Cyber Essentials

Keep your business secure from cyber threats with a trusted accreditation.

What is Cyber Essentials?

Cyber Essentials is the minimum standard of cybersecurity recommended by the UK Government for all businesses. The minimum standard was developed by experts at NCSC, with the certification scheme designed around five technical controls to prevent common internet-based cyber attacks.

Get your Cyber Essentials Certification Today!

Why Use Cyber Essentials?

Cyber attacks have become more prevalent, with 43% of UK businesses experiencing an attack in 2025. The good news is that most cyber attacks follow a simple methodology, this being the real-world equivalent of a burglar using the front door, and it being unlocked!

Cyber Essentials is the digital equivalent of putting a lock on the front door and keeping your data and digital assets safe. Getting certified is easy and provides:

Open Up Opportunities – Many businesses will require their suppliers/partners to be certified.
Gain Peace of Mind – With the knowledge that your business is safe from cybersecurity threats.
Build Customer Trust – This certification shows customers your commitment to cybersecurity

What Are The Different Cyber Essentials Tiers?

The Cyber Essentials Accreditation is available in two tiers: the first is the basic accreditation, and the second is the advanced accreditation. Below is a breakdown of the two tiers the difference between and the costs of each.

Cyber Essentials – Basic Accreditation

Cyber Essentials’ first level of accreditation aims to set the standard for cybersecurity through the assessment of 5 controls each business can implement and manage. These are:

Firewalls: Your organisation should have a firewall boundary or software firewall set up, depending on your network and hardware.
Secure Configuration: Replace the default configuration of networks and devices to prevent unauthorised access.
User Access Control: A transparent account creation and management process is required to ensure data is accessible to all those who need it.
Malware Protection: Ensure a strong antivirus solution is in place to protect from common malicious programs.
Security Updates: Ensure automatic software updates are on, or a standardised process for manual updates is in place. (The preferred is every 14 days)

Cyber Essentials Plus – Advanced Accreditation

Cyber Essentials Plus is an extension of their standard accreditation, with the same 5 controls being assessed, and a further audit of your devices and systems. This is performed independently and assesses the following:

IP Address Testing: Your organisation’s public IP address(es) will be scanned for any open services or vulnerabilities that require stronger access controls.
Vulnerability Scanning: A sample of your organisation’s hardware will be assessed to ensure that they have the required patches and support for all the installed software.
Malware Protection Testing: Your anti-malware software is tested to determine the software’s behaviour to different forms of attack.
Cloud Service Testing: Any cloud services connected to your organisation are checked for multi-factor authentication to assess account security.

How Much does Cyber Essentials Cost?

The cost of a Cyber Essentials certification depends on the organisation’s size and the desired certification tier. The table below shows the pricing of Cyber Essentials (basic). Cyber Essentials Plus uses a quote-based pricing structure, taking into account the organisation’s size and complexity. Use the table below as a reference point for pricing:

Organisation Size	Basic Price	Plus Price
Micro Organisations (0-9 employees)	£320* + VAT	£1,499* + VAT
Small Organisations (10-49 employees)	£440* + VAT	£1,999* + VAT
Medium Organisations (50-249 employees)	£500* + VAT	£2,499* + VAT
Large Organisations (250+ employees)	£600* + VAT	£2,999* + VAT

Please note: Cyber Essentials Plus is not a standalone accreditation; it requires a Cyber Essentials Basic accreditation first. You can either complete both accreditations consecutively or apply for Cyber Essentials Plus within three months of receiving a Cyber Essentials Basic Accreditation.