Noel Bradford unpacks a vendor meeting that went sideways and exposes a wider problem in the small business cyber market. As the UK’s cyber security sector grows to 2,603 firms generating £14.7 billion in annual revenue, more suppliers are packaging cyber protection like broadband bundles: one monthly fee, one portal, one reassuring product name. But when light services hide behind heavy language, small businesses get packages instead of protection. Drawing on the UK Government’s Cyber Security Sectoral Analysis 2026 and real-world incident management experience, Noel explains the difference between genuine incident response and signposting with a login. He challenges the gap between what vendors promise and what customers actually receive when something goes wrong. This episode asks awkward questions about dark web monitoring, phishing simulation, insurance wrappers, and who really owns the incident when the clock is ticking. If you are a small business owner evaluating a cyber bundle, or a vendor selling one, this is essential listening. Cyber security is not a utility. It is not broadband. And when we sell it like broadband, we make ‘do nothing’ the stronger competitor.