Prepare earlier. Fix faster. Walk into your audit with confidence
Start preparing the moment your Cyber Essentials assessment is submitted. Your dashboard brings every pre-audit task together and shows High and Critical vulnerabilities by issue and by device.
Less email back-and-forth. More time to fix issues before your auditor arrives.

Going further:
32.8%
of certified organisations go on to Cyber Essentials Plus
~50%
of large employers that certify go on to Plus
76%
say certification reduces customer due-diligence burden
Source: CyberSmart Cyber Essentials data, June 2026; UK Government Cyber Essentials Impact Evaluation
What your audit covers
Independent audit
Expert eyes on your security. Evidence you can stand behind.
Our in-house auditors take you through every stage of the audit, testing your devices, cloud services and external infrastructure against the five Cyber Essentials controls, with practical advice on how to improve along the way.
Self-assessment says you're secure. An audit proves it.
Vulnerability scanning
Find the weaknesses before attackers do.
Deploy our in-house scanner yourself, straight from your dashboard. It checks your devices for missing patches, unsupported software and known vulnerabilities, with High and Critical issues shown by issue and by device, well before audit day.
More time to remediate. Fewer surprises on the day.
External port IP configuration review
Close the doors attackers try first.
We scan your public IP addresses for open ports, exposed services and misconfigurations that could give someone a way in, with clear recommendations for every finding. Tightening your external footprint reduces risk long after certification.
What's visible from outside should never be an invitation.
Email defence checking
Test your inbox against the most common attack there is.
We send simulated malicious attachments to check that your email defences detect and block them before they can do damage. If something gets through, you'll know exactly why and how to close the gap.
Email is where most attacks start. It shouldn't be where yours succeed.
Browser malware check
Make sure one download can't take down your business.
We test whether your browsers warn users about, or block, potentially malicious downloads. If a test fails, we show you what to change so your defences catch what your people might miss.
Safe browsing shouldn't depend on everyone being careful all the time.
Antivirus review
Installed isn't the same as working.
We check that your anti-malware software is installed, up to date, properly configured, and actually detects, blocks and removes viruses, malware and ransomware. Plenty of businesses have antivirus that's switched off without realising.
Protection you can prove, not just assume.
MFA configuration
One stolen password shouldn't be enough.
We test multi-factor authentication on all listed cloud services, confirming every account is protected by more than a password. Stolen credentials are one of the most common ways in, and under Danzell, MFA must be enabled wherever it's available.
Layered access. Verified.
Reporting
Know where you stand. Know what's next.
Status icons, a certificate timeline, task tracking and live deadlines show exactly where you are, with separate Cyber Essentials and Plus views. Smart Score reporting shows your risk and how to reduce it, long after the audit ends.
Complete visibility, from first task to final certificate.
Unlimited attempts and support
Support until you pass. No surprise fees.
Unlimited attempts at no extra cost. Whether it's your first attempt or your fifth, you get the same access to our UK-based, IASME-assured auditors. We explain what failed, why it matters and exactly how to fix it.
Your certification is our goal too. We don't stop until you're there.
Digital certificate of completion
Independently tested. Publicly proven.
Get a digital Cyber Essentials Plus certificate and badges for your website, tenders, proposals and email signatures. It tells buyers your security has been independently tested, not just declared, a real advantage in procurement and insurance.
Win trust before the first meeting.
WHAT'S NEW
Stronger validation under Danzell.
Danzell introduces enhanced verification and sampling requirements, so auditors can confirm fixes have been applied across your whole organisation, not just on a few devices. Any Cyber Essentials non-compliances must be resolved before you move on to Cyber Essentials Plus.
The bar is higher, so preparation matters more than ever. That's why our journey starts earlier, gets scanning underway sooner and shows you vulnerabilities as they're found.
MFA on cloud services
Multi-factor authentication must be enabled on all cloud services where it's available.
Vulnerability management
Vulnerabilities must be identified and fixed within the required timeframes.
Stricter scoping
Clearer rules on what's in scope, so your certification reflects your real environment.
Year-round compliance
Your declaration now explicitly confirms you stay compliant all year, not just on assessment day.
Cyber Essentials before Plus
Any Cyber Essentials non-compliances must be resolved before Cyber Essentials Plus.
Ready before you start
Be prepared ahead of certification, rather than relying on fixes during the audit.
Accreditations





Trusted by 8,000+ UK SMEs and 1,000+ MSP partners


















do you need help?
Frequently asked questions
Cyber Essentials Plus is a UK Government backed scheme, which ensures businesses implement a set of basic technical controls to protect themselves against common threats, which are audited by a third party. Cyber Essentials Plus is suitable for all organisations, of any size, in any industry.
The 5 technical controls are:
- Firewalls
- Secure configurations
- Applying access controls
- Anti-Malware measures
- System maintenance
Certification takes four simple steps, with expert support throughout.
- Once you have purchased a Cyber Essentials subscription, you will be given access to our platform where you can input your evidence for the controls. Helpful tips and guidance will also be provided to support your application submission.
- The next step is submitting your application. If you are unsure as to whether you've provided the right information, our experts are available on live chat for support or, alternatively, you will receive feedback on each failed check at step three.
- One of our IASME assured assessors will review your application and for any failed checks, will provide what steps need to be taken in order to fix them.
- Once you have passed all your checks and a successful submission has been made, you will be provided with a digital certificate of completion as well as badges to be used in your marketing materials. You will also be added to IASME's database of certified organisations, should your partners or customers want to verify it.
Not for CyberSmart customers. Our experts have many decades of experience running certification audits and our proprietary software is purpose-built for Cyber Essentials and Cyber Essentials Plus certification.
CyberSmart operates a yearly rolling subscription. This is to ensure that you never miss your re-certification deadline or open yourself up to attacks.
Danzell
Yes. It is highly advised that any company doing business in the UK, even if they are based overseas, should get certified. Not only does it demonstrate a commitment to security, but also many business contracts in the UK require organisation's to have Cyber Essentials.
There are no known downsides to Cyber Essentials Plus and additional certifications can be used in parallel with it. However, it is highly advised that businesses take out products such as Active Protect, which scans your devices and software daily for any vulnerabilities and misconfigurations. It also comes with training and policy management which should reduce the likelihood of a breach.
*CyberSmart is the UK's largest and leading Cyber Essentials certification body, measured by assessments completed: 28,353 as of 1 August 2026, comprising 21,578 Cyber Essentials and 6,775 Cyber Essentials Plus assessments.