Cyber Essentials
Certification only
From£299.99+ VAT
One-off · no recurring fee
- Self-assessment + assessor review
- 6-hour guarantee
- Official certificate from Fig Group, on passing.
Independent technical verificationCyber Essentials Plus certification.
Cyber Essentials Plus certification.
Independently audited.
Cyber Essentials Plus adds a third-party technical audit on top of Cyber Essentials, including external vulnerability scanning and sampled device checks. Audited by an IASME-licensed certification body, from £1,499.99 + VAT.
Cyber Essentials Plus · from
£1,499.99+ VAT · Micro (1-9 staff)
- Independent Plus technical assessment
- External vulnerability scan
- Remote technical audit
- Typically 2-3 working days for prepared assessments
Requires a valid Cyber Essentials baseline · buy both together in the pricing below
Compliance
Choose your certification.
Step 1Start with your details
Choose who you’re buying for and the organisation size to see pricing.
Step 2Purchase your product
Cyber Essentials Plus
Technical audit · CE required
From£1,499.99+ VAT
One-off · no recurring fee
- Independent technical audit
- External vulnerability scanning
- Official certificate from Fig Group, on passing.
Cyber Essentials &
Cyber Essentials Plus
Both certifications
From£1,649.99+ VAT
One-off · no recurring fee
- Self-assessment + assessor review
- Technical audit + vulnerability scan
- Official certificates from Fig Group, on passing.
Select your organisation size to see your package saving.
Cyber Essentials Plus
£1,499.99 - £4,499.99
Micro (1-9 staff) to Large (250 - 9,999 staff). + VAT. Typical 2-3-working-day target for prepared assessments; scheduling, device availability and remediation apply.
Cyber Essentials baseline
£299.99 - £549.99
Complete the Plus audit within three months of your matching Cyber Essentials certification. The package card above covers both in one purchase.
These packages cover the Plus assessment and assume Cyber Essentials certification covering the same organisation and scope. Check the IASME Plus assessment timeline before booking.
Talk to the teamThe audit
What is audited in Cyber Essentials Plus.
The Plus audit verifies your controls in the real environment, not on paper.
External vulnerability scan
Internet-facing assets are scanned for known weaknesses before certification is decided.
Sampled device checks
Representative devices are tested for secure configuration and malware protection.
MFA and access control
Multi-factor authentication and user-access control are verified in the real environment.
Patch and software status
Patch status and supported-software checks confirm systems are maintained.
Independent decision
An independent assessor reviews the evidence and makes the certification decision.
Preparation
How to prepare for Cyber Essentials Plus.
Cyber Essentials Plus is a verification exercise, not a last-minute paperwork task. Plan the audit with the same rigour as the baseline self-assessment so the assessor can move straight from scope review to control testing.
Have these ready before the audit
- A valid Cyber Essentials baseline certificate covering the same organisation and scope.
- A written scope statement listing in-scope users, devices, networks, and cloud services.
- Sampled devices available for the assessor to test (representative across OS, role, location).
- Permission to run the external vulnerability scan against your internet-facing services.
- Evidence prepared for any remote workers, BYOD, multi-site, or hybrid cloud arrangements.
Common reasons applicants are delayed
- Unsupported software still in production (legacy Windows, end-of-life browsers, EOL plugins).
- Gaps in multi-factor authentication coverage on cloud, admin, or remote-access accounts.
- Internet-facing services with high or critical vulnerabilities at scan time.
- Sampled devices unavailable in the audit window or no remote-access agent installed.
- Scope ambiguity around BYOD, contractors, or third-party managed assets.
Fig separates the baseline Cyber Essentials review from the Plus audit so applicants understand which issues block certification and which issues can be remediated during the process - no surprises mid-audit.
Fig guide
How the CE Plus remote audit works
What the assessor tests, sample sizing, and timing
Read the guideFig guide
Cyber Essentials Plus cost guide
Compare every 2026 Cyber Essentials and Plus price tier
Read the guideOfficial source
NCSC Cyber Essentials overview
Government scheme owner
Open the sourceOfficial source
IASME Cyber Essentials scheme
Delivery partner on behalf of NCSC
Open the sourceCyber Essentials trust evidence
The buyer evidence to check before you purchase
This block keeps the commercial claims close to the final decision point: licence, speed, pricing, reviews, and the important difference between Cyber Essentials and Cyber Essentials Plus.
Licence
IASME-licensed Plus route
Cyber Essentials Plus is delivered as an IASME-backed technical verification route after Cyber Essentials, with licence evidence available for procurement checks.
Verify IASME licenceScope
Plus is not the 6-hour product
The 6-hour guarantee applies to Cyber Essentials self-assessment only. Plus adds technical audit work, sampled device testing, and remediation scheduling.
Review Plus scopePricing
Published Plus pricing
Cyber Essentials Plus pricing is published by organisation size so buyers can compare cost before booking a technical audit.
Review Plus pricingReviews
Evidence-led buying check
Use Fig trust pages, Google review signals, and the official scheme sources to verify claims before committing to a Plus assessment.
Review trust evidencePractical rule: buy Cyber Essentials when the requirement asks for baseline certification. Buy Cyber Essentials Plus only when the buyer, insurer, or framework specifically asks for the audited technical verification layer.
Questions
Cyber Essentials Plus FAQ
The audit, the baseline requirement, and how Plus fits procurement.
What happens if the Plus assessment identifies gaps?
You implement the required remediation. Unless your Order Form states otherwise, one formal Plus retest within 30 days of the initial assessment is included; further retests are charged at the prevailing rate. Three rounds of Basic assessor feedback are a separate benefit and do not mean three formal Plus retests. Certification requires a successful assessment.
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds an independent technical audit with external vulnerability scanning and sampled device testing.
How long does Cyber Essentials Plus take?
Typically 2 to 3 working days for a prepared assessment, depending on scheduling, sampled-device availability and remediation. This is not the six-working-hour Basic guarantee.
Do I need a Cyber Essentials certificate before Plus?
Yes. Cyber Essentials Plus requires Cyber Essentials certification covering the same scope. The Plus audit must be completed within three months of your most recent Cyber Essentials certification. Check the issue date and agree the audit schedule with your assessor; a certificate that is still valid for the year may be outside this Plus assessment window.
Is Plus required for UK procurement?
Some frameworks and enterprise buyers require Cyber Essentials Plus for higher-risk supplier contracts. Always confirm your bid requirement.
How much does Cyber Essentials Plus cost?
Fig Group prices Cyber Essentials Plus from £1,499.99 + VAT to £4,499.99 + VAT by organisation size.
Get verified
Ready for independent verification?
Buy Cyber Essentials Plus for your organisation size, or talk to the team about scope, sampled devices and timing.
Cyber Essentials customer reviews
5 out of 5 from 52 Google ratings, including 46 written reviews.
Customer experiences of Fig’s Cyber Essentials certification across organisation sizes. Read reviews on Google.
“An excellent assessor for those seeking Cyber Essentials certification. The company promises 6 hour turnaround time on...”
“Amazing service for CE, assessment is marked within hours.”
“Very efficient”
“We engaged FIG Group for the Cyber Essentials assessment and certification. We found the process to be very efficient...”
“Used Fig Group for Cyber Essentials Certification for Acuity AI Education Ltd. - The process was smooth, quick and had...”
“Very fast, professional and supportive of our company through the Cyber Essentials application.”
“Very straightforward! Easy to access, very fast response times! Very happy, will go to Fig Group for my renewal, that's for sure!”
“Great provider, very clear and easy to use. Incredibly quick service too. We will definitely use Fig again when the need arrises”
“Excellent service throughout the Cyber Essentials process. The assessor was professional, responsive and helpful, and the assessment was completed smoothly. I would definitely recommend Fig Group.”
“Very fast and thorough Cyber Essentials audit, even completed on a Sunday. Really lived up to the advertised promise.”
“2-hour turnaround - excellent service!!!”
“We recently used Fig Group to support our business in achieving Cyber Essentials accreditation and were extremely impressed with the service we received. The whole process was straightforward and easy to follow, with excellent support throughout. The assessment was completed quickly, and the turnaround time was fantastic. We would highly recommend Fig Group to any business looking for support with their cybersecurity requirements.”
“Good support and response. The questionnaire could do with an update.”
“We had a great experience working with the Fig Group. They were prompt, professional and supportive all the way. Highly recommended. Will work with them again!!!”
“I never expected that fast service, highly recommend”
“Such a fantastic service. Jay was super quick but very thorough in the feedback. Super clear, really friendly and got my application done within the same afternoon! 100%”
“Very slick and expedient assessment process and at a very reasonable cost”
“Our assessor from Fig Group was super responsive (minutes, not hours or days as we've experienced previously when certifying) - this made the whole process much more efficient and fluid. Thank you. Recommended.”
“Once I submitted our first draft, I got feedback within minutes, and after I amended some answers following that feedback, we immediately received our Cyber Essentials certificate. Genuinely impressed!”
“Very straight forward and easy to complete the assessment.”
“As a first-time applicant I wasn't sure what to expect from Cyber Essentials, but Fig Group made it genuinely straightforward. The self-assessment was clearly structured and the questions were well framed and easy to follow, even without a deep security background. Denzel, who assessed our submission, was thorough and clear about what was needed, and the turnaround was quick. The website is clear and easy to navigate too. Highly recommend Fig Group to anyone going through CE for the first time. Thank you!”
“Efficient service and competitive pricing. Can recommend 100%”
“The Rate at which the Cyber Essential Certification Process was completed was exceptional , Fig Group promised to review and complete CE Assessment within 6 Hours, Low and Behold, When I registered on their website for my Company's Cyber Essential Application, the whole process for Assessment review and Certification was Done exactly as Promised. I will now enrol my Company for the Cyber Essential Plus within the next Two Weeks”
“Great service from Jay and the team at Fig Group. The Cyber Essentials process was simple, well organised, and easy to complete. Communication was excellent throughout, and we received prompt support whenever needed. Highly recommended.”
“Fantastic service. Will recommend to our clients who are looking for Cyber Essentials support and certification.”
“An excellent service Jay is outstanding not only to suggest that the service would be quicker than anybody else but cheaper he delivered”
“We had a very positive experience with Fig Group while completing our Cyber Essentials certification. The team was professional, knowledgeable and supportive throughout the process. They explained the requirements clearly, responded promptly to our questions and helped us understand what was needed to meet the assessment standards. Their guidance made the process much easier to manage, and we are grateful for their patience and support. I would highly recommend Fig Group to any organisation looking for reliable support with Cyber Essentials certification.”
“Excellent service and a very fast turnaround. I'm very happy to recommend them and will definitely use their services again next year.”
“We recently needed to obtain Cyber Essentials certification for our technology company, which operates across the United States, the United Kingdom, and Europe. After evaluating a number of providers, we chose FIG Group, and the experience was outstanding from start to finish. The onboarding process was straightforward. Payment was quick, and the online assessment questions were clear and easy to understand. Whenever additional information or clarification was required, the feedback process was very good. Our certificate was issued promptly, and we received both a digital certificate and confirmation documentation immediately. A special mention goes to Jay Hopkins, Managing Director of FIG Group, who was extremely helpful throughout the process. In addition to guiding us through Cyber Essentials certification, he also provided valuable advice regarding other certifications we are considering. If you are looking for a responsive provider for Cyber Essentials or Cyber Essentials Plus certification, I would highly recommend FIG Group. Based on our experience, they are one of the best providers we encountered during our search.”
“Great experience using Fig Group to attain my Cyber Essentials certification. Everything was completed within a working day and response was super fast. Very competitive pricing too! Highly recommend. Kev Park, Director @ KP Kreative”
“Easy, fast. Great experience.”
“Jay and the team at Fig Group were great - nice simple but thorough process and well digitised as you would hope! Would recommend.”
“Jay couldn't have been more helpful. As a total novice, I was very grateful for his thorough and responsive support. Would not hesitate to recommend to others. 5 star service.”
“We recently worked with the FIG Group to secure our Cyber Essentials certification for the Breakthrough Transformation Trust, and the experience was excellent. We recommend FIG Group to any organization looking for a professional, efficient, and reliable cybersecurity partner.”
“They managed my cyber essentials accreditation quickly and efficiently providing clear advice and feedback.”
“I have no hesitation in recommending this company. They were excellent in assisting with Cyber Essentials Accreditation procedure. Some really helpful feedback on the application that helped to being it home. I wouldn't hesitate to (and will) use them again in the future.”
“Amazing service and process, automated, quick and easy! They have mastered the automation and in return excellent service ! thank you ! see you next year and keep the price competitive !”
“Recently completed Cyber Essentials certification through Fig Group. The process was straightforward, communication was clear throughout, and the process was completed quickly. I found the guidance practical and easy to follow. Would recommend for SMEs looking to obtain Cyber Essentials certification without unnecessary complexity.”
“Fast, well supported service and excellent value. Would absolutely recommend.”
“We recently completed our Cyber Essentials certification with Fig Group and had a great experience from start to finish. The process was fast, straightforward, and very reasonably priced. Jay was particularly professional and helpful throughout, making everything clear and easy to manage. I would definitely recommend Fig Group to any business.”
“Great service and fast turnaround. Working with the Fig Group to achieve our Cyber Essentials accreditation was a really positive experience. A process I have previously found long-winded and difficult was made straightforward and simple from start to finish. Communication was clear, the turnaround time was excellent, and the customer service from Jay was outstanding throughout. I would highly recommend them to anyone looking to get Cyber Essentials accreditation without the usual hassle.”
“Jay at the Fig group was very helpful in helping my small business though our certification process. He got straight in contact even though it was out of hours and supported me in answering the questions. He even came and looked at some of our equipment when I wasn't sure (can't guarantee that kind of service for everyone!). He went above and beyond and I cannot recommend him enough.”
“The process was extremely efficient: short phone call, submission, pass. Highly recommended.”
“Excellent Service, Professional handling and support, the best for fast track”
“Genuinely impressed with the Cyber Essentials experience via Fig Group. As a two-director UK tech company, we wanted certification done properly rather than superficially. The assessor, Jay Hopkins, was precise, fair, and constructive throughout, the feedback we received on our first submission was proportionate and gave us a clear path to remediation rather than a blanket rejection. The whole process from registration to certificate took under a week, and the end result is a real uplift in our security posture, not just a box-ticking exercise. The free cyber liability insurance included for businesses under £20m turnover is a meaningful additional benefit. Highly recommended for any UK SME looking to take cyber security seriously.”
“Purchased a cyber essentials self assessment. Turned it around in under 2 hours. Great team.”