IASME Accredited Certification Body

How Much Is Cyber Essentials Certification?
From £349 – No Hidden Fees

How much is Cyber Essentials? It is one of the most common questions UK businesses ask when exploring cybersecurity certification. The answer depends on your organisation size and whether you need Baseline or Plus certification. With Fig, Cyber Essentials Baseline starts from just £349 for micro organisations (1–9 employees) and Cyber Essentials Plus starts from £1,499. Every price is fully inclusive – no hidden assessment fees, no surprise consultancy charges, and no mandatory add-ons.

Fig is an IASME-accredited Cyber Essentials certification body based in London and the fastest Cyber Essentials certification body in the UK. Order before midday and receive your Cyber Essentials Baseline certificate the same working day – typically within 6 hours. We assess organisations of all sizes for both Cyber Essentials Baseline (from £349) and Cyber Essentials Plus (from £1,499) under the NCSC-backed scheme. Fully transparent pricing with no hidden fees.

Cyber Essentials Pricing: Complete Breakdown

Understanding how much Cyber Essentials costs should not require a sales call. Fig publishes every price upfront with no hidden fees. Cyber Essentials Baseline is a self-assessed certification where you complete a questionnaire covering five core security controls. The cost ranges from £349 (micro, 1–9 employees) to £649 (large, 250+ employees). Cyber Essentials Plus adds an external technical verification and vulnerability scan, ranging from £1,499 to £4,499. Both certifications are valid for 12 months. All Fig pricing includes dedicated support, up to three rounds of structured feedback on your submission, and – for Baseline – same day certification for orders placed before midday. There are no additional charges for resubmissions, feedback, or certificate issuance.

Baseline from £349

Self-assessed certification covering five core controls. Certified in under 6 hours.

Plus from £1,499

Third-party verified with external vulnerability scanning. 1–3 working days.

No hidden fees

Every price is fully inclusive. No assessment fees, no consultancy charges, no add-ons.

Feedback included

Up to three rounds of structured feedback on your submission at no extra cost.

What is Cyber Essentials?

A UK government-backed cybersecurity certification scheme

Cyber Essentials is a UK government-backed cybersecurity certification scheme that validates an organisation has implemented five core security controls: firewalls, secure configuration, security update management, user access control, and malware protection. The Cyber Essentials v3.3 requirements (April 2026) introduced mandatory MFA for all user accounts in scope. Certification is required for UK government contracts involving sensitive data and is increasingly expected by private-sector supply chains. Whether you are a small business or a large enterprise, Cyber Essentials provides independently verified proof of your cyber hygiene.

There are two certification levels. Cyber Essentials Baseline is a self-assessed certification – you complete a questionnaire and an accredited assessor reviews your answers. Cyber Essentials Plus adds an external technical assessment including vulnerability scanning to independently verify your controls are working in practice. Both are valid for 12 months and both carry the NCSC badge.

Firewalls & internet gateways
Secure configuration
Security update management
User access control
Malware protection
MFA mandatory (v3.3)

How It Works

Four steps to Cyber Essentials certification with Fig

1

Choose and purchase

Select Baseline or Plus and your organisation size. Purchase directly online. No sales call required.

2

Complete the assessment

For Baseline, complete the self-assessment questionnaire. Our platform guides you through every question with clear, plain-English explanations.

3

Review and feedback

An accredited assessor reviews your submission. If anything needs correcting, we provide structured feedback up to three times – directly in the platform.

4

Receive your certificate

Once approved, your certificate is issued automatically. For Baseline orders before midday, this typically happens within 6 hours of submission.

Transparent Pricing

Cyber Essentials Baseline certification from £349. No hidden fees.

Micro (1-9)

£349

Small (10-49)

£449

Medium (50-249)

£549

Large (250+)

£649

View all pricing including Cyber Essentials Plus

Why Choose Fig

IASME-accredited certification body with the fastest turnaround in the UK

Fastest in the UK

Baseline certified in under 6 hours for orders before midday. No other IASME-accredited body matches this speed. Same day certification is the standard service – not a premium add-on.

Transparent pricing

Every price is published upfront. No hidden assessment fees, no consultancy charges, no mandatory add-ons. Baseline from £349, Plus from £1,499. What you see is what you pay.

IASME accredited

Fig is a fully IASME-accredited certification body authorised to assess organisations for both Cyber Essentials Baseline and Plus. The certificate is the same government-backed credential regardless of which body issues it.

3x structured feedback

If your submission needs corrections, Fig provides up to three rounds of structured, in-platform feedback. Each round identifies the specific controls that need attention and explains what to change.

v3.3 compliant

Fig assesses against the latest NCSC Cyber Essentials Requirements v3.3, effective April 2026, including the mandatory MFA requirement for all user accounts in scope.

Readiness checker

Use our free readiness checker to assess your position before purchasing. Identify gaps, understand the requirements, and go into your assessment prepared.

Frequently Asked Questions

Common questions about Cyber Essentials certification

How quickly can I get Cyber Essentials certified?+
With Fig, Cyber Essentials Baseline certification is typically completed within 6 hours for orders placed before midday. This is the fastest turnaround of any IASME-accredited certification body in the UK. Cyber Essentials Plus takes 1–3 working days due to the external technical verification requirement.
How much does Cyber Essentials cost?+
Cyber Essentials Baseline costs from £349 (micro, 1–9 employees) to £649 (large, 250+ employees). Cyber Essentials Plus costs from £1,499 to £4,499. All Fig pricing is fully inclusive with no hidden fees, no assessment charges, and no mandatory add-ons.
What is the difference between Cyber Essentials Baseline and Plus?+
Cyber Essentials Baseline is a self-assessed certification where you complete a questionnaire covering five core security controls. Cyber Essentials Plus adds an external technical audit including vulnerability scanning. Both certifications are valid for 12 months and carry the same NCSC badge.
Is Cyber Essentials mandatory?+
Cyber Essentials is mandatory for UK government contracts involving sensitive or personal data under PPN 014/21. It is also increasingly required by private-sector supply chains, insurance underwriters, and clients as evidence of baseline cybersecurity.
What are the five Cyber Essentials controls?+
The five controls are: firewalls and internet gateways, secure configuration, security update management (patching within 14 days), user access control, and malware protection. Under v3.3 (April 2026), multi-factor authentication (MFA) is mandatory for all user accounts in scope.

View all frequently asked questions

Have a Question?

Whether you need help choosing between Baseline and Plus, want to discuss multi-organisation pricing, or just have a question about the process – we are here to help. Submit an enquiry and a member of the team will respond within one working day.

No obligation – just honest guidance
Response within one working day
Multi-organisation and MSP pricing available

See Full Pricing

The UK's fastest Cyber Essentials certification – under 6 hours. From £349. IASME-accredited.