Penetration testing for Cyber Essentials Plus.
Cyber Essentials Plus includes a hands-on technical check, carried out by a Cyber Essentials certification body. Where our testing helps is before and beyond it: a penetration test finds the gaps a real attacker would use, so you go into your CEP assessment with no surprises, and it goes deeper than CEP requires. And if you need the certification itself, you can now get Cyber Essentials and Cyber Essentials Plus through us, delivered by our trusted certification partner.
What Cyber Essentials Plus asks for.
Independent testing is a big part of how you satisfy it. On the testing side, this is what the process expects.
- A hands-on technical verification, performed by a CE certification body
- Patching, secure configuration, access control and malware protection in place
- Systems that stand up to common, internet-based attacks
Who does what.
A penetration test is one piece of the picture. Here is the clean line between the testing we do and the certification a separate, independent party provides.
We do the testing
- A penetration test that finds the gaps before your CEP assessment
- Testing that goes deeper and wider than CEP requires
- Prioritised fixes so your assessment holds no surprises
- A same-day fixed quote for the certification itself, delivered by our trusted certification partner
They do the rest
- Leads you through the Cyber Essentials Plus assessment and issues the certificate
- Arranged through us, or a certification body you already use
* The free retest applies to external infrastructure, web application and API, and mobile application engagements, and covers the critical and high findings on those parts of the scope. One retest per engagement, requested within 30 days of the original test and delivered remotely, excluding on-site costs. UK-based engagements only. See our terms for full details.
Want the certification itself, not just the testing? Cyber Essentials certification through All-Secure
Cyber Essentials Plus, answered.
Straight answers to what clients ask most.
Can you certify us for Cyber Essentials Plus?
Yes, through us. Our trusted partner, an accredited IASME-licensed certification body, leads you through the assessment and issues the certificate; All-Secure scopes it, quotes a fixed price the same day and makes the introduction, with penetration testers on hand if anything is flagged. This page covers the deeper testing around CEP; see our Cyber Essentials service page for the certification itself.
Do we still need CEP if we have a penetration test?
They do different jobs. CEP is a baseline certification that customers and frameworks ask for; a penetration test is deeper assurance. Many organisations do both, and a pen test is a good way to prepare for a smooth CEP assessment.
Will a pen test help us pass CEP?
It gives you the best possible chance. We find the patching, configuration and access-control gaps a CEP assessor would flag, so you can fix them before the assessment rather than during it.
Need a pen test for Cyber Essentials Plus?
Tell us where you are in the process and who is asking. We will come back within one working day with a suggested approach and a fixed-price scope, with no sales theatre.