Hebden Bridge · Est. 2012

Security you can actually get someone on the phone about.

Assess · Harden · Watch · Answer
Millrace Cyber is a four-person practice in Linden Mill looking after ninety small businesses across the Calder Valley and West Yorkshire. You get the same engineer every time, a report written in English rather than CVE numbers, and a number answered by someone who already knows your network.
Book a scoping callPrice it up yourself
Looking after90 local businesses
Certifications issued240 since 2013
Contract30 days rolling
IASMEAssessor

A practice, not a provider

Dinah Okonkwo started Millrace in 2012 after eight years at NHS Digital, on the straightforward observation that the businesses most likely to be badly hurt by a breach were the ones least likely to be sold anything useful. A twelve-person architects’ practice does not need a security operations centre in Reading; it needs somebody who knows which four things actually matter for a twelve-person architects’ practice, and who will pick up the phone in March when the insurer starts asking questions. Fourteen years later there are four of us, we still work out of one room at Linden Mill, and we have never taken on a client we could not name the engineer for.
Work it out yourself

What would looking after your lot actually cost?

Move the two sliders to the size of your business and switch on whichever pieces you want. The figure updates as you go, and it is the same arithmetic we use when we write the quote — no discovery call required to find out roughly where you stand.
15
Anything we would install the monitoring agent on. Phones are not counted.
8
Including part-timers and anyone on a shared mailbox — they can all be phished.
What would you like us to cover?
Guide price, per month£495–£630Excluding VAT · confirmed on quote, never on the phone
  • Devices monitored15
  • People covered8
  • Managed detection & response£135
  • Backup & recovery assurance£90
Send this to usNothing is submitted from this page. Bring the number to a scoping call and we will tell you honestly if you need less than it says.

What we do, how fast, and what it costs

Published in full, because the first question on every call is this one and we would rather you had the answer before you rang. Consultancy outside these is £110 an hour, charged in half hours.
Schedule of servicesRev. 09 · Hebden Bridge
Cyber Essentials certificationReadiness review against the five controls, the remediation list, and the IASME submission itself. We do not submit a questionnaire we have not verified.
3–4 weeks£1,450
Cyber Essentials PlusEverything above plus the hands-on audit: sampled devices, an authenticated vulnerability scan and a simulated attachment test.
5–6 weeks£2,900
Managed detection & responseEndpoint monitoring triaged by a named engineer, with anything genuine escalated to you the same working day.
Same day£14 / device
External penetration testCREST-registered testing of your internet-facing systems, written up so your board and your engineer both get something useful.
5 daysfrom £3,200
Phishing simulation & trainingSix runs a year and a thirty-minute session for anyone who clicks — booked into their calendar, not sent as a link.
Quarterly£39 / person / yr
Incident response retainerA one-hour response commitment, an agreed contact chain, and your network already documented before anything goes wrong.
1 hour£320 / month
Retained clients pay no call-out and no out-of-hours premium. Everything is a thirty-day rolling agreement — if we stop being useful, you stop paying.Prices held to 31 March
© WardHomeThe PracticeWhat We Do