Skip to main content
Cyber Essential Check
Free scan
The UK's cyber security basics

Know your business is protected: systems, staff and all with ongoing cyber assurance.

We check your systems for weak spots, train your team in plain English, and send safe pretend phishing emails to see who clicks - giving you ongoing cyber assurance, so you stay compliant and never become the easy target.

Check my business How does it work? Free cyber security conversation
Cyber Essentials alignedUK-hostedGDPR-readyNo agents to install
cybercheck-essential.app / scans / acme-ltd.co.uk

Readiness score

72%

Auto-fails

2 open

  • Email encryption checkPass
  • Email spoofing protectionPass
  • Browser security settingWarn
  • Extra login protectionFail
  • Old computer software detectedFail

Everything in one place

Protect your systems, your staff and your reputation.

Most break-ins start with a person, not a computer. We check your systems, train your team and test them with safe fake phishing emails - so you are not the easy target.

Security checks

We check your website, email, firewalls, cloud accounts and devices for the weaknesses attackers look for.

  • Website and email safety check
  • Microsoft 365 and Google account checks
  • Firewall and router health check

Staff training

Short, plain-English courses for your team, with automatic reminders and a record of who has done what.

  • Ready-made courses, or add your own
  • Automatic email reminders for staff
  • Proof of training you can show an assessor

Phishing testing

We send safe, pretend phishing emails so you can see who clicks - and anyone who does gets friendly advice straight away.

  • Realistic emails, completely harmless
  • See exactly who clicked
  • Instant coaching for anyone caught out

5

Key safety areas we check

3

Systems, staff and scam testing

<60s

How fast you get results

UK

UK-based support team

How it works

Three simple steps to a safer business.

  1. 01

    Check your systems

    Nothing to install. We look at your website, email, cloud accounts and firewalls the same way an outsider (or attacker) would.

  2. 02

    Fix what's risky

    We give you a clear list of what's good, what's risky and what to do about it - step by step.

  3. 03

    Train your team and prove it

    Give staff short training, test them with safe pretend phishing emails, and download a tidy report that proves it.

What we check

Built for small UK businesses.

Everything you need to move from 'I think we're OK' to 'here's the proof' - nothing you don't.

Website & email safety check

We check that your website and email are set up safely and nothing sensitive is left open.

Microsoft 365 & Google check

Connect Microsoft 365 or Google and we'll check staff logins, admin accounts and updates.

Instant-fail warnings

We flag the things that would cause an instant fail - like missing 2-step login or old Windows.

Clear, plain-English results

Each issue comes with a simple explanation and step-by-step help to fix it.

Downloadable report

Download a tidy PDF or spreadsheet to share with your IT person or assessor.

Tick-off checklist

Tick things off as you go, check again to prove it's fixed, and keep a record.

Automatic regular checks

We'll re-check your site automatically and email you when something new appears or gets fixed.

Ready-made policies

Download ready-to-use cyber security policies you can share with staff - no jargon, no blank-page stress.

Staff training

Short courses for your team, automatic reminders, and a record of who has completed what.

Phishing testing

Safe pretend scam emails that show who clicks - with instant advice for anyone caught out.

The instant-fail list

Most businesses fail for the same six reasons.

We check these first, so within minutes you know if you'd pass - and what to fix if not.

Check for instant fails

  • 2-step login not switched on

    Every account that logs in should need a code from a phone or app, not just a password.

  • Updates left more than 2 weeks

    Windows, macOS, browsers and apps must be kept up to date within 2 weeks of an important fix.

  • Old, unsupported software

    Using Windows 10 after October 2025, or any software that no longer gets updates, means an instant fail.

  • Shared admin logins

    Every admin needs their own login - no sharing one "admin" account between people.

  • Laptops or phones without encryption

    Any work laptop or phone must be encrypted, so a thief can't read what's on it.

  • Default router password still set

    The password on your router or firewall must be changed from the one it came with.

Compliance, kept up to date

Get compliant - and stay that way.

Passing once is not enough - things change, certificates run out and new weak spots appear. We keep checking your systems, training and phishing results all year round, so you can always prove you are covered.

  • Checks run again and again, not just once
  • We warn you when something new needs fixing
  • Proof ready whenever someone asks for it

Why this matters

Criminals go for the easiest business to break into.

Most attacks on small businesses are not personal - they simply find the weakest door. Shut those doors and attackers move on to someone else.

  • Know exactly where you stand
  • A team that spots scams before clicking
  • Proof to show customers and insurers

Why trust us

Built for UK SMEs, with ongoing assurance in mind.

We built this around the real Cyber Essentials questions, not a made-up list. Your information is locked away safely, and we follow the same rules we ask you to follow.

  • Follows the official Cyber Essentials questions
  • Your data is protected and always yours
  • Written in plain English, no jargon

FAQ

Questions people often ask.

Ready in minutes. Peace of mind that lasts.

Free check on your website. No card needed. Only pay when you want the full report.

Check my business

This helps you get ready. The official certificate still has to come from an approved assessor.