External vulnerability scan
We scan every internet-facing address you use, including cloud servers, for known high or critical weaknesses.
Cyber Essentials Plus certification: Cyber Essentials Plus, proven.
The same five controls as Cyber Essentials, tested hands-on by an assessor. We're an IASME certification body in Dereham, so we can get you ready and carry out the audit, on site or remotely.
When self-assessment isn't enough.
Basic Cyber Essentials is a questionnaire you answer and we verify. Plus goes further: an assessor tests a sample of your real devices and accounts to prove the controls work in practice.
Government buying guidance says Plus should be used where a contract carries a higher risk, and the Ministry of Defence's Defence Cyber Certification asks for it at its higher levels. If a customer or tender has asked for "Plus", this is it.
The five tests, explained.
Each one checks a real control on a sample of your systems, chosen by the assessor rather than by you.
Patching check
An authenticated scan of sampled devices confirms security updates are applied.
Malware protection
We test that harmful files arriving by email or through the browser are stopped.
Multi-factor authentication
We confirm MFA is switched on for every cloud service you use, such as Microsoft 365.
Account separation
We check that everyday user accounts can't carry out administrator tasks.
Help before the audit
We run the same checks first and help you fix what we find, so the audit itself holds no surprises.
Clear pricing.
We price Cyber Essentials Plus after a short look at how many devices, users and sites you have, so you only pay for what the audit needs. You'll get a fixed price before we start.
Cyber Essentials Plus
Most popularOn assessment
+VAT · fixed price before we start
- The five technical tests on a sample of your devices and accounts
- On site at your premises, or carried out remotely
- Help fixing anything we find before the audit
Needs a current Cyber Essentials certificate. We can do both together.
Get a Plus quoteWhy Plus with us.
One local team from the first check to the certificate.
We're a certification body
IASME licenses us to certify Cyber Essentials and Plus, so you deal with one team throughout.
On site across Norfolk
We can carry out the audit at your premises, or remotely if that suits you better.
We fix as well as test
If something needs sorting before the audit, our engineers can do it for you.
Cyber Essentials Plus, answered.
What's the difference between Cyber Essentials and Plus?+
Both cover the same five controls. Cyber Essentials is a self-assessment that we verify. Plus adds a hands-on technical audit of a sample of your devices and accounts.
Do we need Cyber Essentials first?+
Yes. Plus builds on a Cyber Essentials certificate covering the same scope, and the audit has to be completed within three months of it. We can do both together.
Can the audit be done remotely?+
Yes. It can be carried out on site or remotely, depending on your setup. We're in Dereham and can come to you anywhere in Norfolk.
What happens if a test fails?+
You get up to 30 days to fix it, then a fresh sample is tested. We run the same checks before the audit, so it rarely comes to that.
How long does a Cyber Essentials Plus certificate last?+
Twelve months, the same as Cyber Essentials. To stay certified, you renew both each year.
Which version of the requirements applies?+
Since 27 April 2026, assessments use the Cyber Essentials requirements v3.3, known as the "Danzell" question set. We'll walk you through what changed.
Often added.
Get your Plus certificate.
Tell us roughly how many devices and sites you have, and we'll come back the same working day with a fixed price.
01362 760100Mon–Fri 8:30am–5pm