Packages & pricing

What our security, identity and migration work costs — published in full

Every package has a defined scope, a fixed price and a delivery time. Prices exclude VAT. Larger or unusual environments are quoted after a free call.

2 days

Security Health Check

£1,250

Any business on Microsoft 365 or Google Workspace that wants to know where it stands.

  • Read-only review of identity, email, devices, sharing and backups
  • Scored report against Cyber Essentials and Microsoft best practice
  • Prioritised fix list with effort estimates
  • 60-minute walkthrough with your leadership or IT partner
3–4 days

Cyber Essentials Ready

from £2,500

Businesses that need the certificate for a tender, a customer or insurance.

  • Gap assessment against the five controls
  • Fixes applied on Microsoft 365 and devices
  • Self-assessment completed with you
  • Plus-level audit preparation if required
3–5 days

Device Management Setup

from £2,500

20–300 devices, any mix of Windows, Mac, iOS and Android.

  • Platform selection and licensing
  • Zero-touch enrolment configured
  • Security baseline, encryption, patching, apps
  • Compliance wired into Conditional Access
  • Admin handover guide
3 days

SSO & Passwordless Rollout

from £2,000

Up to 15 applications; more quoted.

  • SSO for your SaaS apps on Entra ID or Okta
  • Passkeys / security keys for admins and finance
  • Joiner-leaver automation
  • Admin account clean-up

Architecture, migration & security operations

Larger pieces of work start with a fixed-price assessment. Its fee is credited against delivery if you go ahead within 60 days.

3 days

Migration Assessment & Plan

£2,250

Any business planning to move devices between MDM platforms.

  • Fleet inventory and enrolment-state review
  • Policy and compliance mapping, current to target
  • Migration path per device type, with user impact
  • Runbook, pilot plan and fixed quote for delivery
  • Fee credited against delivery if booked within 60 days
8–12 days

MDM / UEM Migration

from £6,500

Up to ~150 devices, one source and one target platform. Larger or mixed fleets quoted.

  • Target platform built to the agreed baseline
  • Pilot group, then phased waves with user comms
  • Coexistence and rollback plan for every wave
  • Post-migration validation report
  • Handover to your IT provider
4 days

Dual-IAM Architecture Review

£3,000

Businesses running, or planning, Okta and Microsoft Entra ID together.

  • Application, identity-source and lifecycle review
  • Target architecture and sign-in flow diagrams
  • MFA, Conditional Access and admin-control mapping
  • Phased implementation plan and fixed quote
  • Fee credited against implementation if booked within 60 days
8–10 days

Okta ↔ Entra ID Federation

from £6,500

Implementation of an agreed dual-IAM design. Complex app estates quoted.

  • Federation and SSO between Okta and Entra ID
  • Group and attribute synchronisation
  • Single MFA strategy, no double prompts
  • Conditional Access aligned to device compliance
  • Tested sign-in flows and runbooks
6–7 days

Defender XDR Deployment & Tuning

from £4,750

Up to ~150 endpoints on Windows and macOS. Larger estates quoted.

  • Licensing and readiness review
  • Defender for Endpoint onboarding via Intune or Jamf/Kandji
  • Attack surface reduction rules, audit to block
  • Alert tuning and automated investigation settings
  • Response runbooks and handover
8 days

Sentinel Foundation

from £5,750

Businesses setting up Microsoft Sentinel for the first time.

  • Workspace, access model and retention design
  • Entra ID, Microsoft 365 and Defender connectors
  • Around 15 tuned analytics rules
  • Two automated response playbooks
  • Monthly cost estimate and runbooks
3 days

Sentinel Cost & Detection Review

£2,250

Businesses already running Sentinel that want lower bills and better alerts.

  • Ingestion and retention review with savings identified
  • Analytics rule coverage and noise review
  • Prioritised fix list with effort estimates
  • 60-minute walkthrough with your team

Ongoing security leadership

1 day / month

vCISO Retainer

from £1,800/mo

Businesses that need a named security owner without a full-time hire.

  • Monthly review and report
  • Policies kept current
  • Questionnaires and audits owned
  • Incident first-call
  • 2-day (£3,400) and 4-day (£6,400) tiers

Assumptions, stated plainly

  • One Microsoft 365 or Google Workspace tenant; additional tenants quoted at 40% of the package price
  • Up to 150 users and 300 devices unless the package says otherwise; above that, quoted per 50
  • You provide Global Admin access (or work alongside your IT partner who has it) and a contact who can approve changes
  • Remote delivery. On-site days are £950 plus travel
  • Licences you already own are used first; any recommended upgrade is costed before you commit
  • Microsoft licences and Azure / Sentinel data ingestion are billed by Microsoft and are not included

What this work costs elsewhere

UK agencies list Microsoft 365 security assessments at £850–£1,250 per consultant day and typically scope three to five days, so £2,500–£6,000 for work comparable to the Hardening Sprint. Published vCISO retainers for growing businesses run £3,000–£6,000 a month for five to ten days. Contract security architects in the UK charge a median of about £625 a day, and £825 at the top end. Our prices are lower than agency rates because there is no account manager, no sales cycle and no junior doing the work: a senior architect handles the whole engagement.

Frequently asked

Do prices really stay fixed?

Yes, for the scope in the package. If we discover something outside scope (a second tenant, 400 unmanaged devices), we tell you before doing anything and quote it separately.

Do we need to buy new licences?

Usually not. Most of the work uses what you already have. Where an upgrade genuinely matters (for example Microsoft 365 Business Premium for Intune and Defender), we show you the cost and the benefit and let you decide.

Can our IT support company be involved?

Please. We work alongside MSPs all the time. They keep running the day-to-day; we do the security design and hardening and hand over documentation they can support.

Where are you based and can you work with us?

Soliman Consulting Ltd is a UK company. Delivery is remote, so we work with businesses anywhere in the UK; on-site visits are arranged when they add value.

How do we pay?

Packages are invoiced 50% on booking and 50% on completion. Retainers are monthly in advance. Bank transfer in GBP, EUR or USD.

Not sure where your business stands?

Book a free 30-minute call. We will tell you the three things we would fix first — no report to buy, no hard sell.

Book a free call