Your biggest customers, your insurer and every public tender are starting to ask for Cyber Essentials. We prepare and manage the whole thing for you, and if your submission does not pass we fix what is needed and resubmit at no extra charge. You spend about twenty minutes; we do the rest.
Cyber Essentials checks five practical things about how your business runs its computers. Most owner-managed businesses are closer than they think — usually two or three small fixes away.
Your router and devices block traffic they shouldn't let in.
Unused accounts and software removed; devices lock themselves.
People have only the access they need, with two-step login on.
Protection running on every device against viruses and bad software.
Security updates applied quickly — within 14 days of release.
You spend around twenty minutes telling us how your business works. We prepare the full submission, check every answer against the standard, fix anything that would fail, and manage it through to your certificate. When your insurer or a tender asks, you've already got the badge.
One price, everything in it. Most quotes you'll see are for the preparation work only, with the IASME certification fee billed separately on top. Ours includes it. The number below is what you pay in total — there is no second invoice.
And because the certificate renews every year, we handle the renewal too — so you never lose it at the moment a contract depends on it.
If your prepared submission doesn't pass, we fix what's needed and resubmit at no extra charge. We only take on work we're confident we can get across the line — which is exactly why the free readiness check comes first.
Remediation is quoted separately if you need it. If your assessment would fail because a laptop is running an unsupported operating system, no amount of paperwork fixes that — we'll tell you before you commit, not after. The certificate itself is awarded by an accredited certification body, not by us.
Under the current question set, two things fail a Cyber Essentials submission outright — no matter how good everything else is. A cloud service (email, Microsoft, Google, accounting, banking) left without two-step login. And security updates not applied within 14 days. Our readiness check flags both before they cost you the certificate. Read the full list of what fails an application.
Plain-English guides to the parts of Cyber Essentials that catch organisations out. Free to read, no sign-up.
The published fee bands, what remediation really costs, and the free insurance most organisations miss.
The two automatic failures, plus the scoping, account and credential errors behind most of the rest.
How scope follows the data rather than device ownership, and the three legitimate ways to narrow it.
What the Plus audit involves, who actually requires it, and how to plan backwards from a contract date.