Micro
1-9 employees
£299.99+ VAT
One-off · no recurring fee
- IASME-licensed certificate
- 6-hour SLA on compliant submissions
- 3 free re-submissions
- £25k cyber liability insurance
Cyber Essentials pricing, published. No games.
We publish every price. Cyber Essentials from £299.99 + VAT - below the standard IASME rate. Plus from £1,499 + VAT. No mandatory add-ons, no re-submission fees, no surprises.
Fig Group is an IASME-licensed Cyber Essentials certification body. Prices exclude VAT and are valid for UK organisations in 2026. Evidence behind every claim: /trust/claims.
Quick answers
The five things buyers ask before paying.
- How much does Cyber Essentials cost?
- From £299.99 + VAT for Micro (1-9 employees) to £549.99 + VAT for Large (250 - 9,999 staff). Organisations with 10,000+ employees fall into our Enterprise tier (custom quote; the standard turnaround SLA does not apply as IASME requires pre-certification checks). The cheapest IASME-licensed Cyber Essentials body in the UK.
- How much is Cyber Essentials Plus?
- £1,499 + VAT for Micro to £4,499 + VAT for Large. Includes the technical verification audit.
- Are there any hidden fees?
- No. Pricing is fully inclusive - no surprise assessment fees, consultancy charges, or mandatory add-ons.
- How fast is certification?
- 6 working hours for compliant submissions, or a full refund. The fastest in the UK.
- When does the new scheme apply?
- Cyber Essentials v3.3 took effect 28 April 2026. Every Fig Group certification supports it.
5.00 / 5· 13 Google reviews
Read what Fig Group customers say →Price benchmark
Below the standard IASME fee
We publish the comparison openly so you can verify it. Standard IASME fee versus Fig Group Micro, like-for-like.
Standard IASME fee
£320
Baseline body fee for a Micro organisation. + VAT.
Fig Group Micro
£299.99
£20.01 below the standard rate. + VAT.
Included at the lower price: same-day certification and three free re-submissions - no extra fees.
6 hours or your money back.Cyber Essentials returned in 6 working hours of compliant submission, or a full refund. Terms and evidence
Cyber Essentials · Self-assessed · 6-hour SLA
Pick the tier that matches your headcount
Priced by organisation size. The NCSC scheme defines size by total UK staff headcount, including part-time and contractors.
Small
10-49 employees
£399.99+ VAT
One-off · no recurring fee
- IASME-licensed certificate
- 6-hour SLA on compliant submissions
- 3 free re-submissions
- £25k cyber liability insurance
Medium
50-249 employees
£449.99+ VAT
One-off · no recurring fee
- IASME-licensed certificate
- 6-hour SLA on compliant submissions
- 3 free re-submissions
- £25k cyber liability insurance
Large
250 - 9,999 employees
£549.99+ VAT
One-off · no recurring fee
- IASME-licensed certificate
- 6-hour SLA on compliant submissions
- 3 free re-submissions
- £25k cyber liability insurance
Enterprise
10,000+ employees
6-hour SLA not applicable. Enterprise organisations require pre-certification checks from IASME before assessment, so the standard turnaround guarantee does not apply. We scope each engagement individually.
Custom quoteContact us
All prices exclude VAT. Every Fig Cyber Essentials tier sits below the standard IASME certification-body fee - see the comparison panel above for tier-by-tier savings.
Cyber Essentials Plus · Third-party verified · 1-3 days
Add a third-party technical audit
Cyber Essentials Plus is the third-party verified tier - an IASME-licensed assessor technically audits a sample of your devices on top of the self-assessed Cyber Essentials questionnaire.
What it adds
External device-sample audit
An IASME-licensed assessor remotely tests a sample of your devices against the v3.3 control set - verifying the controls you declared in the self-assessment.
How it is priced
By organisation size
Plus pricing is tiered by employee count, the same as Cyber Essentials. Single fixed fee per tier - no consultancy add-ons, no per-device charges.
How long it takes
1-3 working days for the audit
The Cyber Essentials prerequisite can clear in 6 hours when compliant. The Plus audit itself is scheduled with the assessor and normally completes in 1-3 working days.
Micro
1-9 employees
£1,499+ VAT
One-off · no recurring fee
- Everything in Cyber Essentials
- External vulnerability scan
- Remote technical audit
- 1-3 working days turnaround
Small
10-49 employees
£1,999+ VAT
One-off · no recurring fee
- Everything in Cyber Essentials
- External vulnerability scan
- Remote technical audit
- 1-3 working days turnaround
Medium
50-249 employees
£2,799+ VAT
One-off · no recurring fee
- Everything in Cyber Essentials
- External vulnerability scan
- Remote technical audit
- 1-3 working days turnaround
Large
250 - 9,999 employees
£4,499+ VAT
One-off · no recurring fee
- Everything in Cyber Essentials
- External vulnerability scan
- Remote technical audit
- 1-3 working days turnaround
Enterprise
10,000+ employees
1-3 day turnaround SLA not applicable. Enterprise organisations require pre-certification checks from IASME before assessment, so the standard turnaround guarantee does not apply. We scope each engagement individually.
Custom quoteContact us
What’s included
Every certificate ships with the same baseline
- IASME-licensed certification (our IASME accredited body ID is publicly listed).
- Three free submission reviews - you do not pay for re-submissions.
- Readiness checker included (free, no email wall).
- Six-hour certification guarantee for compliant submissions (or you don't pay).
- Full Cyber Essentials v3.3 coverage (including the 28 April 2026 MFA requirement).
- Dedicated assessor assigned to your submission.
- Certificate issued digitally; NCSC listing updated within 24 hours.
No hidden fees
What you will not be charged for
- ✕No mandatory consultancy charges.
- ✕No "scoping fee" or "pre-assessment" up-sells.
- ✕No charge for the readiness checker.
- ✕No surprise fees for re-submissions (three free).
- ✕No separate IASME line-item fee - our published price includes the certification cost.
IASME publishes a standard certification-body fee baseline by organisation size. Certification bodies still set their own customer price. Fig publishes below that baseline at every Cyber Essentials tier because our software-first workflow keeps assessment overhead low.
Pricing FAQ
The five questions buyers usually ask
How much does Cyber Essentials cost in the UK in 2026?
Cyber Essentials costs between £299.99 and £549.99 + VAT depending on organisation size. Cyber Essentials Plus costs between £1,499 and £4,499 + VAT. Prices above are Fig Group's 2026 published rates as an IASME-licensed certification body. See the Cyber Essentials Plus guide for scope and audit details.
Is Cyber Essentials cheaper through Fig Group than elsewhere?
Our Micro tier is £20.01 below the standard IASME fee - which is the scheme's own published baseline. Every tier under-cuts the standard certification body fee. We can do this because we operate a software-first assessment workflow rather than a consultancy-first model.
What happens if my submission fails?
You get three free re-submissions. Most certification bodies charge £100-£200 per re-submission; we don't. If you need more than three attempts you have a readiness issue - we'll work with you to fix it before re-submitting.
How fast is "6-hour certification"?
Six working hours from receipt of a compliant submission to certificate issue and NCSC listing update. If your submission needs edits we'll tell you immediately - the clock pauses while you fix it and resumes on re-submission.
Which tier do I need?
Pick by total UK headcount including part-time and contractors. If you're uncertain, run the free readiness checker - it asks nine questions and outputs your correct tier plus any gaps.
Other certifications
Defence Cyber Certification (DCC) pricing
For UK MOD supply-chain contracts that name a Cyber Risk Profile. Fig is IASME-licensed at Defence Cyber Certification Level 0 and Level 1. Defence Cyber Certification Level 0 is flat-priced from £999.99 + VAT (Micro) to £4,999.99 + VAT (Large). Defence Cyber Certification Level 1 is range-priced from £9,999 + VAT (Micro) to £49,999 + VAT (Large) because consultant-led remediation effort scales with organisation complexity. Cyber Essentials prerequisite included in both Defence Cyber Certification engagements.
Next step
Ready in 6 hours. Below the standard fee.
Pick your tier above, or talk to an assessor if you’re not sure.