Malwise Cyber Ltd is a licensed IASME certification body for Cyber Essentials and Cyber Essentials Plus.
In plain terms: Cyber Essentials is the UK government-backed certification scheme, overseen by the National Cyber Security Centre. IASME runs the scheme on the government’s behalf, and only certification bodies licensed by IASME can assess and certify organisations against it. Malwise holds that licence for both levels.
We assess anywhere in the UK. Standard assessments are done remotely, and Cyber Essentials Plus is routinely delivered remotely too, with the technical testing carried out over screen sharing in an agreed window. Where an on-site assessment is preferred, we offer that nationwide as well. Being based in Salisbury simply makes the in-person option easiest for businesses across Wiltshire and the South West.
The two levels
Cyber Essentials is a verified self-assessment against five technical control themes: firewalls, secure configuration, security update management, user access control, and malware protection. You answer the question set, a board member or equivalent signs to confirm the answers are true, and a licensed assessor marks it. Many government contracts require it, insurers increasingly ask for it, and supply chain questionnaires treat it as the minimum.
Cyber Essentials Plus adds independent technical verification. An assessor tests a sample of your systems: vulnerability scans, malware protection checks, email and browser tests. For businesses supplying defence, government or any security-conscious customer, Plus is increasingly the level that gets asked for.
One warning: the bar has risen. The scheme moved to version 3.3 (“Danzell”) in April 2026, and several gaps that were once survivable are now automatic failures. We wrote up the five things that most commonly fail an assessment so you can check yourself before you book anything.
How it works
Wherever you are in the UK, you deal with a named assessor, not a portal and a ticket queue. Most businesses go straight to assessment:
- Self-check. The question set is public and so are the requirements: the official Cyber Essentials Requirements for IT Infrastructure v3.3 sets out exactly what is expected, and our preparation guide walks through it in plain English.
- We assess. Remotely or on site, as suits you. For Plus, we agree the testing window and walk you through what happens on the day.
- Certification and a verifiable digital badge, usable with customers, insurers and tender panels the same day you pass.
Where you want more than that, two options, priced above: the self-assessment support package, where we work through the question set with you so every answer is right first time, and a technical pre-assessment, where we test your controls before the real thing so assessment day holds no surprises. For complex estates, and for medium and large Plus pricing, we scope before we quote.
No retainers, no lock-in, no upsell. If a gap needs fixing first, we tell you plainly what it is.
What it costs
Full pricing, published. The Cyber Essentials fee is set by IASME and is identical at every certification body. Cyber Essentials Plus pricing is set by each certification body. Ours:
| Organisation size | Employees | Cyber Essentials | Cyber Essentials Plus |
|---|---|---|---|
| Micro | 0 to 9 | £320 + VAT | £1,195 + VAT fixed |
| Small | 10 to 49 | £440 + VAT | £1,450 + VAT fixed |
| Medium | 50 to 249 | £500 + VAT | from £1,750 + VAT |
| Large | 250 or more | £600 + VAT | from £2,500 + VAT |
Plus requires a passing Cyber Essentials certificate, so both fees apply. Fixed means fixed. The “from” prices depend on the size and spread of the estate, which we scope before quoting.
Where you want support before or during certification, that is published too:
| Optional support | Price |
|---|---|
| Self-assessment support package | £250 + VAT |
| Technical pre-assessment | from £995 + VAT |
Certifying your whole organisation also includes £25,000 of cyber liability insurance at no extra cost, for UK organisations under £20 million turnover.
For the full cost breakdown, see our Cyber Essentials pricing guide.
Get started
If Cyber Essentials is on your horizon, because a customer asked, a tender demands it, or you want the fundamentals independently confirmed, get in touch or read about our Cyber Essentials service. A short conversation will tell you what the path looks like and whether you would pass today, wherever in the UK you are.