Website only

Three tiers. Fixed setup fees.

Hardening for your public site: Cloudflare edge first, then application controls, then optional monitoring and Slack alerts. Scope and price are agreed before changes go live.

Book a free 20‑min scope call Technical detail

TIER 1

Edge Essentials

From £349 setup · one hostname

For brochure sites, landing pages, and “we need HTTPS and WAF yesterday.”

  • Cloudflare proxied DNS, Always HTTPS, TLS settings
  • Baseline WAF + bot/scrape rules
  • Security headers review (HSTS, CSP starter, frame control)
  • External posture snapshot + one-page handover PDF
  • Optional: Wazuh agent + Slack alerts (add-on quote)
Start with Tier 1
TIER 2 · MOST POPULAR

Sovereign Shield

£649–£849 setup

Tailored hardening for your stack—WordPress, Node, Shopify origin, or custom app.

  • Everything in Tier 1
  • Origin lock (Cloudflare-only), Host allowlist, rate limits on login/forms
  • OWASP-style blocking on real traffic (SQLi, XSS, scanner paths)—like this site
  • Session/cookie review, CSRF on public forms where applicable
  • Signed scope + evidence pack for Cyber Essentials / insurer questions
  • Optional: Wazuh + tuned OWASP/auth rules + Slack (add-on quote)
Request Tier 2 scope
TIER 3

Guardian

From £1,095 setup

Bank-grade application controls—MFA, commerce, and strict CSP. Monitoring is optional on any tier.

  • Everything in Tier 2
  • Admin MFA, stricter CSP, Stripe/webhook hardening, Turnstile on auth & forms
  • Optional: Wazuh (full rule set) + Slack + monthly one-pager
  • Optional: ClamAV/YARA on uploads if you store files
Talk Tier 3

Optional Wazuh on any tier

Wazuh add-on (Tiers 1–3): Same class of tooling we use on darkhorsehq.co.uk—agent on your host, tuned rules (edge + app logs), alerts to Slack. Deeper rules and monthly review scale with tier; quoted at scope time (typical from ~£75 setup + ~£49–£149/mo).

Lighter alternative: Cloudflare security events + weekly human review—no full SIEM. Good for static sites; add Wazuh when you have logins, checkout, or APIs.

What we don’t sell: 24/7 staffed SOC at MSSP prices. Tuned alerts and UK-based triage when something serious fires (see IR triage).

Lab audits and inventory: Inventory · Request an audit. This page is web protection only.