Everything in Cyber Essentials, plus independent proof.

Cyber Essentials Plus is an independently audited certification that verifies your Cyber Essentials controls through hands-on technical testing.

Meet procurement requirements and give customers, partners and insurers confidence.

Prepare earlier. Fix faster. Walk into your audit with confidence

Start preparing the moment your Cyber Essentials assessment is submitted. Your dashboard brings every pre-audit task together and shows High and Critical vulnerabilities by issue and by device.
Less email back-and-forth. More time to fix issues before your auditor arrives.

Going further:

32.8%

of certified organisations go on to Cyber Essentials Plus

~50%

of large employers that certify go on to Plus

76%

say certification reduces customer due-diligence burden

What your audit covers

Independent audit

Expert eyes on your security. Evidence you can stand behind.

Our in-house auditors take you through every stage of the audit, testing your devices, cloud services and external infrastructure against the five Cyber Essentials controls, with practical advice on how to improve along the way.

Self-assessment says you're secure. An audit proves it.

Vulnerability scanning

Find the weaknesses before attackers do.

Deploy our in-house scanner yourself, straight from your dashboard. It checks your devices for missing patches, unsupported software and known vulnerabilities, with High and Critical issues shown by issue and by device, well before audit day.

More time to remediate. Fewer surprises on the day.

External port IP configuration review

Close the doors attackers try first.

We scan your public IP addresses for open ports, exposed services and misconfigurations that could give someone a way in, with clear recommendations for every finding. Tightening your external footprint reduces risk long after certification.

What's visible from outside should never be an invitation.

Email defence checking

Test your inbox against the most common attack there is.

We send simulated malicious attachments to check that your email defences detect and block them before they can do damage. If something gets through, you'll know exactly why and how to close the gap.

Email is where most attacks start. It shouldn't be where yours succeed.

Browser malware check

Make sure one download can't take down your business.

We test whether your browsers warn users about, or block, potentially malicious downloads. If a test fails, we show you what to change so your defences catch what your people might miss.

Safe browsing shouldn't depend on everyone being careful all the time.

Antivirus review

Installed isn't the same as working.

We check that your anti-malware software is installed, up to date, properly configured, and actually detects, blocks and removes viruses, malware and ransomware. Plenty of businesses have antivirus that's switched off without realising.

Protection you can prove, not just assume.

MFA configuration

One stolen password shouldn't be enough.

We test multi-factor authentication on all listed cloud services, confirming every account is protected by more than a password. Stolen credentials are one of the most common ways in, and under Danzell, MFA must be enabled wherever it's available.

Layered access. Verified.

Reporting

Know where you stand. Know what's next.

Status icons, a certificate timeline, task tracking and live deadlines show exactly where you are, with separate Cyber Essentials and Plus views. Smart Score reporting shows your risk and how to reduce it, long after the audit ends.

Complete visibility, from first task to final certificate.

Unlimited attempts and support

Support until you pass. No surprise fees.

Unlimited attempts at no extra cost. Whether it's your first attempt or your fifth, you get the same access to our UK-based, IASME-assured auditors. We explain what failed, why it matters and exactly how to fix it.

Your certification is our goal too. We don't stop until you're there.

Digital certificate of completion

Independently tested. Publicly proven.

Get a digital Cyber Essentials Plus certificate and badges for your website, tenders, proposals and email signatures. It tells buyers your security has been independently tested, not just declared, a real advantage in procurement and insurance.

Win trust before the first meeting.

Stronger validation under Danzell.

Danzell introduces enhanced verification and sampling requirements, so auditors can confirm fixes have been applied across your whole organisation, not just on a few devices. Any Cyber Essentials non-compliances must be resolved before you move on to Cyber Essentials Plus.
The bar is higher, so preparation matters more than ever. That's why our journey starts earlier, gets scanning underway sooner and shows you vulnerabilities as they're found.

MFA on cloud services

Multi-factor authentication must be enabled on all cloud services where it's available.

Vulnerability management

Vulnerabilities must be identified and fixed within the required timeframes.

Stricter scoping

Clearer rules on what's in scope, so your certification reflects your real environment.

Year-round compliance

Your declaration now explicitly confirms you stay compliant all year, not just on assessment day.

Cyber Essentials before Plus

Any Cyber Essentials non-compliances must be resolved before Cyber Essentials Plus.

Ready before you start

Be prepared ahead of certification, rather than relying on fixes during the audit.

Accreditations

Trusted by 8,000+ UK SMEs and 1,000+ MSP partners

do you need help?

Frequently asked questions