Cyber Essentials Plus

Find out what CE+ will cost your organisation

Cyber Essentials Plus adds a hands-on technical audit to the self-assessment, independent verification that your controls actually hold up. Tell us a little about your environment and we'll put a fixed price in front of you.

Get a quote
Fixed price, no surprises Hands-on technical audit Quote within one working day
What you'll hold at the end

Real evidence, not a form you filled in yourself.

Pass the audit and you get a Cyber Essentials Plus certificate backed by an assessor's sign-off on every control checked, plus a short summary you can hand straight to a customer or insurer.

Verified, not just declared

What Cyber Essentials Plus adds

Cyber Essentials is a self-assessment. Cyber Essentials Plus takes it further with an independent, hands-on technical audit of a sample of your systems, so your certification is backed by evidence, not just a questionnaire.

It's the level many customers, insurers and larger organisations now ask for, because it demonstrates that your controls have been tested by an assessor rather than simply declared.

What the audit checks

Independently tested

  • Malware protection in practice
  • Patching and update management
  • Secure configuration of devices
  • Protection against common email and web threats
  • A sampled test of user devices and servers
Get your CE+ price
Good to know

Already have Cyber Essentials?

Cyber Essentials Plus must be completed within three months of achieving your Cyber Essentials certification. It's the same set of controls, verified in practice.

If you certified more than three months ago, or haven't certified yet, that's no problem. We can arrange both together and quote for the full route in one go. Just let us know on the form and we'll scope it accordingly.

Two routes, one quote

Whichever stage you're at

  • Certified in the last 3 months: we quote for CE+ on its own
  • Not yet certified: we quote for Cyber Essentials and CE+ together
  • Certified more than 3 months ago: we scope a fresh CE plus the CE+ audit
Tell us where you're up to
Common questions

Cyber Essentials Plus, answered.

What is Cyber Essentials Plus?

Cyber Essentials Plus is the higher-assurance level of the scheme. It covers the same five technical controls as Cyber Essentials, but adds an independent, hands-on technical audit in which an assessor verifies that those controls actually work on a sample of your devices and users.

How do I get Cyber Essentials Plus certified?

You need current Cyber Essentials in place first, or we can arrange both together in one go. Once that is confirmed, tell us a little about your environment and we will put a fixed price in front of you within one working day. We then book the technical audit, a vulnerability scan plus hands-on checks against a sample of your devices and servers, arranged remotely or on-site to suit you. Pass, and we issue your Cyber Essentials Plus certificate.

How much does Cyber Essentials Plus cost?

Cyber Essentials Plus is quoted per environment, because the price depends on the number of devices and users in scope and how your systems are set up. Tell us a little about your environment and we will put a clear, fixed price in front of you within one working day.

What happens during the Cyber Essentials Plus audit?

An assessor runs a vulnerability scan and a set of hands-on checks against a sample of your devices and servers, covering malware protection, patching, secure configuration and protection against common email and web threats. The testing can be arranged remotely or on-site, and we tell you plainly what needs fixing.

Do we need Cyber Essentials before Cyber Essentials Plus?

Yes. Cyber Essentials Plus must be completed within three months of achieving Cyber Essentials, using the same question set. If you have not certified yet, or certified more than three months ago, we can arrange both together and quote for the full route in one go.

How long does it take to get Cyber Essentials Plus?

There is no fixed length, because it depends on how quickly your organisation is ready to test and where you stand on Cyber Essentials itself, which must be in place within three months of the Plus audit. Once you are ready, we confirm a fixed price within one working day and book the audit at a time that suits you. Most organisations who already meet the five controls in practice go from enquiry to certificate in a matter of weeks.

Get a quote

Find out what CE+ will cost you

A couple of details is all we need. We'll reply within one working day with a clear, fixed price and the next steps.