Cyber Essentials Cost 2026: Complete UK Pricing Guide

IASME's public Cyber Essentials purchase prices range from £320 to £600 + VAT by organisation size, checked on 7 September 2026. Certification-body packages can differ in price and support. Budget separately for any work needed to meet the requirements before assessment.

Fig Group’s Cyber Essentials Basic guarantee is within six working hours of receiving a complete, compliant submission before midday UK time on a UK business day. Purchase alone does not start the clock. Clarification, remediation and customer response time are outside that commitment; three rounds of assessor feedback are included. Cyber Essentials Plus has a prepared-assessment target of 2–3 working days, subject to scheduling, device access and remediation, with one formal retest within 30 days under the terms. Certification requires a successful assessment.

One of the most common questions organisations ask when considering Cyber Essentials certification is: how much does it cost? For the base-level certificate, the principal price variable is the IASME organisation-size band. This guide focuses specifically on Cyber Essentials rather than Cyber Essentials Plus.

This guide provides a full, transparent breakdown of Cyber Essentials pricing in 2026.

Use this as the base Cyber Essentials cost guide. For the independently audited tier, use the Cyber Essentials Plus cost comparison. To select a package and purchase, use current pricing. To compare providers, use the certification bodies guide.

Cyber Essentials is the self-assessed certification level. You complete a questionnaire covering five core security controls, submit it for review, and receive your certificate if you pass. Pricing is based on organisation size:

Source: IASME's public purchase page. These are published customer prices, not a statement of what certification bodies pay IASME. VAT is additional. For Fig Group's current fees, inclusions and VAT totals, see certification pricing.

Cyber Essentials Plus adds an independent technical assessment and is priced separately from £1,499.99 + VAT. The Plus price assumes that you hold the required Cyber Essentials certificate. See the current Cyber Essentials and Plus cost comparison for every Plus tier and an explanation of the additional assessment cost.

Certification pricing varies significantly across IASME-licensed certification bodies. Some providers advertise low headline prices but add fees for assessment, consultancy, or platform access. Others bundle everything into a single price.

Fig Group's pricing includes:

• The assessment - assessor review and three free rounds of feedback
• Structured feedback - up to three rounds of feedback on your self-assessment to help you pass
• A 6-working-hour assessment commitment for compliant submissions - preparation, clarification and remediation time are separate; check the applicable service terms
• Readiness checker - free self-assessment tool to identify gaps before you begin
• Dedicated support - guidance throughout the certification process

When comparing prices, always ask: what is included? A £300 headline price that requires a £200 consultancy add-on is not cheaper than a £299.99 all-inclusive price.

Organisation size - IASME uses employee bands for Cyber Essentials pricing, so the applicable tier changes as headcount crosses a band boundary.

Preparation time - The certification fee covers the assessment itself. If your organisation is not ready, you may need to invest time (and potentially external consultancy) to remediate gaps before submitting. A readiness check can help identify the work required before purchase.

Annual renewal - Cyber Essentials certification is valid for 12 months. Budget for annual recertification at the applicable size band and prices available at renewal.

Not all certification bodies are transparent about pricing. Common hidden costs include:

• Assessment fees charged separately from the certification fee
• Mandatory consultancy packages required before assessment
• Platform access fees for completing the questionnaire
• Resubmission charges if your first submission has gaps
• Expedite fees for faster turnaround

Fig Group's published assessment fee includes the stated review and feedback allowance. Bespoke consultancy and remediation are separate engagements, and VAT is additional.

For most organisations, the return on investment is clear:

Contract requirements - Some public and private procurement exercises require Cyber Essentials. Always check the exact contract wording to confirm whether it names the base certificate or Plus.

Client requirements - Many private-sector organisations now require suppliers to hold Cyber Essentials. Losing a client relationship over a £299.99 certification is not a sensible trade-off.

Security baseline - The scheme focuses attention on five technical control areas designed to reduce exposure to common internet-based attacks.

If you are ready to get certified, view current Cyber Essentials pricing and packages to choose your organisation size and purchase directly.

For organisations that want to check their readiness first, our free readiness checker takes 10-15 minutes and identifies any gaps before you commit.

View current packages | Compare Cyber Essentials and Plus | Compare CE and Plus costs

For Fig Group's remote Cyber Essentials self-assessment, the published fee depends on the organisation's size, not its UK location. For a technical audit, confirm remote delivery, any on-site travel and scope before accepting a quote. A local address alone does not establish better value.

Budget for preparation and remediation as well as the assessment fee. Allow time for clarification before a tender or renewal deadline: late certification can delay onboarding or leave a contractual requirement unmet. These effects depend on your circumstances; they are not a guaranteed financial loss or a reason to assume a faster assessment removes preparation work. Ask what feedback rounds, retests and support are included.

For Fig Group's current prices, VAT totals and combined packages, use Fig Group's certification pricing.