British small-to-medium businesses (SMB) spend less than £1,000 each a year on security software.