In short: Cisco Duo for small business usually starts with Duo Free, which covers up to 10 users with MFA, integrations and the Duo Mobile app, or Duo Essentials, which adds single sign-on, passwordless and device checks. A small team can protect Microsoft 365, the VPN and Windows logon, and we can run the roll-out if you have no in-house IT.
Why small businesses need MFA
Many small-business breaches start with something ordinary: a password reused from another site, or typed into a convincing fake login page. With access to one mailbox, an attacker can send fake invoices to your customers, change payment details, or reset passwords for other systems.
Multi-factor authentication means a password alone is no longer enough. It is also increasingly expected: Cyber Essentials requires MFA on cloud services wherever it is available, cyber insurance proposal forms often ask about it, and larger customers' supplier questionnaires frequently do too.
Duo Free or Duo Essentials?
Duo has four editions, each including everything in the one before. Small businesses usually choose between the first two:
| You need | Duo Free | Duo Essentials | Duo Advantage |
|---|---|---|---|
| MFA with Duo Push and the Duo Mobile app | Yes, up to 10 users | Yes | Yes |
| More than 10 users | No | Yes, licensed per user | Yes |
| Single sign-on for your SaaS apps | No | Yes | Yes |
| Passwordless login and phishing-resistant MFA | No | Yes | Yes |
| Allow only company-managed devices (Trusted Endpoints) | No | Yes | Yes |
| Windows Logon offline access | No | Yes | Yes |
| Device health checks and risk-based authentication | No | No | Yes |
Duo Free is a standing edition, not a trial, and suits a team of up to 10 that mainly needs MFA. Duo Essentials is the usual choice once you grow past 10 people or want single sign-on and passwordless. Duo Advantage suits small firms with sensitive data or many personal devices. New accounts start with a 30-day trial of Duo Advantage and switch to Duo Free if no paid plan is bought, and the full comparison is on our Cisco Duo pricing page. For paid editions, ask us for a quote.
What to protect first
You do not need to protect everything on day one. A sensible order for a small business:
- Email and files: Microsoft 365 or Google Workspace, because that is where most attacks start. See Duo for Microsoft 365 and Duo for Google Workspace
- Remote access: your firewall's VPN or remote desktop, which face the internet around the clock
- Admin accounts: the accounts that can change everything, including your Microsoft 365 or Google admin, firewall and accounts software
- Laptops and desktops: Windows Logon and macOS logon, especially for anyone handling payments
- Everything else: other cloud apps through Duo Single Sign-On on Essentials
If you only use Microsoft 365, Microsoft's own MFA may be all you need, and we will tell you so. Duo earns its place when you want one method across Microsoft 365, the VPN, Windows logon and other apps. Our Duo vs Microsoft Authenticator page compares the two fairly.
Phones, tokens and personal devices
Staff usually approve logins with Duo Mobile, a free app for iOS and Android. If you provide work phones, from EE Business, O2 Business, Vodafone Business or any other network, Duo Mobile works the same on all of them. If staff use their own phones, the app does not give you access to the rest of the phone.
For people who will not or cannot use a phone, hardware tokens and security keys are a simple alternative. For Cyber Essentials, a personal phone used only for MFA apps, calls and texts is out of scope, which keeps staff phones out of your assessment.
A managed roll-out, without in-house IT
Many small businesses have no IT department, so we do the work. A typical roll-out:
- We agree which systems to protect and which Duo edition fits
- We set up your Duo account and connect your users from Microsoft 365, Google or Active Directory
- We protect your first application, usually email, and test it with one or two people
- Staff enrol themselves the first time they sign in, using a short guide we write for you
- We add the VPN, laptops and other apps, then agree what happens when someone loses a phone
Afterwards we can handle user changes, lost phones, renewals and licence changes for you. The full process is on our Cisco Duo setup page.
How we help
Forever Systems supplies, sets up and supports Cisco Duo for small businesses across the UK. We keep it simple: the edition you actually need, a roll-out that does not disrupt the working day, and someone to ask when a phone goes missing. MFA works best alongside security awareness training for small businesses, so staff also learn never to approve a login they did not start.
Contact us for a quote or to set up Duo Free for your team.
How Forever Systems supplies and supports Cisco Duo
We supply, set up and support Cisco Duo for UK organisations, from small teams and schools to multi-site businesses.
- Edition selection: Duo Free, Essentials, Advantage or Premier, matched to your users, applications and compliance needs
- Integration design: Microsoft 365 and Entra ID, Google Workspace, AWS, VPNs and firewalls, Windows and macOS logon, RDP and RD Gateway, the Authentication Proxy and Duo Single Sign-On
- Device trust: Trusted Endpoints, device health policies and Duo Desktop, alongside your MDM
- Roll-out: user enrolment, communications, hardware tokens for staff without smartphones, and help desk processes that stop MFA fatigue
- Ongoing support: policy tuning, reporting, Cyber Essentials and cyber insurance evidence, renewals and licence changes
Forever Systems Ltd is an independent IT and cyber security provider and also supplies the wider Cisco Secure portfolio.
Want a Cisco Duo quote, trial or roll-out plan?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is Cisco Duo suitable for a small business?
Yes. Duo Free covers teams of up to 10 users at no cost, and Duo Essentials is licensed per user, so it scales from a handful of people upwards. It protects Microsoft 365, Google Workspace, VPNs and Windows and macOS logon from one Admin Panel and one app.
Is Cisco Duo free for small businesses?
Duo Free is free for up to 10 users and includes MFA, integrations and the Duo Mobile app. New accounts start with a 30-day Duo Advantage trial and move to Duo Free automatically if no paid plan is bought. It does not include single sign-on, passwordless or Trusted Endpoints, which start at Duo Essentials.
What happens when we grow past 10 users?
You need a paid edition, usually Duo Essentials, licensed per user. Existing Free customers can upgrade from the Billing page in the Admin Panel, or we can quote the upgrade and move your settings across.
Do we need IT staff to run Cisco Duo?
No. Day-to-day running is light once it is set up, and we can manage the Duo Admin Panel for you, including new starters, leavers and lost phones.
How much does Cisco Duo cost for a small business?
Duo Free costs nothing for up to 10 users. Paid editions are licensed per user on a subscription, and the price depends on edition, user numbers and term, so ask us for a quote.