UK pricing in pounds
Cyber Essentials Plus Cost Calculator
Written and reviewed by the Cost of Compliance editorial teamLast reviewed: October 2026
Estimate the cost of Cyber Essentials Plus using UK certification fees and assessor rates. The range includes the required Cyber Essentials assessment, technical testing, preparation and an optional retest allowance.
Your organisation
The official Cyber Essentials fee uses employee bands.
More devices usually mean a larger technical sample and more assessor time.
Choose the closest description of your five technical controls.
Published UK fees are normally quoted before VAT.
Estimated Cyber Essentials Plus cost
£4,181 – £11,726
35 employees · 60 devices · VAT included
| Cost line | Low | High |
|---|---|---|
| Cyber Essentials assessmentThe official IASME fee is set by employee count. A current Cyber Essentials pass is required before the Plus assessment. | £440 | £440 |
| Certification body and technical assessor1.7 estimated assessor days at an indicative UK rate of £700 to £1,250 a day. Plus prices are set by each certification body. | £1,194 | £2,132 |
| Preparation and remediation support2 to 5 consultant days for device sampling, control checks and fixing gaps before the assessment. | £1,400 | £6,000 |
| Retest allowanceAn allowance for one further assessor visit if technical checks fail and need to be repeated. | £450 | £1,200 |
| VAT at 20 percentShown for budgeting. A VAT registered business may be able to reclaim this amount. | £697 | £1,954 |
| Total estimated certification cost | £4,181 | £11,726 |
What the estimate includes
Cyber Essentials Plus is not a separate control framework. You first pass the Cyber Essentials questionnaire, then a licensed certification body checks a sample of devices and verifies the controls in practice. The official Cyber Essentials fee is £320 to £600 plus VAT, depending on employee count. IASME sets that fee nationally.
The Plus assessment has no fixed national price. Each certification body sets its own fee after considering staff, devices, sites and the technical sample. Published UK prices begin around £1,150 plus VAT for a small and prepared organisation. Larger or more complex assessments can reach £4,500 plus VAT, and unusual scopes can cost more.
Assessor day rates and preparation
The model uses an indicative technical assessor rate of £700 to £1,250 a day. One day may be enough for a small organisation with a simple device estate. Several days may be needed when the sample covers more operating systems, office locations or server types.
Preparation is shown separately because it is not certification. It can include checking firewall settings, supported software, administrator access, malware protection and update status before the assessor arrives. A team that is already ready may need almost no outside help. A team starting from scratch may need several consultant days and internal remediation work.
VAT and renewal
UK certification bodies normally quote fees before VAT. The VAT switch adds 20 percent for cash budgeting. A VAT registered organisation may be able to reclaim it. Cyber Essentials and Cyber Essentials Plus are renewed every year, so treat this as an annual cost rather than a permanent certificate.
The range is deliberately wide and is not a quote. Ask a licensed body whether its price includes the Cyber Essentials fee, travel, preparation, remediation and retesting before comparing offers. For a larger management system programme, read the UK ISO 27001 cost guide.