Charity Special Offer: registered charities turning over less than £2m could get our Supported Certification free of charge and pay only the marking fee. See the special offer →
IASME-licensed Certification Body for Cyber Essentials & Cyber Assurance0333 339 0383  ·  team@getcybercertified.co.uk
IASME-licensed Certification Body

Cyber Essentials certification, done properly.

From sole traders to multi-site groups, we assess you against the current NCSC requirements. Choose our Supported Certification and a senior assessor works with you until you’re ready to pass.

ThousandsOf organisations certified since 2014
NCSC v3.3Current Danzell requirements
24 working hoursSupported Certification feedback turnaround
6 monthsTo complete your assessment

Choose your route

Self-led CertificationYou complete it, we mark it
£299
Supported CertificationGap analysis and a senior assessor
£650
Cyber Essentials PlusIndependent technical audit
£999*
IASME Cyber AssuranceBroader governance standard
£660

“From” prices, excluding VAT. *CE+ from price subject to assessor availability.

Compare all packages
Need expedited certification?

Submit by noon. Certified by 5pm.

Our 5-hour certification guarantee for Cyber Essentials and IASME Cyber Assurance. Miss it and we refund your fee in full.

Book

Book your slot

Call 0333 339 0383 or book online to check assessor availability.

12:00

Submit by noon

Send your ready-for-certification assessment before 12 noon on your working day.

5 hrs

You’re certified

We mark and certify it within 5 hours of submission.

Not in a rush? You don’t need to book: just submit when you’re ready and we’ll mark it within our usual turnaround.
Cyber Essentials Plus and submissions that need clarification or changes aren’t covered by the guarantee. Full terms.

Cyber Essentials Certification BodyIASME Cyber AssuranceIASME Quality Principles certified

Licensed by IASME. We issue your certificate directly. Check our licence

Cyber Essentials Certification BodyIASME Cyber AssuranceIASME Cyber Assurance Level 1IASME Cyber Assurance Level 2IASME Quality Principles certified

Data Security and Compliance Services Ltd is licensed by IASME, the NCSC’s Cyber Essentials partner, to certify organisations against the scheme.

£25,000 cyber insurance included with your certificate

If your whole organisation is certified, you're based in the UK or Crown Dependencies and your turnover is under £20m, you can opt in to £25,000 of cyber liability insurance during your assessment, at no extra cost. IASME terms apply.

What else you get
Charity Special Offer

Free Cyber Essentials support for registered charities

A special offer, separate from our standard packages.

Every October, IASME and the NCSC run Charity Cyber Security Awareness Month to help charities protect the people they serve. At Get Cyber Certified, we think charities deserve that support all year round.

So for registered charities turning over less than £2m, our full Supported Certification is free of charge. You pay only the Self-led Certification fee, and a senior assessor guides you all the way to certification.

Special offer

Expert support, without the support fee

Supported Certification, normallyfrom £650 + VAT
Charity Special Offer: you pay only the Self-led Certification feefrom £299 + VAT
  • Your own assigned senior assessor
  • Readiness check and gap analysis before anything is submitted
  • Unlimited remote support for every question
  • Cyber Essentials report and certificate

This special offer is separate from our standard packages and applies to registered charities turning over less than £2m. Prices depend on the size of your charity.

For larger organisations

Complex scope? We bring structure to it.

Multiple sites, mixed device fleets, layered cloud services and more than one legal entity. We agree your scope up front with a senior assessor, so your submission is right first time and stands up to scrutiny from customers and procurement teams.

  • A named senior assessor who learns your environment and stays with you to certification
  • Structured scoping of entities, cloud services and devices before you start
  • Additional organisations defined in your assessment, with the option of a duplicate certificate
  • Cyber Essentials Plus delivered by our partner CE+ consultants
  • IASME Cyber Assurance when you need to evidence wider governance
Packages

Two ways to get Cyber Essentials

Pick the level of help that suits your skills, budget and deadline. If you’re not sure, Supported Certification is the safer choice for all but the most technically confident teams, or answer six quick questions in our package finder.

Self-led Certification

For confident, well-prepared teams

£299 from, + VAT
5-hour certification guarantee Terms apply

Ideal if you know you’ll pass, or you have the know-how and time to use our free tools, the right policies and processes in place, and can show how your controls meet each requirement.

  • Your own secure assessment portal
  • Free pre-assessment tools to check your setup before you submit
  • Independent marking with a feedback report
  • Two working days to fix any non-compliances, then a complimentary re-mark
  • Cyber Essentials report and certificate included

Cyber liability insurance is subject to IASME’s terms. Certifying more than one organisation? Define each additional organisation within your assessment and you’ll automatically be asked whether you’d like a duplicate certificate.

IASME-licensed · Verify our licenceBuy Self-led Certification
Most popular Supported Certification

A senior assessor with you all the way

£650 from, + VAT
5-hour certification guarantee Terms apply

The right choice for most organisations, and for anyone working to a deadline.

  • Your own assigned senior assessor
  • Free pre-assessment tools to check your setup before you submit
  • Readiness check and gap analysis before anything is submitted
  • Feedback within 24 working hours, plus our optional 5-hour certification guarantee if you need expedited certification (terms apply)
  • Unlimited remote support for every question
  • As many attempts as you need within the six-month assessment window
  • Cyber Essentials report and certificate included

For our Supported Certification: 100% of applicants who have followed our advice and who have submitted within the required deadlines have passed. Cyber liability insurance is subject to IASME’s terms. Certifying more than one organisation? Define each additional organisation within your assessment and you’ll automatically be asked whether you’d like a duplicate certificate.

IASME-licensed · Verify our licenceBuy Supported Certification

Prices are “from” prices, exclude VAT and depend on organisation size; your exact price is shown in our shop. Free cyber liability insurance is available to eligible organisations (IASME terms apply).

Free self-help tools

Doing it yourself? Check your setup before you submit.

Applicant-led? Our free pre-assessment tools help you check each part of your setup before you submit, so you can go in with confidence and give yourself the best chance of passing first time. Create a free members’ account to use them.

Prefer an assessor alongside you? With Supported Certification, your own assessor reviews your answers and guides you through any fixes before anything is submitted.

The tools are guidance only and don’t do everything for you: they help you check your setup, but they can’t put policies, processes and procedures in place or show how your controls meet each requirement. Marking guidance changes often and the tools aren’t updated in line with it, and you remain responsible for your own controls. Free tools terms.

What’s changed in 2026

The v3.3 “Danzell” requirements

Assessments started from 27 April 2026 are marked against version 3.3 of the NCSC’s Requirements for IT Infrastructure, using the Danzell question set. Two changes catch applicants out more than any other.

Cloud services can’t be excluded

If a cloud service stores or processes your organisation’s data, it’s in scope. That includes messaging, social media, accounting and domain registrar accounts, not just Microsoft 365.

MFA is now an automatic fail

Where a cloud service offers multi-factor authentication, it must be enabled for every user. If it isn’t, the assessment fails.

How we achieve first-time passes

A proven five-step route to certification

Every Supported Certification applicant follows the same proven process, and nothing is submitted for marking until we’re confident you’re ready to pass.

  1. Readiness check

    We review your current setup and send a gap analysis with a clear to-do list.

  2. You remediate

    You work through the list. For most organisations this takes a couple of weeks.

  3. We re-check

    We review your updated answers and repeat the loop as many times as needed.

  4. Final check

    Once you’re compliant, you submit in the live portal and we check it one last time.

  5. Certification

    You receive your feedback report and 12-month certificate, plus insurance if eligible.

The result

100% of applicants who have followed our advice and who have submitted within the required deadlines have passed. When it’s needed, we’ve certified clients within a few hours, and our 5-hour certification guarantee is available (terms apply).

See Supported Certification
What clients say

Trusted by schools, universities, healthcare and business

“Thanks for your help in this. You’ve helped us get through within a really tight timeframe, including answering emails and other work outside of normal working hours. This is greatly appreciated.”

Gareth, university

“This is now the 5th time we’ve completed with Get Cyber Certified and every year their help is to the highest standard. They are always on hand for queries. I’d highly recommend.”

Danielle, education group

“We needed a certificate for a government tender due in two days’ time. It’s the friendly, no-fuss approach that we like and why we’ve come back year on year for our renewal.”

Jon, healthcare provider

“I’ve used Get Cyber Certified for the last 6 years and the service that Mark has provided has always been second to none. Always clear, concise and constructive to help us achieve our certification.”

Greg · Google review

“Mark was brilliant and supported me through the process offering advice and guidance as needed. As someone who is not tech savvy he was able to communicate key information in a way I understood.”

Samantha · Google review

“Thanks to the team for getting our certification completed in just a few days and before the Friday deadline. Tender submitted.”

Hannah · Google review

Read all our reviews on Google →

Cyber Essentials in brief

Common questions about Cyber Essentials

Quick, accurate answers from an IASME-licensed certification body.

What is Cyber Essentials?

Cyber Essentials is a UK government-backed certification scheme run by the National Cyber Security Centre (NCSC), with IASME as its delivery partner. It sets out five technical controls that protect against the most common internet-based attacks: firewalls, secure configuration, security update management, user access control and malware protection.

Who needs Cyber Essentials?

Any UK organisation can certify, from sole traders to large groups. It is required for some central government contracts and for firms delivering criminal legal aid, and it is increasingly requested by customers, insurers and supply chains.

How long does Cyber Essentials certification last?

Certification is valid for 12 months and must be renewed each year to stay current.

How much does Cyber Essentials cost?

With Get Cyber Certified, Cyber Essentials Self-led Certification starts from £299 + VAT and Supported Certification from £650 + VAT. The exact price depends on the size of your organisation.

What is the difference between Cyber Essentials and Cyber Essentials Plus?

Cyber Essentials is a verified self-assessment. Cyber Essentials Plus uses the same requirements but adds a hands-on technical audit of a sample of your systems, and must be completed within three months of your Cyber Essentials certificate.

What changed in Cyber Essentials in 2026?

From 27 April 2026, assessments use version 3.3 of the NCSC requirements and the Danzell question set. Cloud services that hold organisational data cannot be excluded from scope, and any cloud service that offers multi-factor authentication must have it enabled for every user, otherwise the assessment fails.

More answers in our full FAQs.

Talk to us

Not sure where to start?

Book a free scoping call with an assessor. We’ll help you work out what’s in scope and which route suits you, with no obligation.