See exactly what would stop you certifying today
A client, insurer or tender is asking for Cyber Essentials — and you're not sure where you stand. Our free gap-check runs an external security baseline against the five controls and hands you a prioritised fix list. Then we help you close the gaps and stay secure.
- External baseline against all five CE controls
- Plain-English report + prioritised fix list
- Fixed-price remediation, then keep-you-secure
Prefer to talk it through first? Book a 20-minute call →
The five controls we check against
Firewalls
Your boundary and device firewalls are configured and closed to the internet where they should be.
Secure configuration
No default credentials, unnecessary services or risky exposure on your public-facing systems.
Security update management
Operating systems and software are supported and patched within the required windows.
User access control
Accounts follow least-privilege, admin rights are controlled, and MFA is in place.
Malware protection
Endpoint protection is present and effective across your devices.
Cyber Essentials is now a business requirement
Under the government's PPN 014 (in force since February 2025), public-sector contracts handling personal data or OFFICIAL systems require Cyber Essentials — and the requirement flows down to subcontractors, with annual renewal. Larger clients and insurers increasingly demand it too. It's no longer a nice-to-have; it's a gate you either pass or lose the work.
Frequently asked questions
Is the gap-check really free?
Yes. We run an external security baseline against the five Cyber Essentials controls and send you a plain-English report with a prioritised fix list — no card, no obligation. It's free because it's the honest way to show you where you stand and how we can help.
Do you issue the Cyber Essentials certificate?
We get you certification-ready and keep you secure — the gap-check, remediation and ongoing baseline. The certificate itself is issued by an IASME-accredited certification body; we prepare you for it and can point you to one. If you need the badge for a tender, we'll get you ready to earn it.
Why is everyone suddenly asking us for Cyber Essentials?
Because it's now mandated in a lot of supply chains. Under the government's PPN 014 (in force since February 2025), public-sector contracts handling personal data or OFFICIAL systems require Cyber Essentials, and it flows down to subcontractors. Larger clients and insurers increasingly require it too. A tender or renewal is the worst time to discover you're not ready.
What do I need to run the check?
Just your email and the domain you want checked, plus confirmation you're authorised to request it. We only assess what's externally visible for the free check — no access to your systems required.