Score and verdict
Know exactly where you stand.
Rated against all five Cyber Essentials controls, with automatic fails flagged first.
Cyber Essentials. Sorted.
Simple questions about how you run your IT. A clear score. Step-by-step fixes for the apps you actually use.
- No passwords asked
- Runs in your browser
- Built on NCSC Cyber Essentials v3.3
For UK businesses and charities with up to 250 staff. Free to start, full report from £79. See pricing
0out of 1,000
Sample Brightlock Cyber Score
Good. Two fixes to go.
- Firewalls Met
- Secure settings Check
- Security updates Met
- User access Fix this week
- Malware protection Met
- UK GDPR basics Check
Clients, insurers and councils now ask for Cyber Essentials. The official questions are written for IT people. We wrote them for you.
The risk is real. So is the reward.
What the UK government's own research says about small businesses and cyber security.
43%
of UK businesses reported a cyber breach or attack in the last 12 months.
Cyber Security Breaches Survey 202638%
were hit by phishing, the most common attack by far.
Cyber Security Breaches Survey 202692%
less likely to make a cyber insurance claim with Cyber Essentials in place.
National Cyber Security Centre33%
of contracts signed by certified businesses last year required Cyber Essentials.
Cyber Essentials impact evaluation50plain-English questions in the full report
5Cyber Essentials controls checked
4ready-made policies for your business
10industry versions, from cleaners to clinics
Three steps. No jargon.
From not sure to ready to apply, at your own pace.
Answer simple questions.
About your devices, logins, updates and customer data. "Not sure" is a fine answer.
Get your score.
A score out of 100 and a clear verdict. Anything that would fail you outright goes straight to the top.
Fix it, then get certified.
Tick off step-by-step fixes, re-check every quarter, and apply when you're ready.
User access · Question 4 of 10
Is two-step verification turned on for your business email?
Yes
No
Not sure
Your results
68
out of 100 · Nearly ready
FirewallsMet
Secure settingsCheck
Security updatesMet
User accessFix
MalwareMet
Your action plan · 2 of 4 done
Turn on two-step verification for every Microsoft 365 user
Change the router's factory admin password
Switch off auto-run for USB sticks
Publish a privacy notice on your booking form
Has a client asked for Cyber Essentials?
Contracts, tenders and insurers increasingly ask for it. Here's your route from "they asked" to certified.
- Take the free checkSee roughly where you stand and what's missing.2 minutes
- Get your full reportAll five controls checked, with a clear verdict and action plan.About 15 minutes
- Make the fixesStep-by-step instructions for the apps you use. Most are settings changes.At your own pace
- Apply and get certifiedWe point you to an IASME-licensed certification body when you're ready.When your report says ready
See it work.
Flip the switches to match your business and watch your score change.
A simplified demo. The full assessment checks 40 requirements.
0out of 100
At risk
Turn on two-step verification and automatic updates first. Without them you'd fail Cyber Essentials outright.
Free tools. No sign-up.
Useful on their own. Even better with your free health check.
Email spoofing check
Could someone send email as you?
Enter your domain and see in seconds whether criminals could fake your emails.
Check my domain Spot the scamCan you catch the fakes?
Six realistic emails and texts. A two-minute game your whole team can play.
Play now Renewal reminderNever let your certificate lapse.
Tell us your expiry date and we'll remind you in time to renew.
Set a reminder Device checkerAre your devices still supported?
Windows 11 24H2 Home and Pro lost support on 13 October 2026. Check every computer and phone in a minute.
Check my devices Do I need it?Do you need Cyber Essentials?
Six questions about your contracts and customers, and a clear answer in a minute.
Find out Cost calculatorWhat will it really cost?
The certificate fee plus any device upgrades, totalled for your business.
Work it outEverything you need. Nothing you don't.
Fixes for your apps
Steps that name the real settings.
Microsoft 365, Google Workspace, Shopify and the other tools you use.
Action plan
Tick it off as you go.
Every fix sorted into this week, this month and before you apply.
Policy pack
Your paperwork, written for you.
Privacy notice, data breach plan, password policy and leaver checklist.
Quarterly re-checks
Stay ready all year.
Fresh questions every quarter and your score tracked over time.
Built for your industry
Checks for the risks you face.
From client key codes for cleaners to patient records for clinics.
Why not do it yourself?
You can. Here's how the options compare.
| Feature | Brightlock Cyber | Official questions alone | IT consultant |
|---|---|---|---|
| Cost | From £79 | Free to read | Typically from £200 |
| Written in plain English | Yes | Written for IT people | Depends on the consultant |
| Step-by-step fixes for your apps | Yes | No | Yes |
| Tells you if you're ready to apply | Yes | No | Yes |
| Policy templates included | With report and policies | No | Sometimes, extra cost |
| Quarterly re-checks | With Stay ready | No | Extra cost |
| Start today | Yes | Yes | Book an appointment |
Simple pricing.
Start free. Pay once for your report, or stay covered all year.
Readiness report
£79
Full assessment with a score out of 1,000, verdict, action plan and step-by-step fixes. One-off.
Start nowMost complete
Report and compliance pack
£129
The full report, a compliance pack of policies, registers and records written for your business, and the tender pack. Worth £178. One-off.
Start nowStay ready
£19 / month
Billed monthly. Or pay yearly and get 2 months free.
Quarterly re-checks, a readiness certificate renewed every quarter, progress tracking and fix reminders. Cancel any time.
Add to my reportTender packReady-written answers to the security questions in contract tenders and cyber insurance forms, based on your report. Add it to your report
£49One-off
PHP code checkFind the security flaws hackers use in your website's PHP code, with a fix for each. Unlimited checks, cancel any time.
£19a month
Refer a businessRecommend Brightlock to another business and you both get £10 off.
£10Launching soon
| Feature | Health checkFree | Readiness report£79 | Report and compliance pack£129 |
|---|---|---|---|
| Quick score and top gaps | ✓ | ✓ | ✓ |
| Brightlock Cyber Score out of 1,000 and verdict | – | ✓ | ✓ |
| Automatic-fail checks and domain checks with fixes | – | ✓ | ✓ |
| Prioritised action plan and step-by-step fixes | – | ✓ | ✓ |
| 30-day recovery plan | – | ✓ | ✓ |
| Readiness certificate and score badge | – | ✓ | ✓ |
| Compliance pack: policies, registers and records | – | – | ✓ |
| Tender pack and insurance form answers | – | – | ✓ |
Add Stay ready to any report for £19 a month, or £190 a year with 2 months free: quarterly re-checks and a readiness certificate renewed every quarter.
See a full sample report before you buy. Cyber Essentials certification itself is a separate fee, paid to the certification body you choose.
Rather not do it alone? We'll help.
From £99
Fix session
A one-hour video call where we work through your most urgent fixes with you, screen by screen.
Book a session £149Certification check
We review your Cyber Essentials answers before you apply, so you don't pay the fee twice.
Get your answers checked Free during early accessStaff training
Six short lessons on phishing and fake invoices, a quiz, and a certificate for every member of staff.
Start the trainingWe practise what we preach.
No passwords, everWe never ask for your passwords or access to your systems.
Your answers stay with youThe free health check runs in your browser. Nothing is sent unless you ask us to email your results.
No tracking cookiesNo advertising trackers follow you around this site.
Built on official standardsNCSC Cyber Essentials v3.3 and ICO guidance for small businesses.
Accountant, IT provider or insurance broker? Partner with us.
See the partner programmeQuestions.
Straight answers. Can't see yours? Our help centre answers 31 more.
Is this Cyber Essentials certification?
No. We get you ready for it. Certification is issued only by an IASME-licensed certification body, and we'll point you to one when your report says you're ready.
Do I need to be technical?
No. Every question and fix is in plain English, and the steps name the exact settings in the apps you use.
What happens to my answers?
The free health check runs in your browser and your answers stay on your device, unless you ask us to email your results. We never ask for passwords. See our privacy policy.
Is Brightlock right for my size of business?
Brightlock is built for sole traders, small and medium businesses and charities with up to 250 staff. Larger organisations usually need Cyber Essentials Plus and hands-on support from a certification body.
Why re-check every quarter?
Staff change, devices age and new updates arrive. Certification lasts a year, so regular checks keep you ready to renew.
What if I don't know an answer?
"Not sure" is a fine answer. We'll show you how to find out, and treat it as something to check.
How long does it take?
The free check takes about 2 minutes and the full report about 15. Most fixes are settings changes you can make at your own pace.
What does certification itself cost?
The certificate is paid to the certification body: from £320 plus VAT for up to 9 staff, more for bigger organisations. Our cost calculator totals it for you.
What's in the compliance pack?
A privacy notice, data breach plan, password policy, leaver checklist and the other registers and records a small business needs, written for your business from your answers.
The monthly UK scam alert.
One short email a month on the scams hitting UK small businesses right now, and how to stop them. Free.
Find out where you stand.
Ten questions. Two minutes. Free, with no sign-up.
Take the free health check