Cyber Essentials, priced in the open.
The official basic-CE assessment fee is £300–£600 depending on size. Getting an estate that actually passes is the real work — DatSov does it at a fixed £1,150 for Cyber Essentials and £4,450 for Cyber Essentials Plus, remediation included in the approach, prices published before you call.
Certification as a by-product of real security.
The five CE controls are simply a sane baseline. We fix the estate until it passes on merit — the certificate, the insurance eligibility and the procurement evidence follow.
Fixed, published prices
Guided Cyber Essentials certification is £1,150 and Cyber Essentials Plus is £4,450 — published here, not revealed after a discovery call. No day-rate drift.
Certification, not paperwork
We remediate as we go — firewalls, secure configuration, access control, malware protection, patching — so you pass because the estate is actually right, not because the answers were worded well.
Five controls, done properly
The CE controls overlap almost entirely with a sensible security baseline. Certification becomes a by-product of hardening you needed anyway.
Beyond the badge
CE+ evidence feeds insurance renewals, supplier due-diligence packs and public-sector bids. We hand over the audit trail, not just the certificate.
Fixed prices, on the record.
All prices in GBP. DatSov is not currently VAT registered — the price shown is the amount payable. Official IASME assessment fees are charged at cost.
CYBER ESSENTIALS — £1,150
Guided certification to the government-backed baseline: gap review against the five controls, remediation guidance, and submission support through to certificate.
CYBER ESSENTIALS PLUS — £4,450
Everything in Cyber Essentials plus the hands-on technical verification CE+ requires — device sampling, vulnerability checks and evidence preparation for the independent audit.
SECURITY POSTURE ASSESSMENT — £1,495
Not ready to certify? A comprehensive assessment of your current posture with a prioritised remediation roadmap — the honest starting point if you expect the audit would fail today.
Cyber Essentials costs, answered.
How much does Cyber Essentials certification cost in the UK?+
Two parts. The official assessment fee for basic Cyber Essentials is fixed by IASME by organisation size: roughly £300 + VAT for micro organisations (0–9 staff), £400 for small (10–49), £450 for medium (50–249) and £500 for large (250+). Support to actually pass is separate: DatSov's guided certification is £1,150 fixed, covering gap review, remediation guidance and submission.
How much does Cyber Essentials Plus cost?+
CE+ has no fixed national fee — certification bodies price the technical audit by size and complexity, typically £1,500–£4,000+ across the market. DatSov's fixed price is £4,450, which includes the hands-on verification work, device sampling preparation and remediation, not just the audit booking. Prices are in GBP; DatSov is not currently VAT registered, so the price shown is the amount payable.
What drives the cost of Cyber Essentials Plus?+
Device and OS diversity, number of sites, how much of the estate needs remediation before it can pass sampling, and how quickly you need the certificate. A clean, current, centrally managed estate sits at the bottom of the range; a mixed estate with legacy endpoints sits at the top. The honest way to keep CE+ cheap is remediation first — which is why we sell the posture assessment separately at £1,495.
What are the five Cyber Essentials controls?+
Firewalls, secure configuration, user access control, malware protection, and security update (patch) management. CE certifies you meet them by verified self-assessment; CE+ adds independent hands-on technical testing of a sample of your devices and internet-facing systems.
Do we need Cyber Essentials Plus or is basic enough?+
Basic CE satisfies many supplier questionnaires and includes cyber liability insurance for qualifying smaller organisations. CE+ is increasingly demanded for public-sector contracts, defence supply chains and enterprise procurement because it is independently verified. If a contract names CE+, budget for CE+; if not, CE now with CE+ next cycle is a common path.
How long does certification take?+
Basic CE can complete in days once the controls are genuinely in place — the timeline is driven by remediation, not paperwork. CE+ must be completed within three months of the basic certificate and adds the scheduled technical audit; allow a few weeks end to end for a typical SME estate.
Start with the posture, not the paperwork.
Tell us the contract or renewal driving the deadline. You will speak directly with the lead who would run your certification — not a sales desk.