OUTSOURCED IT DEPARTMENT
The IT Department you haven’t hired
Day-to-day IT support, Microsoft 365, and security for growing businesses across London and the South East run to a standard most companies only achieve after hiring someone senior.
INCLUDED AS STANDARD FOR EVERY CLIENT
Multi-factor authentication on every account
Every machine encrypted and patched
Third-party software patched, not just Windows
Admin accounts separated and minimised
Sixteen controls in total. See the standard →
Windows and Mac, equally supported
Clients in finance, energy, property, recruitment, care, early years and more
Supporting UK businesses since 2011
You've outgrown "someone in the office who's good with computers"
Most growing businesses reach the same point. There is more to manage than anyone has time for, more at stake than there used to be, and no obvious moment to hire someone. Meanwhile, the person quietly holding it together has a real job to do.
FireLight takes this problem off your hands. We run your IT the way an in-house department would: support, Microsoft 365, devices, backup and security, on one monthly agreement, with a defined standard behind it.
We have been doing this for UK businesses since 2011. Several of our clients have been with us for more than a decade.
WHAT WE LOOK AFTER
What's included
Day-to-day support
Your team gets help when something stops working, from people who know your systems rather than reading from a script. Our service desk handles requests from 9 am to 6 pm, Monday to Friday, and escalates anything complex to a senior engineer.
Microsoft 365 and Google Workspace
New starters set up properly, leavers removed cleanly, permissions set up to make sense, and mailboxes and files where they should be. And if you are on Google Workspace and wondering about Microsoft 365, we have made that move for clients more than once.
Devices, monitoring and backup
Every laptop and desktop is encrypted, patched and monitored, on Windows and macOS alike. And your Microsoft 365 data is backed up independently of Microsoft because Microsoft does not do that for you, and most businesses assume it does.
THE STANDARD
Security isn’t an upgrade. It’s the baseline
Plenty of providers sell security as a separate line item. We think that is the wrong way round: if a control matters enough to recommend, it should already be switched on.
Every FireLight client runs on the same standard, from the first month - included in the fee rather than quoted alongside it.
DEVICES
Disk encryption enforced on every machine - BitLocker and FileVault - with the recovery key held where we can retrieve it
Standard users do not run as local administrators
Operating system patching on a managed schedule, Windows and macOS alike
Third-party application patching, because that is where most of the unpatched risk actually sits
Endpoint protection deployed and monitored, with alerts coming to us
Unsupported operating systems identified and replaced before they become a liability
IDENTITY
Multi-factor authentication enforced on every account, staff and administrators alike, with app-based approval as the default
Legacy sign-in methods blocked, so old protocols cannot be used to get around it
Administrator accounts kept separate from everyday accounts, and the number of full administrators kept to a minimum
A documented, secured emergency access account, so nobody is ever locked out of their own tenant
External sharing and guest access reviewed and set deliberately rather than left at the default
Self-service password reset, so a forgotten password is not a support ticket
Conditional access enforcing multi-factor authentication and blocking legacy sign-in
EMAIL AND DATA
Mailbox forwarding and inbox rules monitored, because changing them is one of the first things an attacker does
Email authentication configured - SPF, DKIM and DMARC
Microsoft 365 backup specified and managed by us, held in an account in your name, with restores tested quarterly and the evidence kept
We are assessed against a standard ourselves - Cyber Essentials, renewed annually.
On the Secure level we add security awareness training for every member of staff, simulated phishing on a schedule, dark web credential monitoring, patch assurance reported against the fourteen-day Cyber Essentials rule, a review of the third-party apps and AI tools your staff have connected, and a written benchmark every quarter - the same assessment we give prospects, re-run on your tenant.
Our standard requires Microsoft 365 Business Premium, Windows 11 Pro and independent Microsoft 365 backup, because conditional access, device management, encryption key recovery and recoverable data depend on them. You licence and buy all three directly, in your own name - and because we make nothing on any of them, you can take that recommendation at face value.
WHY FIRELIGHT
Why businesses stay with us
The person setting your standards is the most experienced person here
FireLight is led by its founder, who has spent over twenty years in IT support and IT management. Your security baseline and platform decisions come from that level, not from whoever happens to be free.
Windows and Mac, without the caveats
Mixed environments are normal, and we have supported both properly for years. If half your team is on Macs, that is not a complication for us.
Security is included, not quoted separately
Our security standard is included in the monthly fee. You won't receive a proposal from us with security controls in the optional column.
We do the unglamorous things consistently
Patching, backups, leaver accounts, licence tidying, documentation. Not exciting, and the difference between IT that works and IT that surprises you.
WHO WE WORK WITH
Ten to fifty people, and no IT team
Businesses that run on Microsoft 365 or Google Workspace and would feel it straight away if their systems stopped.
MANAGED IT SUPPORT FROM
£450 / month
What you pay depends on how many people you have and what needs putting right at the start. A team of fifteen is £1,250 a month on our Core service.
Managed service rates. Other arrangements are priced separately.
Financial and professional advisory
Where data is sensitive, compliance is real, and systems must be dependable.
Energy and industrial
Distributed teams and project-driven work, where people need the same access from a site visit as from the office.
Property, hospitality and development
Working through refurbishments, openings and brand changes, where IT has to keep pace without becoming the bottleneck.
Care and early years
Often across multiple sites, where records are sensitive and staff need reliable systems.
When we're not the right fit.
We do not sell blocks of hours. We are not the cheapest, and we are not a good match for a business that would rather not adopt controls like multi-factor authentication and managed devices. If that rules us out, we would rather you found out here.
“Responses to calls logged via the help desk are always prompt with issues dealt with quickly and efficiently. It has proved to be an ideal solution for us as a smaller sized business that doesn’t require a full-time, in-house IT support service.
”
“As a small, fast-moving company working from several remote locations, we needed a knowledgeable, responsive service. We got that and more. When you are working on a project or a transaction, the last thing you want is for IT to get in the way. IT should be an enabler, not a barrier. Whenever we had a problem, they were there to solve it, solve it fast, and solve it in a way that set us up better prepared for the future.
”
GETTING STARTED
Three steps, no site survey
Your free benchmark
We review your Microsoft 365 against Cyber Essentials and Microsoft's own security baselines, and show you what a Copilot rollout would expose. You get the report whether or not you go any further.
1
A written proposal
A fixed monthly fee, a clear list of what is included, and anything we want to put in place in the first 90 days.
2
Onboarding
We document your systems, enrol your devices, apply the security standard and introduce your team to how support works. Most clients are fully onboarded within a few weeks.