Cyber Essentials

Get Certified. Stay Protected. Win More Business.

Request more Information

Ready for Cyber Essentials?

Tick the boxes to check your Cyber Essentials readiness:







Cyber Essentials vs Cyber Essentials Plus — What’s the Difference?

Cyber EssentialsCyber Essentials Plus
Self-assessedIndependently audited
Online questionnaireHands-on technical verification
Protects against common cyber threatsStronger assurance, essential for high-value or sensitive contracts
Fast, affordable entry-level certificationRequired for many government and defence contracts

Firewalls & Internet Gateways
Secure your internet connection to keep attackers out.

Secure Configuration
Ensure devices and software are properly set up for maximum protection.

User Access Control
Manage who can access your data and systems — and limit unnecessary permissions.

Malware Protection
Prevent viruses, ransomware and other malware from disrupting your business.

Security Update Management
Keep software and systems up to date to block known vulnerabilities.

What is Cyber Essentials?

Cyber Essentials certification isn’t just a badge.

It’s proof to your customers, suppliers and regulators that your business takes cybersecurity seriously — and has the controls in place to stay safe.

At Codestone, we make Cyber Essentials and Cyber Essentials Plus certification simple, fast and stress-free.

33,000+
UK Businesses Certified
with Cyber Essentials
70%
Reduction in Common
Cyber Threat Risk
£4,960
Average Cost of a Cyberattack
on UK SMBs
90%
Public Sector Contracts
Requiring Certification

Don't Become a statistic

For Cyber Essentials / Cyber Essentials Plus:

  • 33,000+ — UK organisations certified under the Cyber Essentials scheme (and rising).
    (Source: NCSC / IASME Consortium 2024)

  • 70% — Reduction in risk of common cyber threats reported by Cyber Essentials-certified businesses.
    (Source: UK Government findings on Cyber Essentials)

  • 1 in 3 — Number of UK businesses that have already achieved or are actively seeking Cyber Essentials certification.
    (Source: NCSC Annual Report)

  • 90% — Percentage of public sector contracts that now require Cyber Essentials certification for suppliers.
    (Source: UK Government procurement guidelines)

0 secs

Frequency of cyberattacks worldwide

0 %

Percentage of cyberattacks that target SMEs

£ 0

Average cost of a cyberattack to UK small businesses

0 %

Less than 6 months to ROI payback

Limited Offer

Codestone are one of the few suppliers who can help you get certified. Don’t waste time and resource trying to navigate the laborious certification process.

Let Codestone take the lead and you can benefit from all the advantages, including a free Cyber Essentials when you purchase Cyber Essentials Plus for just £1,620 (ex VAT).

Trusted by

Don’t Risk Falling Behind. Get Certified Now.

Your Path to Certification:

  • Gap Analysis
    Assess your current security controls against Cyber Essentials requirements.

  • Remediation Support
    Fix any issues with expert help to close gaps and improve defences.

  • Certification Audit
    Complete the self-assessment or technical audit with our guidance.

  • Ongoing Support
    Maintain your certification status with updates and best practice advice.

Get Started Today

Questions about Cyber Essentials?

For some government contracts — yes. But even if not required, it reduces cyber risk and boosts trust with customers.

Typically 1–5 days for Cyber Essentials, and 5–10 days for Cyber Essentials Plus — depending on your existing controls.

No problem. We provide remediation guidance to help you pass on retest.

Yes — the scheme applies to cloud services like Microsoft 365, Azure, AWS and Google Cloud if they form part of your in-scope infrastructure.

Absolutely. The scheme is designed for organisations of all sizes — from micro-businesses and SMEs to large enterprises.

Certification is valid for 12 months. You’ll need to renew annually to stay compliant and maintain your certification status.

Yes — Cyber Essentials Plus offers a higher level of assurance, required for many sensitive contracts and highly recommended for organisations handling personal data, financial transactions or critical services.

While not a GDPR certification, Cyber Essentials supports GDPR compliance by improving data protection and information security measures.

  • Reduced risk of cyberattacks

  • Eligibility for new contracts

  • Enhanced customer trust

  • Lower cyber insurance premiums in some cases