Specialist

Cyber Essentials

UK government-backed security standard with free guidance and low-cost certification.

Visit site ↗Pricing ↗

Strong choicePractical, low-cost UK scheme that is widely recognised by funders.

See how Cyber Essentials fits your setup. Add the tools you already use.

Price

Free plan · paid from £320 + VAT (certification, micro organisations)

Nonprofit offer

None found

Available in

🌍AnywhereBuilt for United Kingdom 🇬🇧UK government scheme; bundled insurance is UK only

Suits

Volunteer-run · Small · Medium · Large

Great for

UK charities whose funders or contracts ask for proof of cyber security
Organisations that want a clear checklist of basic protections
Recognised UK standard
Free guidance available
Fixed, published starting fee

Watch out for

Organisations outside the UK
Groups that only want a quick tool; this is a process with an assessment
Takes staff time to prepare
Cost rises with organisation size and certification body choice
UK only

Problems it solves

“Our funder wants proof of cyber security”“How do we show we are protecting beneficiary data?”“We want a simple checklist of what to fix first”“Is there a government-backed security certificate for charities?”

About Cyber Essentials+

Cyber Essentials is a UK government-backed scheme, developed by the National Cyber Security Centre and delivered by IASME, that covers five basic technical controls: firewalls, secure configuration, security updates, user access control and malware protection. Charities can use the free NCSC guidance to improve, and can pay to be certified. Certification is a scheme rather than a tool, but it is often what funders and commissioners ask to see.

Pricing: The NCSC and IASME offer free resources, including assessment question sets, a readiness tool, a Knowledge Hub and 30-minute consultations for small and medium organisations. Certification fees (IASME base fee) are reported as £320 + VAT for micro organisations (0 to 9 staff), £440 for small, £500 for medium and £600 for large organisations; certification bodies may charge more, and Cyber Essentials Plus (independent testing) is quoted. The £320 figure is on the NCSC page; the other bands come from a search summary of IASME's FAQ.

Key features+

Five technical controls: firewalls, secure configuration, update management, access control, malware protectionSelf-led or supported route to certificationFree readiness tool and question setsCyber Essentials Plus adds independent testing

Data & privacy+

Not a software product. The scheme covers your own devices, networks and accounts.

How sure are we?+

Partly confirmed on the vendor's pages; some details from reputable secondary sources. Prices and nonprofit programs change often, so check with Cyber Essentials before you commit. Rankings on Nonprofit Tools are never for sale.

Sources · last checked 2026-10-02