Do you need Cyber Essentials? Find out in 60 seconds.
Plain-English answers, real costs, the government funding you might qualify for, and an introduction to accredited certification bodies — free.
Independent guide. Not affiliated with the NCSC or IASME.
Quick checker
0 of 3 answeredDo you bid for council, NHS or other public-sector work?
Have any customers asked about your cyber security or certificates?
Do you store customer or staff personal data (names, emails, payment details)?
Answer all three to see your result.
Why small firms are getting certified now
of UK small businesses (10–49 staff) held a certificate in the year to March 2026 — most of your competitors haven't done it yet.
+ VAT is what eligible small businesses now pay with the 75% First Step Fund discount, instead of £320–£500.
Firewalls, secure settings, software updates, user access and malware protection. That's the whole standard.
Sources: Cybersmart analysis of government data; GOV.UK Cyber Essentials funding package.
How it works
Check if you need it
Use the checker above, or read our plain-English guides on costs and funding.
Tell us about your business
A two-minute form: your size, what you need it for, and whether you want help with funding.
We introduce you
We put you in touch with up to three accredited certification bodies that fit. You choose — no obligation, and it's free for you.
Get matched with a certification body
Free for businesses. We'll reply by email within one business day.
Plain-English guides
FAQ
Why get certified? What does it do for my business?
It opens doors to work. Cyber Essentials is required for many central government and NHS contracts, for Criminal Legal Aid contracts and for most defence work, and more and more larger customers ask their suppliers for it. See government contracts and our guides for your sector.
It adds credibility. A certificate shows customers and partners that you take protecting their data seriously, backed by a government scheme. You can display the Cyber Essentials logo, and your certificate can be checked on the public register.
It makes you safer. The five controls protect against the most common internet attacks, such as phishing, password guessing and unpatched software.
It can include free cyber insurance. Eligible small businesses get cyber cover with their certificate. See cyber insurance and Cyber Essentials.
Do I need Cyber Essentials?
It isn't a legal requirement for most businesses, but you may need it to win work. Central government requires it for contracts that involve handling personal or sensitive information or supplying certain IT services, and many councils, NHS suppliers, larger customers and insurers ask for it too. Our 60-second checker gives you a quick answer for your business.
How much does Cyber Essentials cost?
The certificate fee is set centrally by IASME according to business size: £320 + VAT for micro businesses (0–9 staff), £440 + VAT for small (10–49) and £500 + VAT for medium (50–249). Eligible businesses can get 75% off. Cyber Essentials Plus is priced by each certification body and typically costs £1,500 to £3,000 + VAT for a small business. See our cost guide.
Am I eligible for the 75% funding?
Probably, if you're a UK micro, small or medium-sized business and haven't held Cyber Essentials in the past four years. The government's First Step Fund runs until March 2027 or until the money runs out, first come first served. The discount is applied by the certification body you choose. See how to get 75% off.
Is this service free?
Yes, for businesses. Certification bodies may pay us to be listed or introduced. That never affects the facts in our guides.