Cyber Essentials cost UK 2026: what businesses actually pay

The official self-led Cyber Essentials assessment starts at £320 + VAT for micro organisations. Current bands are £320 for 0–9 employees, £440 for 10–49, £500 for 50–249 and £600 for 250+.

Why provider prices can be higher

A certification body may bundle guidance, readiness work, assessor support, re-tests or remediation. That is why a supported package should not be compared as if it were the bare assessment fee.

Cyber Essentials Plus

Plus is quoted according to the size and complexity of the environment. In the September 2026 public-price sample used by this site, 11 headline/from prices ranged from £1,150 to £3,375, with a median of about £1,500. This is a mixed-scope sample, not a tariff or guaranteed quote.

What to ask before buying

• Does the price include the underlying CE certificate if you do not already hold one?
• What happens if remediation is required?
• Are re-tests included?
• Is the audit remote, onsite or mixed?
• What scope assumptions are built into the quote?

Official references: NCSC Cyber Essentials overview and NCSC requirements/resources.