How to Secure a Business for Under $1,500 a Month (2026)

How can a small business get solid security for under $1,500 a month?

For under $1,500 a month, a business of around 20 users can run a layered, expert-monitored security stack anchored by Sophos. The core is Sophos MDR for 24/7 managed detection and response, a Sophos XGS firewall at the network edge, Sophos switches and secure Wi-Fi for the LAN, Sophos ITDR for identity protection, TrendAI Cyber Risk Exposure Management for risk visibility, and cloud backup for Microsoft 365 or Google Workspace. Most of that stack lands around $810 to $1,210 a month, leaving room in a $1,500 budget to step up to MDR Plus or add users. Nuformat sizes and quotes it for Canada and the USA, with monthly billing available.

Start with managed detection and response

Sophos MDR is the anchor. It is a managed service that gives you 24/7 threat monitoring, expert-led threat hunting, and incident response, without hiring a security team. It builds on Sophos endpoint detection and response (EDR) and extended detection and response (XDR), and it works across Sophos and third-party tools. Pricing is simple and per-user or per-server, with no hidden fees, and it starts around $241 per user per year for 10 to 24 users, which averages roughly $20 a month per user. Server coverage is available separately.

If you want the highest tier, MDR Plus adds full incident response with no hourly caps, a dedicated response lead, and a $1M breach protection warranty. For most small businesses on a budget, standard Sophos MDR is the sensible anchor, and MDR Plus is there if you want to step up within the $1,500 budget.

Add a firewall and secure the network

A managed service watches for threats, but you still want to keep as many as possible out at the edge. A Sophos XGS firewall does that, and it now comes on flexible terms: buy it outright, or take it on Hardware as a Service (HWaaS) for one monthly price. HWaaS runs from about $150 a month for a small-office XGS 128 up to around $440 a month for a mid-market XGS 2300, so it fits inside this budget on a monthly line.

Inside the network, Sophos switches and Secure Wi-Fi provide multi-gigabit wired and wireless access, managed from the same Sophos cloud console (Sophos Central, now evolving into Sophos Fusion). The switches support Active Threat Response, which can isolate a compromised host automatically, so the network edge works together with Sophos MDR rather than in isolation.

Cover identity, risk, and backup

Three more layers round out the stack, each on a simple subscription:

• Sophos ITDR (Identity Threat Detection and Response) protects identities and credentials, priced per user and server. Stolen credentials are behind a large share of breaches, so this closes a common gap.
• TrendAI Cyber Risk Exposure Management (CREM) adds proactive risk discovery, assessment, and AI-guided remediation, giving you a view of where your real exposure sits before an attacker finds it.
• Cloud backup for Microsoft 365 and Google Workspace safeguards email, files, and shared data with versioned, incremental backups, often only a few dollars per user per year, so you can recover quickly after mistakes or ransomware.

A sample monthly budget for 20 users

Here is what a realistic stack looks like for a business of roughly 20 users. Figures are estimates in USD; ask Nuformat for a quote scoped to your headcount.

That total leaves headroom in a $1,500 budget to upgrade the firewall model, move MDR to MDR Plus, or add users and servers as you grow.

Why this stack works

Each layer covers a different way in, and they report to one console instead of sitting in silos. Sophos MDR anchors it with expert monitoring and response; the firewall and switches control the network; ITDR guards identities; CREM surfaces risk before it is exploited; and backup gives you a way back if something gets through. For a small business that wants strong, managed security without a full-time security team, this is a practical, scalable framework for under $1,500 a month.

Get a quote from Nuformat

Nuformat is a Sophos partner serving Canada and the United States. We can size this stack to your exact headcount, quote it outright or on monthly billing managed as your MSP, and adjust the firewall tier to fit. Contact Nuformat for a quote, or start with Sophos MDR and a Sophos XGS firewall.

Frequently asked questions

How much does it cost to secure a small business per month?

For a business of about 20 users, a layered Sophos stack (MDR, firewall, switches and Wi-Fi, ITDR, risk management, and backup) runs roughly $810 to $1,210 a month, comfortably under a $1,500 budget. The exact figure depends on headcount, the firewall model, and whether you choose standard MDR or MDR Plus.

What is Sophos MDR?

Sophos MDR is a managed detection and response service. Sophos analysts monitor your environment around the clock, hunt for threats, and respond to incidents, so you get a security operations capability without hiring your own team. MDR Plus is the higher tier, adding full incident response and a $1M breach protection warranty.

Do I still need a firewall if I have MDR?

Yes. MDR detects and responds to threats, but a firewall keeps many of them out at the network edge in the first place. The two work together, and the Sophos XGS firewall shares signals with Sophos MDR through the same console.

Can I pay for all of this monthly?

Yes. Sophos MDR and the software subscriptions bill monthly, and the firewall can be taken on Hardware as a Service for a single monthly price. Nuformat manages the monthly billing as your MSP, so there is no large upfront cost required.

What is CREM?

Cyber Risk Exposure Management, from TrendAI, continuously discovers and assesses your attack surface and points you to the fixes that reduce risk the most. It adds a proactive, risk-based view on top of the detection and response the rest of the stack provides.

Is this enough security for a small business?

For most small and mid-sized businesses, yes. It covers the network, endpoints and servers, identities, risk, and data recovery, all monitored by Sophos experts. As you grow, you can raise the firewall tier, move to MDR Plus, or add users without changing the framework.