Cyber Essentials · Cyber Essentials Plus · UK organisations

Cyber Essentials certification, with the support to get ready

Have a tender deadline, customer requirement or renewal coming up? We help you choose the right level, find the gaps and prepare for assessment.

Get a written scope and price before work begins, with a London-based engineer guiding your next step.

Free enquiry. No obligation. We reply the same business day (Monday–Friday, 8am–6pm).

  • Cyber Essentials – Guided from £495 + VAT, certification fee included
  • Cyber Essentials – Ready, with the gaps found and fixed, from £1,315 + VAT
  • Cyber Essentials Plus – Ready from £3,115 + VAT

Each package includes the certification fees and Nerdster support listed below. Your written quote confirms the scope and total price before work starts.

Nerdster is Cyber Essentials certified. We prepare and support your organisation; an approved certification body assesses your application and issues certification.

Tell us what you need

Share your deadline and organisation size. We will confirm the right route, what the work includes and any information needed for your fixed quote.

Your enquiry is free. Sending this form does not commit you to buying a service. We use your details to respond to your request. Read our Privacy Policy.

Clear prices, excluding VAT

Choose the support your organisation needs

Pick your organisation size and the prices update. Every price includes the certification body fee.

Your organisation size
Fastest route to the certificate

Cyber Essentials – Guided

Guided
£495 + VAT

One payment. Certificates last 12 months.

Your controls are already in place and you want a reviewed submission.

What's included

  • Cyber Essentials certification with the IASME fee included
  • Assessor review of your questionnaire answers before submission
  • Policy templates for the five controls
  • Email and chat support while you complete the questionnaire
  • If an answer is marked down, we help you correct it and resubmit at no extra charge
  • £25k cyber liability insurance for eligible UK organisations
What is not included

Technical fixes outside the package, replacement devices or software, new licences and an onsite Plus audit are quoted separately before you approve them.

Cyber Essentials – Ready

Ready
£1,315 + VAT

One payment. Certificates last 12 months.

You need the gaps found and fixed before you submit.

What's included

  • Everything in Cyber Essentials – Guided
  • Gap review against the current question set
  • Remediation of failing controls: MFA, patching, admin accounts, device configuration
  • Evidence pack organised the way the assessor expects
  • Our aim is a pass at the first attempt; if an answer is marked down, we correct it and resubmit with you
What is not included

Replacement devices or software that are out of support, new licences and work outside the agreed scope are quoted separately before you approve them.

Most popular

Cyber Essentials Duo – Guided

Guided
£1,895 + VAT

One payment for both certificates. Renew each year.

A customer or contract asks for Plus and your controls are already in place.

What's included

  • Cyber Essentials and Cyber Essentials Plus in one engagement
  • Guided questionnaire with assessor review
  • Independent Cyber Essentials Plus technical audit
  • 12 months of external vulnerability scanning
  • Unlimited retests if a finding needs fixing
  • £25k cyber liability insurance for eligible UK organisations
What is not included

Technical fixes outside the package, replacement devices or software, new licences and an onsite Plus audit are quoted separately before you approve them.

For tenders, MOD and NHS supply chains

Cyber Essentials Plus – Ready

Ready
£3,115 + VAT

One payment for both certificates. Renew each year.

You need Plus and want us to prepare every device for the audit.

What's included

  • Cyber Essentials and Cyber Essentials Plus certification
  • Full readiness review and remediation of failing controls
  • Device preparation for the audit sample
  • A free retest within 30 days if a device fails the audit
  • Audit coordination with the certification body
  • 12 months of external vulnerability scanning
  • £25k cyber liability insurance for eligible UK organisations
What is not included

Technical fixes outside the package, replacement devices or software, new licences and an onsite Plus audit are quoted separately before you approve them.

Cyber Essentials – Managed

£1,025 a year + VAT

Year one £1,610 including onboarding

Annual subscription, priced by number of users. Year one adds a one-off onboarding.

Your Cyber Essentials every year, with the controls looked after in between.

For organisations that need Cyber Essentials every year for a customer, tender or insurer, and would rather the controls were kept true than re-fixed each renewal.

  • Cyber Essentials certification every year
  • Device monitoring agent on every in-scope device
  • Third-party patching
  • Security policies kept current
  • Staff training and phishing simulations
  • Onboarding by Nerdster: agent rollout, policy set-up, training launch and the first certification

Technical fixes found at onboarding, replacement devices and new licences are quoted separately. The subscription element is priced by number of users; see Managed plans. See the Managed plans table.

Add an AI use check

£750 + VAT, one-off

Staff may already be using AI tools you have not approved. This check finds them.

You give us read-only admin access to your Microsoft 365. We list the AI apps connected to it, check how staff sign in to them, and map which files and mailboxes they can see. We also ask your team what they use, because the records cannot show every tool. You get three short documents:

  • An AI tool inventory, with who uses what
  • An AI use policy written for your business
  • A short plan: what to keep, what to switch off, what to set up properly

The NCSC's Cyber Essentials requirements do not mention AI. In our reading, an AI tool that staff use with a work email and company data counts as a cloud service under the scheme's definition. So it belongs in scope, and it needs MFA where the tool offers it. Why AI tools count.

Want ongoing help after the check? See the ongoing AI team at Nerdster AI.

What your price covers

These are Nerdster service packages: the certification body fees together with the preparation and support described above. The prices include one certification cycle and the agreed support for that project. Certification renews annually. Cyber Essentials – Managed covers renewal each year; otherwise renewal certification and any further support are quoted separately. Every package and size is listed on the pricing page.

What could change the final price?

Organisation size, assessment scope and technical complexity can affect your quote. Technical remediation, replacement hardware or software, additional licences and an onsite assessment are separate unless expressly included in your written quote. We explain the expected costs before you approve the work.

Ongoing monitoring, patch-management subscriptions, security training and privacy software are available under separately scoped services. They are included only where your quote expressly lists them.

What we do

Know what needs fixing before the assessment

Choose the right route

We review the requirement you have been given and help you establish whether you need Cyber Essentials, Plus or a renewal.

Identify practical blockers

We check the areas that can hold up preparation, such as unsupported software, missing MFA, patching, access controls and unclear device ownership.

Prepare the evidence

With the readiness or Plus package, your team gets a clear view of the information and evidence needed. We can work alongside your existing IT provider.

Coordinate the assessment

We help you prepare accurate answers and coordinate with the approved certification body. Certification remains subject to its assessment.

A clear process from first call to assessment

Tell us the requirement

Share your deadline, organisation size and current IT setup.

Review your scope and quote

See the support included, likely dependencies and any separate remediation costs.

Prepare your organisation

Your IT team or ours carries out the agreed work and gathers the evidence.

Complete the assessment

We support the submission and coordinate the Plus assessment where required.

Most supported projects take 2–6 weeks, depending on readiness and scope. We confirm a realistic timeline after reviewing your situation.

Common questions

Do we need Cyber Essentials or Cyber Essentials Plus?

Start with the wording in your customer request or contract. Cyber Essentials uses an independently reviewed self-assessment. Plus adds technical testing by an assessor. Send us the requirement if you are unsure which level it calls for.

We already have an IT provider. Can you still help?

Yes. We can handle readiness and assessment coordination while your provider completes the agreed technical work.

Is the enquiry or first discussion chargeable?

No. The initial enquiry is free and without obligation. Any paid work is scoped and agreed in writing before it starts.

Does the price include fixing every issue?

No. The quote separates the chosen certification support from technical remediation, hardware, software or other work your environment needs. You decide what to approve.

Why do your prices differ from certification-only prices?

Our packages combine certification fees with Nerdster's answer review, preparation or assessment coordination, depending on the option you choose. Your quote explains the services included so you can compare the scope as well as the price.

Does the Plus package include Cyber Essentials?

Yes. The advertised package includes both Cyber Essentials and the Plus technical assessment, together with the listed Nerdster preparation and support. If you already hold valid Cyber Essentials certification, tell us so we can confirm the appropriate assessment route and quote.

Is this an annual subscription?

It can be. The Guided and Ready packages cover one certification cycle. Cyber Essentials – Managed is an annual subscription priced by users; year one adds a one-off onboarding, so for 1 to 9 people it is £1,610 in year one, then an annual subscription with the certification included each year. You can stop it at renewal.

What does the AI use check involve?

We ask for read-only admin access to your Microsoft 365. We list the connected AI apps, how staff sign in to them and what data they can reach. You get an AI tool inventory, an AI use policy and a short action plan. It is a check, not a certification.

Does this include CyberSmart Core or Complete?

The packages on this page cover the certification and Nerdster support listed above. If you also need ongoing device protection, patch management, training or privacy tools, ask us for a separate quote that clearly lists those products and services.

Can you help with an urgent deadline?

Tell us the date and current state of your IT. We will explain what is realistic after reviewing the scope. We do not promise certification before the assessment is complete.

Who issues the certificate?

An approved certification body assesses the application and issues certification when the requirements are met. Nerdster provides the agreed preparation and support.

Get a clear route and a fixed quote

Tell us what you need the certificate for. We will help you understand the next step, likely work and costs before you commit.

Monday–Friday, 8am–6pm.