Windows 10 end of support: what it means for your business now
Windows 10 reached end of support on 14 October 2025. If your business is still running it, those machines no longer receive free security updates from Microsoft. They keep working, which is exactly why the risk is easy to ignore, but every unpatched month makes them a softer target. Here’s what that means and what to do about it.
What “end of support” actually means
End of support does not switch your computers off. What stops is the flow of security updates and fixes. Any new vulnerability discovered in Windows 10 from that date onward simply stays open. Attackers know this, and unsupported operating systems are a well-known way into a network.
It also has knock-on effects: software vendors gradually stop testing against Windows 10, and cyber-insurance policies and frameworks like Cyber Essentials expect supported, patched systems.
The risks of staying put
- Security. Unpatched vulnerabilities accumulate with no fix coming.
- Compliance. Running unsupported software can breach the terms of Cyber Essentials certification and many insurance policies.
- Compatibility. New applications and devices increasingly assume Windows 11.
- Cost of a breach. The price of an incident dwarfs the cost of a planned upgrade.
Your options
There are three realistic paths, and most businesses use a mix:
- Upgrade eligible devices to Windows 11. Machines that meet the hardware requirements upgrade free from a licensed Windows 10, keeping your existing kit.
- Replace devices that can’t upgrade. Older hardware that fails the Windows 11 checks is best refreshed, ideally on a planned cycle rather than all at once.
- Buy time with ESU. Paid Extended Security Updates keep critical patches flowing for a limited period on devices you genuinely can’t move yet. Treat it as a bridge, not a destination.
How to plan the move
The key is to avoid two extremes: doing nothing, or panic-replacing everything. A short audit tells you exactly which devices can upgrade in place, which need replacing, and which should sit on ESU while you schedule them. From there it’s a phased plan that fits your budget and causes minimal disruption.
- Inventory every device and its Windows 11 eligibility
- Prioritise business-critical and internet-facing machines
- Upgrade what can be upgraded, replace what can’t
- Use ESU only where a device genuinely can’t move yet
- Roll out in planned waves, with backups tested first
How we help
We run the audit, tell you honestly what needs to happen and what doesn’t, and handle the upgrades, replacements and data migration with minimal downtime for your team. If you’re still on Windows 10, the safest next step is simply to know where you stand.
Book a free IT review and we’ll map out exactly which of your devices need attention, and in what order.