cyber-trust.co.uk

What It Is

Cyber Trust is a UK-based cybersecurity service provider. Its positioning is not to replace a client’s existing IT team or MSP, nor to provide day-to-day IT support, but to complement them with security governance, risk management, certification, testing, and board-level reporting capabilities. Its core services include Fully Managed Cyber / virtual CISO, Cyber Posture Audit, Cyber Essentials / Plus, IASME Cyber Baseline, penetration testing, vulnerability assessment, security training, and documentation support.

Core Capabilities and Deployment

In terms of protection model, Cyber Trust is more focused on “security management and assurance” than on being a standalone security product. Its Cyber Posture Audit uses interviews, read-only access, document and log reviews to produce plain-English risk findings, prioritized actions, evidence indexes, and roadmaps. Fully Managed Cyber covers risk registers, governance cadence, policies, reporting, training, testing, and compliance progress, effectively taking on part of the security leadership role. Delivery is primarily service-based and can work alongside existing IT teams, MSPs, and tools. If SIEM, MDR, backup, or a 24/7 SOC is needed, Cyber Trust can help select and coordinate providers, usually billed separately.

Compliance, Management, and Pricing

On compliance, the materials explicitly mention Cyber Essentials, Cyber Essentials Plus, and IASME Cyber Baseline, with support for progressing toward ISO 27001 and sector-specific requirements. Cyber Trust is also described as an IASME Certification Body and has a CREST-certified penetration tester. For management, it supports monthly or bi-monthly operational meetings, quarterly board reporting, and ad hoc email and phone support. Pricing is not publicly disclosed. Fully Managed Cyber is quoted as a fixed fee per four weeks, customized based on size, complexity, regulatory environment, and service components. If a client moves into managed service within 30 days after an audit, the audit fee can be credited against the service.

Pros and Cons

Its strengths are a clear positioning and a low risk of conflict with existing IT teams, making it useful for clarifying security responsibilities, evidence, and priorities. The reports emphasize plain-English and board-ready output, which is practical for audits, insurance, and customer questionnaires. Cyber Essentials support includes pre-assessment, 1-to-1 remote guidance, and free retesting, which also reduces certification friction. The limitations are that pricing is opaque, making quick budget comparison difficult; it is not a tool-based platform and does not include a 24/7 SOC or licenses by default; and its service narrative is clearly oriented toward the UK market.

Best Fit and Access from China

Cyber Trust is better suited to organizations that already have IT or an MSP, typically with dozens to hundreds of employees, and that face pressure from boards, customers, insurers, or regulators. The FAQ also mentions coverage for environments ranging from around 20 people to several thousand. It is not ideal for customers who only want the cheapest one-off certificate, checkbox-style compliance, or outsourced daily IT support. Access from China is not described in the available materials, and website connectivity and payment methods are unknown. For deployment in China, alternatives could include local providers with capabilities in MLPS compliance, penetration testing, MDR/SOC, ISO 27001 consulting, and managed security services.