Build
We implement ISO 27001, SOC 2, Cyber Essentials and DCC. Not certified yet? Start with the ISO 27001 Sprint.
FOR COMPANIES CERTIFIED OR CLOSE TO IT
Certification is the start.This keeps you there.From £495 a month. Introductory pricing.
Three monthly packages for companies that hold ISO 27001, SOC 2, Cyber Essentials or DCC, or are about to. The controls keep running, the evidence stays current, and the people who check the work are independent of the people who do it.
- Three monthly packages, every price published on /pricing
- Internal audit by an independent auditor, testing by a separate firm
5-star client reviewsRead them on G2
PartnerBook the free 45-minute diagnosticBring your certificate, your surveillance date and your headcount.Same-week availability
No sales pitch 45 minutes Senior practitioner
Loading the calendar
Open the booking pageCISSP, ISO 27001 Lead Implementer and Lead Auditor, ISO 42001 Lead Implementer and Lead Auditor, PMP.
Trusted by
THE OFFER AT A GLANCE
From £495
a month, plus VAT
Evidence Essentials. Plus £8 per user a month.
24/7
detection and response
On Secure Compliance and above, from our security partner's round-the-clock team.
Independent
internal audit and testing
We never internally audit work we implemented.
One page
back within a working day
The scope check: the package that fits and the price for your headcount.
Introductory pricing, reviewed January 2027. Prices as published at /pricing, excluding VAT.
Doing it alone vs the packages
Doing it alone
- Evidence rebuilt in the month before the audit.
- The platform's failing tests drift red with nobody owning the queue.
- The surveillance visit becomes a fire drill.
- Nobody watching the laptops and servers at night.
- Risk decisions made by whoever is in the room, and not recorded.
The packages
- An evidence calendar keeps the controls running and the evidence current.
- The compliance platform run for you, failing tests given an owner and a date.
- Internal audit coordinated with an independent auditor; certification body liaison handled.
- 24/7 managed detection and response and monthly vulnerability scanning on Secure Compliance and above.
- Formal risk acceptance, so a decision to live with a risk is recorded and yours.
- A named security lead and a board report on Security & Governance.
Ask for the one-page scope check. You get the package that fits and the price for your headcount, no call needed first.
How it works
STEP 01
Ask for the one-page scope check.
Tell us what you hold, how many people you have and what your customers ask for.
STEP 02
One page back within a working day.
The package that fits, what it would cost for your headcount, and anything that would change the price.
STEP 03
Managed Services Schedule signed.
The scope, the hours and the notice period in writing before anything starts.
STEP 04
The calendar runs.
Evidence, reviews, scanning and reporting on a monthly cycle, with the auditor and the certification body coordinated for you.
Build. Operate. Independently verify.
Operate
These monthly packages keep the controls running and the evidence current.
Independently verify
The certification body, an accredited penetration-testing partner and an independent internal auditor check the work.
Certification is an operating obligation, not an endpoint. Goldline is not a certification body; the certificate comes from an independent, accredited body you choose.
Choose your package
Evidence Essentials
From £495 a month + £8 per user a month
Monthly. Plus VAT.
For companies certified, or close to it, that need to stay audit-ready.
- Your compliance platform run for you
- An evidence calendar, so nothing is rebuilt the month before the audit
- Quarterly risk review
- Access reviews and supplier reviews
- Internal audit coordinated with an independent auditor
- Certification body liaison
- Help with customer security questionnaires
- A monthly report
- Staff security training and phishing tests
Two hours of Goldline practitioner time a month are included. Anything beyond that is quoted before it starts.
Secure Compliance
From £895 a month + £18 per user a month
Monthly. Plus VAT.
Everything in Evidence Essentials, plus:
- 24/7 managed detection and response on every laptop and server
- Monitoring of Microsoft 365 accounts for stolen logins
- Monthly vulnerability scanning, with a fix list that has owners and deadlines
- Formal risk acceptance, so a decision to live with a risk is recorded and yours
- Quarterly trend report
Security & Governance
From £1,495 a month + £25 per user a month
Monthly. Plus VAT.
Everything in Secure Compliance, plus:
- A named security lead
- A monthly leadership meeting and a board report
- Ownership of your security policies
- An annual incident exercise
- Supplier security reviews
- Central log collection where your audit needs it
All plus VAT. Introductory pricing, reviewed January 2027. The per-user price covers the security tooling on each person's devices and accounts. Every figure here is also on the published prices page.
Scaling companies of around 50 to 250 people: Secure Compliance from £1,850 a month and Security & Governance from £3,250 a month, plus the per-user price.
Annual independent penetration test, delivered by an accredited testing partner and priced after scoping.
What is not included
Unlimited fixing of issues
You get the finding, the owner and the deadline; the fix is scoped if you want us to do it.
Manual penetration testing
Available as the annual add-on, delivered by an accredited testing partner.
Incident response
A threat is contained on the device and handed over; investigation and recovery are a separate engagement.
A promise that every vulnerability will be found
No scanner or team can give that, so we do not.
The certificate itself
Only an accredited certification body can issue it.
Partner commission hidden in the price
Any partner commission is disclosed on your proposal.
Said plainly, so the scope check is honest on both sides.
Is this you?
- You hold ISO 27001, SOC 2, Cyber Essentials or DCC, or are close to it
- A surveillance audit, recertification or renewal is inside the next twelve months
- Security questionnaires arrive often enough to be a real cost
- There is no security function, or one person carrying it
Ask for the one-page scope check
Tell us what you hold, how many people you have and what your customers ask for. You get one page back: the package that fits, what it would cost for your headcount, and anything that would change the price. No call needed first.
CTO FAQ
We never internally audit work we implemented. Internal audits are carried out by an independent auditor. Testing is done by a separate firm, and decisions to accept a risk are always yours.
Page reviewed 19 October 2026 by Alfred Obeng, CISSP. Prices reviewed January 2027.
Goldline is not a certification body. An independent, accredited body assesses and certifies.