Half of UK small businesses suffered a cyber breach in 2024, yet only 35% have any security measures in place. This project tackles a stark mismatch: large companies rely on Security Operations Centers (SoCs) to detect and respond to attacks in real time, but these systems are too expensive and complex for SMEs. The average breach already costs a small business £8,460—before reputational damage or closure. Phishing alone hits 84% of breached firms. Without affordable protection, the gap between threat and defence keeps widening. The team is building an open-source SoC-as-a-service using modular tools like Wazuh, Zeek, and Elastic Stack. Machine learning spots anomalies, automation speeds up response, and the interface is designed for non-technical staff. Pilot tests with SME partners will refine the system. If successful, this removes the cost and expertise barriers that leave small businesses exposed. It aligns with the UK’s National Cyber Strategy 2022 and could shift cybersecurity from a luxury for large enterprises to a practical tool for any business. The open-source model also invites continuous improvement across the sector.
View original technical description
In the digital age, cyber security is not a luxury -- it's a necessity. For businesses in the UK the threat of cyber-attacks are very real and data reports that despite this, few organisations are taking action to safeguard their presence. It is reported that in the UK, **SMEs are highly vulnerable to cyber threats**, with 50% experiencing breaches in 2024\. Phishing remains a predominant risk, impacting 84% of breached businesses. Despite these figures, only 35% of SMEs have cybersecurity measures in place, leaving many exposed. This can have detrimental effects from financial losses with the average cost of a cyber breach for SMEs in the UK is estimated at £8,460 in 2024; and that is before factoring in damaged reputation, potentially going out of business, and the time it takes to recover from an attack. The primary goal of cyber security is to prevent cyber-attacks; however, this is not always possible; this is where SoC role is to limit the damage to an organisation by detecting and responding to cyber-attacks. Traditional SoCs are costly and complex, designed primarily for large enterprises. This project aims to **bridge the gap by developing an open-source SoC solution as a service specifically tailored to SMEs.** This will be achieved by integrating modular architecture and widely used open-source tools like Wazuh, Zeek and Elastic Stack, where these platforms will provide SMEs with real-time threat detection, incident response and proactive threat hunting capabilities. **Key features include:** * **Machine Learning**: Predictive analytics and anomaly detection to mitigate emerging threats. * **Automation**: Accelerated response times for detected incidents. * **User-Friendly Design**: Simplified workflows for non-technical users. This solution removes the traditional cost and complexity barriers by offering a lightweight and scalable service focussed for SMEs. By addressing SME-specific challenges such as limited budgets and technical expertise, this project ensures that even small businesses can defend themselves against cyber threats effectively. Aligned with the National Cyber Strategy 2022, this initiative strengthens SME cybersecurity resilience, contributing to a secure digital economy. Pilot tests with SME partners will refine the service, ensuring practicality and ease of use. Its open-source nature will foster collaboration, continuous improvement, and adoption across the SME sector. By empowering SMEs with accessible and advanced cybersecurity tools, this project reduces cyber risks, safeguards business operations and contributes to building a resilient digital ecosystem for small businesses.
Plain English summaries and category classifications on this site are generated by AI and may not perfectly reflect the original research.
Is something wrong? Let us know