SME Cyber Starter Bundle

The SME Cyber Starter Bundle is for UK SMEs (10-50 staff) who have just been told by a customer, an insurer, or a public-sector buyer: "we need Cyber Essentials Plus before we can sign". Or who got their cyber-insurance renewal questionnaire and realised half the answers are guesses. What you get: Cyber Essentials readiness, assessed against your own domain rather than a form you fill in about yourself. The tool probes all five CE technical control themes from the outside and tells you where you stand: - Boundary firewalls — which ports are open and reachable from the internet - Secure configuration — TLS version, cipher strength, certificate issuer and expiry, security headers - Patch management — what your web-facing stack reveals about how current it is - Access control and malware protection — these two cannot be seen from outside, so the tool says so and asks you to attest to them. It does not guess, and it does not score you on evidence it does not have. You also get the evidence checklist and the assessment-day runbook: what your assessor will ask for, in the order they will ask. What this is not: it is not the certification. CE Plus assessor fees run £1,500-£8,000+VAT depending on device count, paid to a certification body, not to us. This gets you ready to sit the assessment without paying for a failed attempt. Phishing simulation and cyber risk scoring are sold separately — they are not included at this price and are not part of this bundle. Why this matters in 2026: most UK cyber insurers now require MFA, EDR, backups and Cyber Essentials as preconditions of cover. UK organisations under £20m turnover that achieve CE certification are also eligible for IASME-arranged cyber-liability insurance with 24/7 incident response.