Windows 10 Extended Security Updates: what October 13 actually costs

Every deadline that actually hurts a small business looks harmless on the day it arrives.

Nothing smoked. Nothing crashed. The PCs in the back office booted up on the morning of October 15, 2025, opened Outlook, printed invoices, ran Teams and synced files, exactly as they had the day before. Which is precisely why so many businesses concluded there was nothing to do.

Windows 10 reached end of standard support on October 14, 2025. Microsoft stopped issuing free security fixes for it that day. The machines kept running, and the risk moved quietly from the screen into places you only look at when someone asks: procurement questionnaires, cyber insurance renewals, compliance checklists and vulnerability reports.

Then a second date arrived, and this one has a dollar figure attached.

Windows 10 Extended Security Updates after October 13

Businesses that wanted to keep patching Windows 10 after support ended could buy into the Extended Security Updates program, which delivers critical and important security fixes on an annual subscription. That first year of coverage ended on October 13, 2026.

The program continues past that date. What changed is the price, and the pricing is deliberately structured to make waiting the worst option.

For a ten-person office still on Windows 10, year two alone runs about $1,220. That is not catastrophic, but it buys you nothing except more time on an operating system you will have to leave anyway. It is rent, not equity.

The free extension you may have read about is not yours

In June 2026, Microsoft quietly extended its free consumer Extended Security Updates program through October 12, 2027. That change was reported widely, and it has caused a specific and expensive confusion.

That extension applies to personal home devices. It is not the business program. A company running Windows 10 Pro on office machines under the commercial ESU program is on the ladder above, not the free consumer track.

If you read a headline this summer suggesting Windows 10 got another free year and quietly took your business off the to-do list, this is the paragraph worth rereading. Mixing up the consumer and commercial programs is the single most common way an office ends up unpatched this autumn.

One genuine exception: Windows 10 Enterprise LTSC 2021 has its own, much longer support life, running to January 2032. If you are on that edition you are in a different position entirely, and it is worth confirming which edition you actually have rather than assuming.

The deadline nobody is talking about

There is a second clock running alongside the licensing one, and it is more technical but harder to negotiate with.

Beginning in June 2026, the Secure Boot certificates Microsoft issued back in 2011 started reaching expiry. Secure Boot is the mechanism that verifies your machine is loading a legitimate operating system when you power it on. Devices that are not receiving updates cannot receive the replacement certificates.

This is a cryptographic expiry, not a policy choice, which means it does not care about your upgrade timeline. It is one more reason that an unpatched Windows 10 machine in 2027 is a different kind of problem than an unpatched machine was in 2020.

How to decide what to do with each machine

This is not one decision. It is a decision per machine, and most offices find their fleet splits cleanly into three groups.

A four-step plan you can start this week

1. Count the machines. Not a guess, an actual list. Most offices are surprised in one direction or the other, and you cannot budget for a number you do not have.
2. Sort them into the three groups above. Which can take Windows 11, which cannot and which are chained to something old. The answer determines the cost, not the calendar.
3. Upgrade the easy ones now. It is free and low risk, and it shrinks every number that follows.
4. Put the rest on a replacement schedule with dates on it. Named quarters, not "sometime this year." A plan with dates survives a busy month. A plan without them does not.

None of this is urgent in the way a security incident is urgent. That is exactly the problem. October 13 was not the day Windows 10 computers stopped working. It was the day keeping them safe got more expensive, and the day the businesses that planned ahead started looking noticeably smarter than the ones that did not.