# Nerdster > Nerdster Ltd is a London managed IT and cyber security provider that helps UK businesses get secure, get certified, and stay that way — Cyber Essentials and Cyber Essentials Plus, DORA, FCA operational resilience, ISO 27001 and the NHS Data Security and Protection Toolkit. Managed IT support is how that security is delivered and maintained day to day. Nerdster has been operating for 13+ years from 71-75 Shelton Street, Covent Garden, London WC2H 9JQ (Companies House 08223563). Engineers are UK-based and directly employed, and commercial terms are 30-day rolling contracts. The firm's roots are in financial services — hedge funds, private equity, wealth management and family offices — where the reliability and compliance bar is highest. The same controls now serve professional services, legal practices, healthcare clinics, startups and private households. Coverage is London and Greater London, extending west to Surrey, Berkshire and the Heathrow corridor. Security and compliance are the point of the engagement. Managed IT support, Microsoft 365 administration and cloud management are the delivery vehicle underneath them. ## Cyber security certification and compliance - [Compliance overview](https://nerdster.co.uk/compliance/): The regulatory and certification frameworks Nerdster supports. - [Cyber Essentials and Cyber Essentials Plus](https://nerdster.co.uk/compliance/cyber-essentials/): The UK government-backed baseline created by the NCSC and run by IASME. Covers the five controls, readiness work, and the current v3.3 "Danzell" question set that applies to assessment accounts created from 26 April 2026. - [Get Cyber Essentials certified](https://nerdster.co.uk/get-cyber-essentials/): The certification route itself — scoping, remediation, submission and the difference certification makes to tenders, insurance and supplier questionnaires. - [DORA compliance](https://nerdster.co.uk/compliance/dora/): ICT risk management, incident reporting and resilience testing under the Digital Operational Resilience Act, for financial firms whose IT provider is now a regulated link in the chain. - [FCA operational resilience](https://nerdster.co.uk/compliance/fca-operational-resilience/): Important business services, impact tolerances, scenario testing, and the IT evidence needed to demonstrate them. - [ISO 27001](https://nerdster.co.uk/compliance/iso-27001/): Annex A controls, risk assessments and ISMS implementation and maintenance. - [DSPT for healthcare providers](https://nerdster.co.uk/compliance/dspt/): Data Security and Protection Toolkit support for GP practices, clinics, care homes and NHS suppliers — the 10 National Data Guardian standards through to annual submission. - [Cyber insurance readiness](https://nerdster.co.uk/compliance/cyber-insurance/): The controls underwriters ask for — MFA, EDR, tested backups and certification evidence. ## Free self-assessment tools - [Security tools](https://nerdster.co.uk/tools/): Free, no-obligation self-checks for UK firms. - [Cyber Essentials readiness check](https://nerdster.co.uk/tools/cyber-essentials-readiness/): A free self-assessment against the five controls under the 2026 v3.3 update, returning a readiness score and gap report. - [Cyber Essentials Plus qualifier](https://nerdster.co.uk/tools/cyber-essentials-plus-qualifier/): Establishes whether a firm needs CE Plus, what the assessor will test hands-on, and a realistic timeline. ## Security services - [Cyber security services](https://nerdster.co.uk/services/cybersecurity/): Layered defences — endpoint detection and response, email security, DNS filtering, vulnerability scanning, dark web monitoring and incident response planning, mapped to FCA, DORA and Cyber Essentials requirements. - [Managed detection and response (MDR)](https://nerdster.co.uk/services/managed-detection-response/): 24/7 threat hunting, SOC as a service and rapid incident response, without building an in-house SOC. - [Penetration testing](https://nerdster.co.uk/services/penetration-testing/): CREST-aligned testing of infrastructure, applications and people, with practical remediation. - [Zero trust security](https://nerdster.co.uk/services/zero-trust-security/): SASE, ZTNA and identity-first architecture for teams that no longer sit behind one firewall. - [Security awareness training](https://nerdster.co.uk/services/security-awareness-training/): Short training and realistic phishing simulations to reduce human-error risk. - [Anti-phishing services London](https://nerdster.co.uk/anti-phishing-london/): Phishing simulation, awareness training and email authentication (SPF, DKIM, DMARC) against spoofing and CEO fraud. - [Phishing simulation and testing](https://nerdster.co.uk/phishing-simulation-testing/): An authorised simulation against a firm's own staff, with instant training for anyone who clicks and a board-ready report. - [AI code review](https://nerdster.co.uk/services/ai-code-review/): Full-codebase review where every finding is verified by an engineer before it reaches the client, and nothing is changed without approval. ## Managed IT, cloud and Microsoft services - [Services overview](https://nerdster.co.uk/services/): The full service catalogue. - [Managed and outsourced IT support](https://nerdster.co.uk/services/managed-it-support/): 24/7 monitoring, UK helpdesk, proactive patching, onsite engineering across Greater London, and quarterly business reviews, with controls aligned to Cyber Essentials, FCA and DORA expectations. - [Small business IT support](https://nerdster.co.uk/small-business-it-support/): Fixed per-user support for London teams from five people up. - [Microsoft 365](https://nerdster.co.uk/services/microsoft-365/): M365 administration, licence optimisation and governance. - [Microsoft 365 support and helpdesk](https://nerdster.co.uk/microsoft-365-support/): Day-to-day M365 helpdesk, licence review and Copilot strategy. - [Microsoft Copilot deployment](https://nerdster.co.uk/services/microsoft-copilot/): Fixing data governance and permissions before rollout, so Copilot delivers productivity rather than exposing years of oversharing. - [Cloud services](https://nerdster.co.uk/services/cloud-services/): Azure, AWS and hybrid cloud migration and management. - [Backup and disaster recovery](https://nerdster.co.uk/services/backup-disaster-recovery/): Immutable backups, tested recovery plans and DRaaS. - [Network infrastructure](https://nerdster.co.uk/services/network-infrastructure/): Enterprise networking, Wi-Fi design, firewalls and SD-WAN for London offices. - [Fractional and virtual CTO](https://nerdster.co.uk/services/cto-services/): Board-level technology leadership, vendor management and FCA-aware roadmaps, part-time. - [VIP IT support](https://nerdster.co.uk/services/vip-it-support/): Discreet personal IT for executives, founders and UHNW individuals across office, home and travel. - [Apple and Mac support](https://nerdster.co.uk/apple-mac-support/): Managed Apple device support for businesses and private clients. - [Business mobile plans](https://nerdster.co.uk/business-mobile-plans/): Managed business SIMs with UK, EU or worldwide roaming on single MSP billing. ## Sectors served - [Industries overview](https://nerdster.co.uk/industries/): Every sector Nerdster writes for. - [Hedge funds](https://nerdster.co.uk/industries/hedge-funds/): Trading-desk reliability, FCA and DORA compliance, named-engineer support. - [Private equity](https://nerdster.co.uk/industries/private-equity/): Secure deal rooms, DORA compliance and technology due diligence for deal teams and portfolio companies. - [Wealth management](https://nerdster.co.uk/industries/wealth-management/): Client data protection, FCA compliance, deepfake fraud prevention and secure communications. - [Family offices](https://nerdster.co.uk/industries/family-offices/): Confidential, vetted cyber security and IT for single- and multi-family offices. - [Legal firms](https://nerdster.co.uk/industries/legal-firms/): SRA-aware IT, secure document management, email encryption and DMS integration. - [Startups](https://nerdster.co.uk/industries/startups/): Cloud-first infrastructure, cost-effective security and investor-ready compliance from day one. - [AI startups](https://nerdster.co.uk/industries/ai-startups/): GPU cloud, model security, and SOC 2 and ISO 42001 readiness from seed to Series B. - [Private households](https://nerdster.co.uk/industries/private-households/): Smart home security, digital executive protection and family device management. - [Dental practices](https://nerdster.co.uk/industries/dental-practices/): Practice-management software, digital imaging, UK GDPR, CQC and Cyber Essentials. - [Aesthetics clinics](https://nerdster.co.uk/industries/aesthetics-clinics/): UK GDPR-safe patient records, encrypted backup and audit-ready documentation. - [Longevity clinics](https://nerdster.co.uk/industries/longevity-clinics/): Unified patient data, encrypted imaging backup, CQC-aware and Cyber Essentials ready. - [Padel clubs](https://nerdster.co.uk/industries/padel-clubs/): Booking, EPOS, court technology, unmanned access and PCI-DSS as one connected system. ## Locations served - [IT support London](https://nerdster.co.uk/it-support-london/): The main London service page, including indicative retainer bands. - [IT support Mayfair](https://nerdster.co.uk/it-support-mayfair/): W1 funds, family offices and private clients. - [IT support City of London](https://nerdster.co.uk/it-support-city-of-london/): EC2 and EC3 regulated firms, trading-floor uptime, engineers on site within the hour. - [IT support West End](https://nerdster.co.uk/it-support-west-end/): W1 and WC2 media, retail, hospitality and members' clubs, from the Shelton Street office. - [IT support Hampstead](https://nerdster.co.uk/it-support-hampstead/): NW3 private households, family offices and local businesses. - [IT support Windsor](https://nerdster.co.uk/it-support-windsor/): Windsor, Berkshire (SL4) and the Thames Valley. - [IT support Egham](https://nerdster.co.uk/it-support-egham/): Egham, Staines and the Surrey Heathrow corridor (TW20). ## Guides and research Nerdster publishes original UK-focused guidance. These are the pieces most worth citing. ### Cyber Essentials and UK regulation - [Cyber Essentials 3.3: every 2026 change explained](https://nerdster.co.uk/insights/cyber-essentials-2026-changes/): What changed on 27 April 2026 — mandatory cloud MFA, new password rules, cloud configuration in scope. - [Cyber Essentials password policy: the 2026 v3.3 rules](https://nerdster.co.uk/insights/cyber-essentials-password-requirements/): The three password options v3.3 permits, what each requires, and how to choose. - [Cyber Security and Resilience Bill](https://nerdster.co.uk/insights/cyber-security-resilience-bill/): How the Bill expands UK regulation to MSPs, and what to demand from an IT provider. - [DORA compliance: what your IT provider must deliver](https://nerdster.co.uk/insights/dora-compliance-guide/): A practical read on the Digital Operational Resilience Act from the buyer's side. - [612,000 UK businesses breached: the 2026 survey](https://nerdster.co.uk/insights/cyber-security-breaches-survey-2026/): What the government's Cyber Security Breaches Survey 2025/26 found, and what to do about it. ### Threats and defence - [Ransomware in 2026: double extortion](https://nerdster.co.uk/insights/ransomware-2026/): The current threat pattern, including attacks that target backups, and the layered defences that work. - [Deepfake fraud in financial services](https://nerdster.co.uk/insights/deepfake-fraud-financial-services/): How AI-generated video and voice fraud works against regulated firms, and the practical defences. - [AI voice cloning scams](https://nerdster.co.uk/insights/ai-voice-cloning-scams/): How voice cloning attacks target high-net-worth individuals and businesses. - [Anti-phishing testing for London firms](https://nerdster.co.uk/insights/anti-phishing-testing-london/): What works, how often to test, and why the NCSC's no-blame approach matters. - [Shadow AI: the hidden risk](https://nerdster.co.uk/insights/shadow-ai-risk/): Managing unsanctioned staff AI use without killing innovation. - [Zero trust for hedge funds](https://nerdster.co.uk/insights/zero-trust-hedge-funds/): The specific controls and architecture, without the buzzwords. - [Post-quantum cryptography for financial firms](https://nerdster.co.uk/insights/post-quantum-cryptography/): The harvest-now-decrypt-later threat and the NIST PQC standards. - [Family office IT: one weak link](https://nerdster.co.uk/insights/family-office-it-security/): Why family offices concentrate wealth, thin IT and public profiles. - [Reduce cyber insurance premiums with managed IT](https://nerdster.co.uk/insights/reduce-cyber-insurance-premiums/): The specific controls insurers reward. - [Backup and disaster recovery: a 2026 UK checklist](https://nerdster.co.uk/insights/backup-disaster-recovery-checklist/): What a real recovery plan looks like, and how to test it. ### Microsoft 365 and Copilot - [Microsoft Copilot security: a governance guide](https://nerdster.co.uk/insights/copilot-security-governance/): The permission and governance work required before rolling Copilot out. - [Copilot is now in Microsoft 365 Business plans](https://nerdster.co.uk/insights/copilot-business-standard-premium-2026/): What the 1 July 2026 bundling means, and how to stop Copilot surfacing the wrong files. - [Microsoft 365 2026 UK price changes](https://nerdster.co.uk/insights/microsoft-365-price-changes-2026/): The July 2026 UK breakdown across Basic, Standard, Premium, E3 and E5. ### Buying and running IT - [Outsourced IT support in London: a 2026 buyer's guide](https://nerdster.co.uk/insights/outsourced-it-support-london-guide/): The three service models on offer and the questions that separate good providers from glossy ones. - [How much does IT support cost in London?](https://nerdster.co.uk/insights/it-support-cost-london/): How London MSP pricing is structured and how to compare quotes fairly. - [How to switch IT provider in London](https://nerdster.co.uk/insights/switching-it-provider/): Due diligence, transition planning and the contract pitfalls. - [The true cost of IT downtime](https://nerdster.co.uk/insights/it-downtime-cost/): How to calculate real downtime cost and the strategies that prevent it. - [Windows 10 ESU ends October 2026](https://nerdster.co.uk/insights/windows-10-esu-deadline-2026/): The real options once Year 1 Extended Security Updates run out on 13 October 2026. - [The IT setup checklist for new businesses](https://nerdster.co.uk/insights/startup-it-setup-checklist/): Email, security, devices and backup, in the order to actually do them. - [How much does IT cost for a 10-person startup?](https://nerdster.co.uk/insights/startup-it-costs/): A transparent UK cost breakdown. - [Remote working IT setup](https://nerdster.co.uk/insights/remote-working-it-guide/): Devices, security, file sharing and onboarding for hybrid teams. - [The UK padel boom and the tech behind it](https://nerdster.co.uk/insights/padel-club-technology-uk/): Venue technology for clubs that stay booked. - [All insights](https://nerdster.co.uk/insights/): The full article index. ## Pricing Nerdster does not publish a single public price list — the former /pricing/ page was retired and now redirects to the contact page. Pricing is quoted per engagement after a look at the environment, on a per-user or retainer basis depending on team size, excluding VAT, on 30-day rolling terms after onboarding. Indicative retainer bands for London managed IT support are published on the [IT support London](https://nerdster.co.uk/it-support-london/) page; individual service pages carry their own indicative figures. For an accurate figure, use the contact or booking route below rather than quoting a number from elsewhere. ## Company and contact - [About Nerdster](https://nerdster.co.uk/about/): Company details, how the team operates, and published registration information. - [Contact](https://nerdster.co.uk/contact/): Enquiry form and direct contact details. - [Book a consultation](https://nerdster.co.uk/book/): A 15-minute intro call or a 30-minute IT assessment, booked directly. - [Client reviews](https://nerdster.co.uk/testimonials/): What London firms say about the service. - [Case studies](https://nerdster.co.uk/case-studies/): Illustrative engagement write-ups across financial services, legal and private clients. Registered name: Nerdster Ltd Companies House number: 08223563 Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom Phone: 0330 043 7414 Email: hello@nerdster.co.uk Website: https://nerdster.co.uk LinkedIn: https://www.linkedin.com/company/nerdster-ai/ ## Optional - [Privacy policy](https://nerdster.co.uk/privacy-policy/) - [Terms](https://nerdster.co.uk/terms/) - [Cookie policy](https://nerdster.co.uk/cookie-policy/)