Includes Cyber Essentials certification
External vulnerability scanning included
Independent technical assessment and device sampling
Retest included if required (scheme rules apply)
Certificate valid for 12 months
Vat not included
Important: Cyber Essentials Plus includes independent technical testing. If issues are identified, remediation will be required before certification can be issued.
Cyber Essentials Plus is the advanced version of Cyber Essentials.
Unlike the Cyber Essentials self assessment, Plus includes independent technical testing to confirm your cybersecurity controls are properly implemented across your organisation.
Testing typically includes:
This certification is ideal for organisations working in regulated sectors or supply chains where higher security assurance is expected.
This service is ideal if:
If you require hands-on support, we recommend our Assisted or Fully Managed packages.
Our security certifications





.avif)

This is proof your security works, not just that it’s documented.
Many high-security procurement frameworks require Plus.
CE Plus gives customers confidence and reduces objections.
The testing process identifies real weaknesses before attackers do.
Please review the following before purchase:
Secure checkout
UK-based support team
Fast onboarding
Designed for SMEs
Transparent fixed pricing
Need certification for a tender deadline? Speak to us before purchasing to discuss fast-track options.
Extra preparation support to reduce retest risk.
Best for complex environments and multi-site organisations.
Policy templates and documentation to help speedOngoing scanning beyond certification. up compliance.
Stay protected long after certification
FAQ
Answers to the questions UK businesses ask us most about Cyber Essentials Plus.
Cyber Essentials Plus is the higher tier of the scheme. An independent assessor tests your security controls hands-on to confirm they actually work, rather than taking your word for it.
Testing usually covers vulnerability scanning, a sample of your devices, MFA checks, patch verification and malware protection checks.
Yes. You have to hold Cyber Essentials before CE Plus can be issued.
Most organisations finish in 2 to 4 weeks, depending on readiness and scheduling.
You get a window to fix them, and you may need a retest before the certificate is issued.
Mon-Fri 8am-5pm · 24/7 for managed clients
Response within 1 business day, guaranteed
UK-based team, since 2012