or prove your security to somebody else.
What are you actually trying to improve?
You do not need to know which vendor, acronym or product category you need. Pick the outcome that sounds most like your problem.
Combine several common controls without choosing every product individually.
View packages → 02 Devices and ransomware Protect devices and keep software patched.Endpoint protection, patching, safer web access and ransomware-focused controls.
Protect devices → 03 Alerts and out-of-hours risk Make sure somebody investigates.Managed endpoint, identity and security monitoring backed by human investigation.
View managed monitoring → 04 Phishing and email Stop more dangerous email before it lands.Add another layer around phishing, malicious links, attachments and impersonation.
Protect email → 05 Passwords and shared access Stop password chaos becoming the easy way in.Store, share and manage business passwords more safely.
Improve passwords → 06 People and phishing Help people recognise suspicious requests.Practical security awareness without treating people as the weakest link.
View training → 07 Data and recovery Know you can get working again.Protect Microsoft 365, Google Workspace, servers and critical systems.
View backup options → 08 Evidence and compliance Prove security to insurers, clients and suppliers.Cyber Essentials, SMB1001 and cyber insurance readiness.
View assurance options →Fix one gap, choose a package or improve things in stages.
There is no prize for buying the longest list of tools. The aim is to get the important controls working together.
Fix one known gap
If you already know the problem, choose the individual service that solves it.
Choose a package
Useful when several common controls need improving together and you want a simpler route.
Build a phased plan
Fix the highest-risk gaps first, then add further layers as budget and requirements change.
Glitch & Black Swan explain
Glitch doesn't care how many security products you've bought.
"Antivirus? Great. Backup? Lovely. MFA? Even better. I only need one gap."
Glitch, checking whether the pieces actually join up
Most organisations already have some cyber security in place.
The problem is often what sits between it.
That is why this page is not about buying every tool on the menu.
It is about working out which gaps matter in your organisation, then choosing the smallest sensible combination of protection, monitoring, recovery and evidence to close them.
"The tools matter. But somebody still needs to join them up."
Black SwanBlack Swan joins the pieces together.
We can work with what you already have, add the missing layers and help make sure somebody knows who owns what.
Advice first. Tools second. That does not mean tools last. When the right answer is a product, we can supply, deploy and help manage it too.
Want several controls joined together without building the package yourself?
Our packages give smaller organisations a straightforward route from baseline device protection through to 24/7 managed monitoring.
Nest Protect
Managed endpoint protection, patching and ransomware-focused controls for organisations that need the basics handled properly.
From £3.99/device/month + VAT
View Nest Protect → Device + web protectionCygnet Shield
Builds on the managed device baseline with DNS-layer protection to help block more risky destinations.
From £5.99/device/month + VAT
View Cygnet Shield → 24/7 managed monitoringSwan Guard Pro
Prevention, security awareness and 24/7 managed detection and response for organisations that need somebody watching.
From £13.99/device/month + VAT
View Swan Guard Pro → Build a Huntress routeHuntress managed security
Combine managed EDR, Microsoft 365 identity monitoring, awareness training and security logging around your requirements.
Explore Huntress options →Not sure a package is the right answer?
That is exactly what the rest of this page is for. You can buy individual layers where there is a clear gap rather than replacing security that is already doing its job.
Reduce the easy routes in.
Laptops, desktops and servers still need sensible preventative controls: malware protection, timely patching, safer web access and protection against suspicious encryption.
Especially where antivirus, patching or web protection is inconsistent or difficult to manage.
Next-generation antivirus
Stronger managed protection for laptops, desktops and servers against malware and other endpoint threats.
View endpoint protection → Patch managementKeep software updated
Manage operating system and third-party software updates without relying on everybody remembering to patch their own device.
View patch management → DNS protectionBlock more risky destinations
Help stop devices reaching known malicious sites, phishing destinations and suspicious web infrastructure.
View DNS protection → RansomwareWatch for suspicious encryption
Add a focused layer designed to identify unauthorised encryption activity before damage spreads further.
View ransomware protection →When this route makes sense
Start here when the biggest gaps are on the devices themselves rather than in identity, email or recovery.
- Basic antivirus is no longer enough for your requirements.
- Software updates are inconsistent or difficult to prove.
- Staff regularly work away from the main office network.
- Insurers or customers are asking about malware and patching controls.
Security alerts are more useful when somebody is actually watching them.
Huntress is a stronger fit when the question changes from "what security have we installed?" to "who investigates when something looks wrong?"
You need managed monitoring without building your own Security Operations Centre.
Huntress Managed EDR
Monitor laptops, desktops and servers for suspicious behaviour, backed by 24/7 human investigation.
From £7/endpoint/month ex VAT
View Huntress EDR → Microsoft 365 identitiesHuntress ITDR
Monitor Microsoft 365 accounts for suspicious identity activity, account compromise and attacker persistence.
View Huntress ITDR → Security loggingHuntress SIEM
Bring security logs together so relevant suspicious activity can be reviewed and investigated more clearly.
View Huntress SIEM → PeopleSecurity Awareness Training
Regular awareness training that helps people recognise phishing and social engineering without a once-a-year tick-box approach.
View awareness training →When we usually discuss Huntress
Huntress becomes particularly relevant where there is nobody internally reviewing endpoint, identity or security activity around the clock.
- You need 24/7 monitoring without hiring your own SOC team.
- You want suspicious alerts investigated by humans.
- Microsoft 365 identity compromise is a concern.
- Insurance or customer requirements now ask about EDR or monitoring.
Do not leave people to spot every dangerous email themselves.
Training matters, but email security should also help stop phishing, malicious attachments, suspicious links and impersonation before they reach the person being targeted.
Email is business-critical and staff regularly receive supplier, finance, login or impersonation attacks.
Avanan email security
Add another security layer around Microsoft 365 or Google Workspace to help stop more dangerous messages before users need to make the decision themselves.
Make safer password habits easier than the workaround.
Shared admin passwords, reused passwords, browser-saved credentials and spreadsheets full of logins usually exist because people need a practical way to work.
People need to share access safely or you need clearer control over business and administrative credentials.
Keeper Password Manager
Store, manage and share business passwords without relying on sticky notes, spreadsheets or everybody remembering increasingly complex passwords.
Help people recognise the tricks attackers use without treating them as the problem.
Useful training should improve behaviour, make reporting easier and help people recognise suspicious requests. It should not just produce an annual completion percentage.
We do not force one platform regardless of organisation size, sector or how your people learn.
GoldPhish
Security awareness and phishing education built around understandable, real-world cyber risks.
View GoldPhish → Cyber EssentialsCyberSmart Learn
Simple cyber security education that can sit alongside Cyber Essentials and everyday policy awareness.
View CyberSmart Learn → Human riskuSecure
Training, phishing simulation and human risk visibility for organisations that want more ongoing insight.
View uSecure → Managed SATManaged awareness training
Regular security awareness designed to keep phishing education useful, manageable and relevant.
View awareness training →A backup matters when you can get working again.
Protecting data is only half the conversation. The more useful question is whether you can recover the email, files, systems or servers the organisation actually needs.
What would you need back first, how quickly, and who knows how to restore it?
Compare Microsoft 365 backup
Compare Redstor, Axcient x360Cloud and ConnectWise Cloud Backup in plain English.
Compare backup options → M365 + Entra IDRedstor
Microsoft 365 backup with a strong fit where Entra ID and identity recovery also matter.
View Redstor → M365 + Google WorkspaceAxcient x360Cloud
Cloud backup for Microsoft 365 and Google Workspace with search, restore and audit features.
View Axcient x360Cloud → Straightforward M365 backupConnectWise Cloud Backup
Managed backup for Exchange, OneDrive, SharePoint and Teams with a straightforward recovery route.
View ConnectWise Backup →Axcient backup and disaster recovery
Server, workstation and disaster recovery protection for organisations where rebuilding everything would cause significant disruption.
View disaster recovery →Not sure whether your current backup is enough?
Ask what is protected, how often it is backed up, where the copy sits, who receives failed-backup alerts and when recovery was last tested.
A green tick in a backup console is not the same thing as a tested recovery plan.
Sometimes the problem is not only security. You need to prove it.
Insurers, customers, tenders and supply chains increasingly ask what controls are actually in place. Certification and readiness work turns assumptions into evidence.
Somebody outside the organisation is asking you to demonstrate what you are doing.
Cyber Essentials
A UK Government-backed certification focused on common technical controls and frequently requested in supply chains.
View Cyber Essentials support → Staged maturitySMB1001
A staged security standard designed to help smaller businesses build clearer evidence of improving cyber maturity.
View SMB1001 → Not sure which?Compare the routes
See where Cyber Essentials and SMB1001 differ before committing to a certification route.
Compare Cyber Essentials and SMB1001 → InsuranceCyber insurance readiness
Work out what is true, what is missing and what evidence you need before completing an insurance questionnaire.
Check insurance readiness →When this becomes useful
Usually when cyber security moves from "we should improve this" to "we need to demonstrate this to somebody else."
- A contract or tender asks for Cyber Essentials.
- An insurer asks about MFA, EDR, backup, patching or training.
- A customer or supplier wants evidence of security controls.
- Leadership wants a clearer picture of what is actually in place.
The gaps are often between the tools.
Buying individual products can improve security. The bigger question is whether the pieces are configured, monitored, tested and clearly owned.
Use what already works
There is no reason to replace a good control simply because we sell another one.
Fix the meaningful gaps
Prioritise the things that materially change your risk or satisfy a genuine requirement.
Agree who owns what
Know who checks alerts, tests recovery, manages access and deals with problems.
Keep evidence
Make it easier to answer insurers, clients, leadership teams and compliance checks.
Built for organisations that do not have time to become cyber experts.
Choosing cyber security without overcomplicating it.
Which cyber security solution should we start with?
Start with the problem that would cause the most meaningful risk or the requirement you actually need to satisfy. That might be endpoint protection, patching, Microsoft 365 security, backup, email protection, awareness training or evidence for an insurer or customer.
Do we need individual products or a package?
Individual solutions make sense when you already know the gap. A package can be simpler where several important controls need improving together. A phased plan can work where budget or operational constraints mean everything cannot be changed at once.
Do we need to replace our existing IT or security products?
Not automatically. If something is already working well, it may make more sense to keep it and concentrate on the gaps around it. Black Swan can also work alongside an existing IT provider.
How much do cyber security packages cost?
Cost depends on factors such as users, devices, Microsoft 365 setup, backup requirements, monitoring, locations and compliance needs. Nest Protect starts from £3.99 per protected device per month, Cygnet Shield from £5.99 and Swan Guard Pro from £13.99, excluding VAT.
Can Huntress products be combined?
Yes. Huntress EDR, identity monitoring, security awareness and security logging can be combined where the wider environment needs more than endpoint protection alone.
Can these solutions help with cyber insurance?
Many cyber insurance questionnaires ask about controls such as MFA, EDR, backups, patching, training, password management and incident response. We can help you understand what is already in place, what is missing and what needs evidence.
Can you support organisations with several locations?
Yes. Security can be standardised across offices, sites, schools, branches and remote teams while still allowing for different risks and technical requirements.
Do you only work with organisations in Chesterfield?
No. Black Swan is based in Chesterfield and supports organisations across Derbyshire, South Yorkshire and the wider UK.
Tell us what you are worried about. We will help you find the smallest sensible answer.
You do not need to arrive knowing whether the answer is EDR, DNS, ITDR, email security, backup or something else. Tell us what you have now, what is driving the conversation and what you need to achieve.