Risk assessments, Cyber Essentials guidance, and practical security that closes the gaps losing you contracts.
A growing number of contracts, tenders, and insurance policies require proof that your business takes security seriously. If you've been asked whether you have Cyber Essentials and had to say "not yet," you already know the cost of waiting. We start with a cyber risk assessment to find out exactly where you stand, then close the gaps: MFA rollout, vulnerability scanning, security policies, and the technical fixes needed to meet Cyber Essentials requirements. We guide you through the entire process so you're ready to pass. Beyond certification, we handle the ongoing security work that keeps you protected as your business grows.
When a customer asks for Cyber Essentials or security evidence
A Cyber Essentials gap review and prioritised remediation plan that explains what needs attention, who should own it and what can wait.
Cyber Essentials readiness and a clear path to certification.
A prioritised remediation plan you can actually action.
Documented policies, MFA and device management in place.
Fewer security surprises during client and insurer reviews.
Gap analysis against the current NCSC controls, remediation support, and hand-holding through the readiness process.
Regular scans of your websites, apps and infrastructure with clear, prioritised reports.
Multi-factor authentication, password manager rollout, and joiner/leaver processes that actually get followed.
Disk encryption, patching and remote wipe for laptops and phones across Windows, macOS and mobile.
Right-sized security, acceptable use and data protection policies your team will actually read.
A named contact and playbook if something goes wrong, from phishing to lost devices.
Cyber Essentials is the UK government-backed certification that shows your business has five basic technical controls in place: firewalls, secure configuration, security update management, user access control and malware protection. You complete an online assessment, which is marked by an independent certification body. Our Cyber Essentials support page explains the process in full.
The certification fee is set by IASME, the scheme delivery partner, and depends on the size of your organisation. At the time of writing it starts at £320 plus VAT for organisations with fewer than 10 staff. Preparation and any fixes are separate, and we quote for those once we know where the gaps are.
No. We prepare your business, fix the gaps and support you through the submission. The certificate itself is awarded by a licensed certification body, which keeps the assessment independent.
That depends on what is already in place. The assessment questions can be answered quickly once the controls exist. The time goes on fixing gaps, such as unsupported devices, missing multi-factor authentication or updates that are not applied within 14 days. Our free Cyber Essentials readiness check gives you a score by control and a list of the gaps to fix first.
Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds a hands-on technical audit by an assessor, who tests a sample of your devices and accounts. Read Cyber Essentials vs Cyber Essentials Plus for which one your contracts are likely to need.
Not for Cyber Essentials. Some clients, insurers or tenders ask for one. We offer scope-limited testing of websites, web applications and your external perimeter, priced for small businesses. It is not a substitute for a full CREST engagement where a contract specifically requires one.