Ward
Edit Template
Hebden Bridge · Est. 2012

Security you can actually get someone on the phone about.

Assess · Harden · Watch · Answer
Millrace Cyber is a four-person practice in Linden Mill looking after ninety small businesses across the Calder Valley and West Yorkshire. You get the same engineer every time, a report written in English rather than CVE numbers, and a number answered by someone who already knows your network.
Book a scoping callPrice it up yourself
Looking after90 local businesses
Certifications issued240 since 2013
Contract30 days rolling
IASMEAssessor

A practice, not a provider

Dinah Okonkwo started Millrace in 2012 after eight years at NHS Digital, on the straightforward observation that the businesses most likely to be badly hurt by a breach were the ones least likely to be sold anything useful. A twelve-person architects’ practice does not need a security operations centre in Reading; it needs somebody who knows which four things actually matter for a twelve-person architects’ practice, and who will pick up the phone in March when the insurer starts asking questions. Fourteen years later there are four of us, we still work out of one room at Linden Mill, and we have never taken on a client we could not name the engineer for.
Work it out yourself

What would looking after your lot actually cost?

Move the two sliders to the size of your business and switch on whichever pieces you want. The figure updates as you go, and it is the same arithmetic we use when we write the quote — no discovery call required to find out roughly where you stand.
15
Anything we would install the monitoring agent on. Phones are not counted.
8
Including part-timers and anyone on a shared mailbox — they can all be phished.
What would you like us to cover?
Guide price, per month£495–£630Excluding VAT · confirmed on quote, never on the phone
  • Devices monitored15
  • People covered8
  • Managed detection & response£135
  • Backup & recovery assurance£90
Send this to usNothing is submitted from this page. Bring the number to a scoping call and we will tell you honestly if you need less than it says.

What we do, how fast, and what it costs

Published in full, because the first question on every call is this one and we would rather you had the answer before you rang. Consultancy outside these is £110 an hour, charged in half hours.
Schedule of servicesRev. 09 · Hebden Bridge
Cyber Essentials certificationReadiness review against the five controls, the remediation list, and the IASME submission itself. We do not submit a questionnaire we have not verified.
3–4 weeks£1,450
Cyber Essentials PlusEverything above plus the hands-on audit: sampled devices, an authenticated vulnerability scan and a simulated attachment test.
5–6 weeks£2,900
Managed detection & responseEndpoint monitoring triaged by a named engineer, with anything genuine escalated to you the same working day.
Same day£14 / device
External penetration testCREST-registered testing of your internet-facing systems, written up so your board and your engineer both get something useful.
5 daysfrom £3,200
Phishing simulation & trainingSix runs a year and a thirty-minute session for anyone who clicks — booked into their calendar, not sent as a link.
Quarterly£39 / person / yr
Incident response retainerA one-hour response commitment, an agreed contact chain, and your network already documented before anything goes wrong.
1 hour£320 / month
Retained clients pay no call-out and no out-of-hours premium. Everything is a thirty-day rolling agreement — if we stop being useful, you stop paying.Prices held to 31 March

Four people, and you will work with all of them

Dinah Okonkwo — Founder, principal consultant

CREST Registered Penetration Tester, twenty-two years, eight of them at NHS Digital. Runs the testing work and writes the reports. If you disagree with a finding, Dinah is who you argue with, and she has been talked out of one before.

Rowan Tasker — Head of managed detection

CompTIA CySA+ and Microsoft 365 Certified: Security Administrator. Watches the monitoring, decides what is genuine and what is a printer driver, and rings you about the first kind only.

Imran Vasey — Incident response lead

GIAC Certified Incident Handler. Holds the out-of-hours phone on a rota, and has run eleven live incidents for our clients since 2021 — four of which turned out to be nothing, which he counts as the good ones.

What we will not sell you

We do not resell hardware, we take no commission from any vendor, and we will not quote for a security operations centre that a business of thirty people cannot use. The uncomfortable truth of this trade is that most small-business breaches are stopped by four unglamorous things — patching, multi-factor authentication, tested backups and staff who know what a real invoice looks like — and every one of those is cheap. A firm that leads with threat intelligence dashboards before it has checked whether your backups restore is selling you the exciting part instead of the useful part. We would rather do the four things properly, charge you less than you expected, and keep you for a decade. Our oldest client signed in 2013 and has never been through a competitive tender since.
“We had a supplier invoice fraud attempt land on a Friday afternoon. Rowan had the mailbox rules pulled apart and the finance team briefed before five, and the report the following Tuesday was something I could actually hand to our insurer without translating it first.”
Helen Ashworth, Practice Manager — Shawcross & Hale, Halifax

What clients say afterwards

No reviews to show yet

The questions we get asked on the first call

  • Almost certainly not, and size is the wrong question. Most attacks on businesses your size are not aimed at you personally — they are automated, they sweep for an unpatched box or a password that has appeared in a breach dump, and they do not know or care what you do. Of the eleven live incidents we have handled since 2021, nine started with credentials from an unrelated breach being tried against a mailbox.
Linden Mill, Hebden Bridge

Tell us what worries you. We’ll tell you if it should.

A forty-minute scoping call, on site or over Teams, with nothing to buy at the end of it. You will speak to the engineer who would do the work — we do not employ a salesperson, which is either reassuring or a warning depending on how much you like being sold to.
Book a scoping call01422 419 380
Mon–Fri 08:30–17:30 · incident line answered 24/7 for retained clients
Find us

Millrace Cyber

  • Unit 4, Linden Mill, Linden Road, Hebden Bridge, West Yorkshire HX7 7DP
  • 01422 419 380
  • Mo-Fr 08:30-17:30