Monitor

Cyber Essentials evidence · Device monitoring · Hardware and software inventory

Monitor watches the technical controls a Cyber Essentials assessment looks at, across every machine you look after, and keeps a dated record of what each one reported. When an assessor asks about August, you have August.

Request beta access In beta. Free, and no per-endpoint pricing.

Read a sample monthly report PDF, 6 pages

A full month for a fictional nine-machine client, including the table showing which parts of each control Monitor evidences and which you must get from elsewhere.

The morning view

What needs doing, and nothing else

One page per estate. Failing machines first, everything else folded away behind a count. A healthy estate is a short page — and a daily email that only arrives when something has actually changed.

Estate health

4 need action, 1 of them with alerts silenced

Needs action
4
failing a control
Past 14 days
2
updates overdue
Warning
3
approaching a limit
Healthy
31
all checks ok
Needs action 3
QLM-RECEP-02 Updates overdue 31 days since release Quillmoor Dental
BRK-SRV-01 Firewall off 0 of 3 profiles enabled Brackenfold Joinery
TRP-LAP-11 Gone quiet not heard from for 4 days Tarrow & Pike
Warning 3
Healthy 31

Machines appear in one section only. Nothing is hidden behind a filter you have to remember to clear.

The deadline

Fourteen days, drawn to scale

High-risk and critical updates not applied within fourteen days are an automatic failure at assessment. Every machine sits somewhere on that line, so you can see the ones drifting towards it before they cross.

Days since update released

Cyber Essentials fails past 14 days

14 DAYS
0102030+

2 machines past the limit · 2 within a week of it

One dot per machine. Hover for the hostname and the update it is waiting on.

Silencing

Quieten the email, never the record

Some failures are decisions. A machine behind a hardware firewall does not need telling about every morning. Silencing stops the email — it does not stop the check, change the result, or remove it from your evidence.

CheckResultDetail
Updates Ok 2 days since release
Firewall Fail Silenced 0 of 3 profiles enabled
Behind the workshop hardware firewall — T Bray, ends 4 Oct
Antivirus Ok Microsoft Defender, active
Encryption Warn 2 of 3 fixed volumes encrypted

Every silence carries a reason and an end date, and both appear in the evidence for the period they cover.

Evidence

What was true in August, asked in November

Every reading is kept, dated, and cannot be edited or removed. An evidence pack is a record of what each machine reported across a period — not a snapshot of how things look today.

Quillmoor Dental — 1 Aug to 31 Aug 2026

9 machines · 1,431 readings · generated 14 Nov 2026

MachineCheckState at period endChanges
QLM-RECEP-02Updates Fail since 24 Aug2
QLM-RECEP-02Firewall Ok throughout0
QLM-SRV-01Encryption Ok from 12 Aug1
QLM-NURSE-04Antivirus Ok throughout0

Monitor reports what each machine says about itself. That is an attestation, not proof.

Print to PDF and hand it over. Silences in force during the period are listed with their reasons.

Beyond the controls

What each machine is

Hardware and installed software, across every client, in one list. Readings only — nothing here passes or fails, and none of it appears in an evidence pack.

MachineMake and modelProcessorMemoryStorageTPM
QLM-RECEP-02
Quillmoor Dental
Dell OptiPlex 7010i5-1350016 GB512 GB SSD2.0
QLM-SRV-01
Quillmoor Dental
Dell PowerEdge T350Xeon E-233664 GB2 × 2 TB2.0
BRK-WS-04
Brackenfold Joinery
HP ProDesk 400 G9i3-121008 GB256 GB SSD2.0
TRP-LAP-11
Tarrow & Pike
Lenovo ThinkPad L14i7-1255U16 GB1 TB SSD none

Useful for a Windows 11 rollout, a warranty question, or answering “who still has Java” across nine clients.

How it works on the machine

A small probe runs hourly on each Windows machine and reads what is already there — update history, firewall state, antivirus status, encryption, local policy. It sends those readings out over HTTPS. Nothing is decided on the customer’s machine, no inbound port is opened, and it cannot change anything on the endpoint.

What Monitor does not do

  • It does not certify anything. Certification is done by an accredited body, not by us.
  • It covers Windows and Linux endpoints. It does not check cloud services or multi-factor authentication.
  • It does not cover routers, firewalls or other network devices.
  • It reports what each machine says about itself. That is an attestation, not proof.

Pricing

Published, so you don’t have to book a call

Monitor is in beta, so places are free while the first estates go through a full assessment cycle. The prices below are what it will cost afterwards. Anyone in the beta keeps partner pricing for twelve months from launch.

BOBcloud partners

Resellers with active backup clients

Free
Every device, no cap
  • Full evidence history
  • Every client, every machine
  • Worth £150 a month at 200 devices

Included because Monitor makes BOBcloud worth staying with. That is worth more to us than a licence fee.

Free

Anyone, no card

Free
Up to 20 devices
  • 90 days of history
  • All the same checks
  • No time limit

Enough for one small client or your own office. An assessor asks about a period, so 90 days will not carry a renewal cycle.

Paid

Everyone else

£0.75
per device, per month
  • 12 months of history
  • No minimum, no contract
  • Monthly billing, cancel any time

Priced well under what you already pay per device for RMM, because Monitor does one job rather than twenty.

What we commit to either way.
  • Your evidence packs export. If you leave, you take the record with you.
  • Uninstalling the probe leaves nothing behind on the machine.
  • Ninety days’ notice before any change to pricing or to what a tier includes.
  • We do not sell your data, there are no ads, and nothing in Monitor upsells your clients.

Beta

Not open to everyone yet

Monitor is running with a small number of MSPs and IT resellers while the first estates go through a full assessment cycle. Accounts are set up by hand. If you look after client machines and you have a Cyber Essentials assessment coming, tell us about your estate and we will find you a place.

Request beta access