About Cyber Essential Check
Cyber Essential Check is a UK-focused readiness tool for small and medium businesses working towards Cyber Essentials certification. We automate the technical checks, translate the requirements into plain English, and give you a clear plan to close the gaps before you engage a certification body.
What we do
We scan your external footprint (domains, mail, TLS, DNS posture), connect to your cloud tenants where you allow it, and combine that with a short self-assessment covering the five CE control areas - firewalls, secure configuration, user access, malware protection and security update management. The result is a single readiness score, a prioritised list of remediation tasks, and an evidence pack you can hand to an assessor.
Who it's for
UK SMEs, in-house IT leads, and MSPs preparing client estates for certification. If you have between 1 and 250 employees and you need Cyber Essentials for a tender, an insurer or peace of mind, you're in the right place.
How the readiness score works
Every check is weighted by the impact it would have in a real assessment. Auto-fail items - like unpatched end-of-life software or missing MFA on cloud admin accounts - carry the heaviest penalty because they would fail certification outright. High, medium and low findings adjust the score, and unverified controls are flagged separately so you know where you still need evidence.
Readiness only - not official certification
Cyber Essential Check is a preparation and gap-assessment tool. We are not an IASME-accredited certification body and nothing here grants a Cyber Essentials certificate. When you're ready, take your evidence pack to an accredited assessor to complete the certification process.