Cyber Essentials & Cyber Essentials Plus

Cyber Essentials, passed first time

Most Cyber Essentials failures are small technical misses — an unpatched laptop, a missing MFA rule. We find them, fix them and evidence them before you submit.

Device, patching and MFA posture checked continuously
Failures remediated automatically where your policy allows
Self-assessment answers backed by real evidence, not guesswork
Plus-level technical audit preparation included

Trusted by organisations across finance, professional services and security

Up to 90%

of the compliance workload automated

100%

first-time audit pass rate across our customers

Guaranteed

we refund you should you fail your audit

The problem

Why this keeps slipping

Contracts require it

UK public sector and a growing number of private buyers make Cyber Essentials a condition of doing business.

Self-assessment guesswork

Answering the questionnaire from memory is how organisations fail. The assessor checks reality, not intent.

One unpatched laptop

Plus-level testing samples real devices. A single machine outside the patching window fails the whole assessment.

How it works

Connect, fix, evidence, stay compliant

Connect your stack

Read-only integrations with AWS, Azure, Google Workspace, Microsoft 365, GitHub, Slack and the rest of your tooling. Set-up is measured in minutes, not weeks.

See every gap, then fix it

We map your live configuration to the control set and flag what fails. OneClickFix remediates the technical findings directly, rather than leaving you a to-do list.

Generate the paperwork

Policies, risk register, supplier assessments and evidence are generated and kept current automatically, ready for the auditor to review.

Stay certified

Continuous monitoring catches drift the moment it happens, so surveillance and recertification are non-events instead of fire drills.

Questions we get asked

What's the difference between Cyber Essentials and Plus?

Cyber Essentials is a verified self-assessment. Plus adds hands-on technical testing of a sample of your devices and cloud services by an assessor.

We're mostly remote — does that matter?

No. Our checks work across cloud-managed and BYOD estates, which is where remote-first teams usually trip up.

Do you replace our auditor?

No. We get you audit-ready and give the auditor everything they need. We also have accredited auditors in-house, so if you'd like us to arrange the audit as well, we can.

What does the audit-pass guarantee cover?

If you follow our remediation plan and still fail your audit, we refund you. We can offer that because our customers have a 100% first-time pass rate to date.

Is our data safe?

Integrations are read-only by default, we're a UK company operating under UK GDPR, and our own security posture is published on our Trust Centre.

Don't fail on a patching window.

Get a readiness check before you submit.