OneClickComply
    Book a demo
    Cyber Essentials Plus

    Pass your Cyber Essentials Plus assessment with confidence

    Cyber Essentials Plus builds on the basic Cyber Essentials certification with hands-on technical verification. An external assessor tests your systems to verify that the controls you've declared are actually in place and working effectively.

    Book a demo

    Cyber Essentials Plus in brief

    What is Cyber Essentials Plus?
    Cyber Essentials Plus builds on the basic Cyber Essentials certification with hands-on technical verification.
    Who needs it?
    Organisations that need a higher level of assurance than basic Cyber Essentials, those handling particularly sensitive government data, or companies wanting to demonstrate robust cyber security to clients and partners.
    Typical time to certification
    1-2 weeks with OneClickComply (vs. 6-12 weeks manually)
    Cyber Essentials Plus Aligned
    Automated Evidence
    OneClickFix Enabled
    Continuous Monitoring
    In-House Audit Team
    WHO NEEDS Cyber Essentials Plus

    Is Cyber Essentials Plus Right for Your Organisation?

    Organisations that need a higher level of assurance than basic Cyber Essentials, those handling particularly sensitive government data, or companies wanting to demonstrate robust cyber security to clients and partners.

    Controls Covered

    All Cyber Essentials controls plus hands-on verification: external vulnerability scanning, email and web browsing tests, malware deployment tests, and more.

    HOW WE HELP

    How OneClickComply Gets You to Cyber Essentials Plus

    OneClickComply ensures you're fully prepared for the hands-on CE+ assessment. Our automated pen testing simulates the assessor's tests, OneClickFix remediates any findings, and our continuous monitoring ensures nothing drifts before your assessment date.

    Manual Cyber Essentials Plus vs. OneClickComply

    Manual Cyber Essentials Plus
    • Internal and external vulnerability scans booked and chased manually
    • Devices prepared by hand for testing
    • Patch status checked machine-by-machine in the run-up to the audit
    • One missed update can fail the entire assessment
    • A full repeat of the technical audit every 12 months
    With OneClickComply
    • All 5 controls verified continuously, not just on assessment day
    • Real-time patch and configuration status across every in-scope device
    • Vulnerabilities flagged and prioritised before your assessor finds them
    • OneClickFix for detected issues and misconfigurations
    • Stay assessment-ready, so the audit becomes a formality
    CAPABILITIES

    Everything You Need for Cyber Essentials Plus

    Pre-assessment vulnerability scanning matching CE+ test methodology

    Automated remediation of common CE+ failure points

    Simulated CE+ assessment tests

    Assessment readiness dashboard

    Direct assessor coordination support

    Post-certification continuous monitoring

    HOW IT WORKS

    Three Steps to Cyber Essentials Plus Compliance

    1. Connect & Scan

      Connect your cloud environments and infrastructure. OneClickComply scans against Cyber Essentials Plus requirements and shows you exactly where you stand.

    2. Fix & Generate

      OneClickFix automatically remediates technical gaps. AutoComplete generates Cyber Essentials Plus-aligned policies from your actual infrastructure configuration.

    3. Monitor & Certify

      Continuous monitoring keeps you compliant. Our in-house audit team guides you through certification with confidence.

    Integrations

    Tools we collect Cyber Essentials evidence from

    Connect your stack once and OneClickComply checks every control and keeps the Cyber Essentials evidence your auditor asks for. If it has a web admin console, we can work with it.

    Browse all 13,000+ integrations

    Products That Power Cyber Essentials Plus Compliance

    Related Frameworks

    Browse every standard OneClickComply maps

    FAQ

    Cyber Essentials Plus: frequently asked questions

    Cyber Essentials Plus builds on Cyber Essentials with hands-on technical verification. An external assessor tests your systems to confirm that the controls you declared in your self-assessment are in place and working.

    A certified assessor tests your systems, including external vulnerability scanning, email and web browsing tests and malware protection tests. The aim is to verify the five Cyber Essentials controls in practice, not just on paper.

    Yes. A single missed update or misconfigured device can fail the assessment. OneClickComply runs pre-assessment scans that mirror the assessor's tests and fixes findings before your assessment date.

    With OneClickComply, preparation typically takes 1 to 2 weeks. Doing it manually usually takes 6 to 12 weeks.

    The technical assessment is repeated every 12 months. Continuous monitoring keeps every in-scope device ready between assessments, so the renewal is not a scramble.

    Get Cyber Essentials Plus Certified, Not Stressed

    Automate controls, gather evidence continuously and stay audit-ready, all on one platform.

    Book a demo