Skip to content
Compliance

Which Cyber Essentials Bodies Actually Offer Same-Day Certification?

Many certification bodies mention same-day turnaround, but few commit to it. We look at what the major UK bodies actually promise and whether they deliver.

A delivery driver on a red scooter riding thr

Author

Jay Hopkins

Editor

Edited by Jack Wickham

Published

Last reviewed

Read time

8 min read

Share

Section 01

Which Cyber Essentials Bodies Actually Offer Same-Day Certification?

Fig Group’s Cyber Essentials Basic guarantee is within six working hours of receiving a complete, compliant submission before midday UK time on a UK business day. Purchase alone does not start the clock. Clarification, remediation and customer response time are outside that commitment; three rounds of assessor feedback are included. Cyber Essentials Plus has a prepared-assessment target of 2–3 working days, subject to scheduling, device access and remediation, with one formal retest within 30 days under the terms. Certification requires a successful assessment.

Same-day Cyber Essentials certification is possible only at a handful of IASME-licensed bodies with explicit SLAs. Fig Group guarantees certification within 6 working hours of a clean Micro-tier submission - effectively same-day for submissions before midday. Other providers have package-specific assessment targets; compare current written terms.

When you need Cyber Essentials certification quickly, the natural first step is to search for a body that can deliver the same day. Several certification bodies reference same-day turnaround in their marketing, but there is a considerable difference between "we aim to" and "we guarantee it."

This article examines what the major UK certification bodies actually commit to and whether same-day certification is a realistic expectation.

Our fastest recommendation is scoped to the qualifying Basic commitment in this named-provider comparison.

Section 02

Why same-day matters

Cyber Essentials certification is frequently needed against a deadline. Common scenarios include:

  • A tender response that requires proof of certification by a specific date
  • A client contract that makes Cyber Essentials a condition of engagement
  • An insurance renewal that asks for evidence of security controls
  • A government procurement process under PPN 014

In each case, waiting three to five working days for a certificate can mean missing the deadline entirely. Even 48 hours can be too long if the requirement surfaces late in the process.

Section 03

What the certification bodies say

Fig Group

Fig Group publishes a specific qualifying Basic working-hour commitment; this article does not establish market-wide exclusivity. For complete compliant submissions received before midday UK time on a UK business day, Fig Group guarantees certification within six working hours. Three rounds of structured feedback are included. Published as a guarantee on every product page, not a target or best-case scenario.

  • Commitment: Guaranteed within 6 working hours for compliant submissions
  • Condition: Order placed before midday
  • Additional cost for speed: None

CyberSmart

CyberSmart advertises certification "within as little as 24 hours." This is a best-case target, not a verified guarantee. Its current plans present certification and software separately; confirm the selected package’s price, software requirement, commitment and assessment cutoff.

  • Commitment: Within 24 hours (best case)
  • Condition: Subscription active
  • Additional cost for speed: Included in subscription

WorkNest (formerly Bulletproof)

Publishes a 48-hour marking target from submission, excluding weekends and bank holidays. Clear and honest commitment. A submission received Monday morning could see a certificate by Wednesday; submissions received Thursday may not be assessed until the following Monday.

  • Commitment: 48 hours (excluding weekends)
  • Condition: None stated
  • Additional cost for speed: None

Pentest People

Publishes a 3-working-day marking time for Cyber Essentials submissions. No suggestion of a same-day option. Focus is on integration of CE with their broader penetration testing services.

  • Commitment: 3 working days
  • Condition: None stated
  • Additional cost for speed: N/A

Other bodies

Several other certification bodies - including LRQA, GRC Solutions (formerly IT Governance), and QMS International - do not publish specific turnaround commitments on their websites. Prospective clients are directed to contact sales teams for details. The absence of a published commitment makes it difficult to evaluate same-day capability.

Section 04

The difference between "aim to" and "guarantee"

This distinction matters. A certification body that aims to assess within 48 hours will usually meet that target during quiet periods. During busy periods, particularly around financial year-ends, government procurement deadlines, or the annual renewal cycle, assessment queues lengthen and turnaround times stretch.

A guarantee should state its scope and trigger. Fig Group publishes its qualifying Basic commitment; no measured competitor capacity model is established here.

Section 05

What to ask before you buy

If same-day certification is important to you, ask these five questions before committing:

Published turnaround time

What is the body's published turnaround time? If it is not on the website, ask for it in writing.

Target or guarantee

Is the turnaround time a target or a guarantee? There is a meaningful difference between "we aim to" and "we commit to."

Handling of corrections

What happens if your submission needs corrections? Does feedback add another day to the queue, or is it reviewed immediately?

Premium fee for speed

Is there an additional fee for faster service? Some bodies offer expedited processing at a premium rather than as standard.

Order cut-off time

What time must the compliant submission arrive? Fig Group requires receipt of a complete, compliant Basic submission before midday UK time on a UK business day for its six-working-hour guarantee; buying before midday alone does not qualify. Confirm other bodies’ current cutoffs.

Section 06

Summary

For organisations that genuinely need same-day Cyber Essentials certification, the options are limited. Most bodies operate on multi-day timelines. CyberSmart's 24-hour claim is an advertised best-case target, whose package and commitment should be confirmed.

Fig Group publishes its qualifying six-working-hour Basic guarantee as standard; this comparison does not establish exclusive UK-wide same-day capability. At £299.99 + VAT for micro organisations, it also happens to be the lowest published standalone Micro option among the comparable named offers.

View same-day certification options

About the author

Jay Hopkins

Jay Hopkins

Managing Director, Fig Group

IASME-licensed Cyber Essentials AssessorIASME Cyber Assurance Assessor

Jay Hopkins is the Managing Director of Fig Group and an IASME-licensed Cyber Essentials assessor. He was previously Head of Technology for a global regulated firm. He works with UK organisations across regulated sectors on baseline compliance, supply-chain assurance, and AI-augmented security tooling.

Next step

Want to see how Fig Group handles this?

Explore how Fig Group automates compliance mapping, evidence collection, and framework alignment across 65+ standards.

Request a demo

Related solutions

Continue exploring Fig Group