† One free 30-day rescan included per CE Plus assessment. Subject to IASME’s 30-day remediation window and 90-day CE Plus window; IASME timelines take precedence.
// Why Vincent Cyber Defence
WHAT YOU GET AS STANDARD
GAP CHECK INCLUDED
We review your controls against the framework before you formally submit, identifying issues before they become a failed assessment.
DIRECT LEAD ASSESSOR
You deal with the assessor who certifies you from day one - not a support team, not an account manager.
GUIDED TO CERTIFICATION
We support you through to certification. If your submission needs work, resubmission support is included at no extra charge.
FIXED PRICE, EVERYTHING INCLUDED
What you see is what you pay. IASME certification fee included - no mandatory bundles, no platform access fees.
WORKS TO YOUR DEADLINE
Have a tender or contract deadline? We prioritise your assessment and build the timeline around your requirement.
FREE CYBER INSURANCE INCLUDED*
UK organisations under £20m turnover get free cyber insurance up to £25,000 through IASME - included with whole-organisation Cyber Essentials at no extra cost.
* Free cyber insurance is available to UK-registered organisations with annual turnover under £20m, certification scoped to the whole organisation. Subject to IASME insurance partner terms and conditions.
// Client Reviews
WHAT OUR CLIENTS SAY
Client names are withheld in line with confidentiality requirements; character references are available upon request.
// Pricing FAQ
PRICING QUESTIONS
Cyber Essentials costs from £320 + VAT for micro organisations (0-9 employees), £440 + VAT for small (10-49), £500 + VAT for medium (50-249), and £600 + VAT for large organisations (250+). These prices are set by IASME and include the certification fee in full - there are no hidden charges at Vincent Cyber Defence. Read our full CE pricing breakdown →
Yes. The prices shown for Cyber Essentials include the IASME certification fee, assessor review, guided submission support, certificate and digital badge, and UK-based support throughout. There are no mandatory add-ons and no platform access fees.
Organisation size is based on total number of employees across the whole organisation, using UK Government criteria: Micro (0-9), Small (10-49), Medium (50-249), Large (250+). This applies regardless of how many employees are in scope for the certification assessment.
UK-registered organisations with an annual turnover under £20 million that achieve Cyber Essentials covering their whole organisation are automatically entitled to free cyber insurance up to £25,000. This is provided through IASME in partnership with insurers and is included at no additional cost. Subject to IASME insurance partner terms.
Our process includes guided submission support before you formally submit, helping you identify and address issues in advance. However, if your submission is not compliant and a resubmission is required, there is no additional charge - we will support you through to certification at no extra cost. For CE Plus, if issues are found during the audit you have 30 days from the assessment start date to remediate and have your controls re-checked at no additional fee. IASME's 30-day remediation window and 90-day CE Plus window apply and take precedence.
Once your assessment application is opened, you have up to six months to complete and submit it. This gives you time to implement any required controls before submission. However, your certificate validity date runs from the date of certification - so the sooner you submit, the longer your certificate remains active. We recommend not delaying unnecessarily if your controls are already in place.
Once you pass Cyber Essentials basic, you have 90 days (3 months) from your CE certification date to complete and pass CE Plus - a separate and shorter window from the CE basic six-month assessment period. If issues are found during the CE Plus audit, you also have 30 days from the date the assessment started to remediate and have checks revisited. Both windows apply simultaneously, so it is important to start promptly and be well-prepared before the audit begins. If CE Plus is not passed within either window, the Plus application closes and you will need to re-certify at CE basic level before restarting - incurring an additional cost.
Yes. If you have an urgent requirement - a tender closing date, a contract requirement, or a client deadline - contact us and we will work backwards from your deadline to prioritise your assessment. Get in touch as early as possible to give us the best chance of meeting your timeline.
Cyber Essentials Plus starts from £1,195 + VAT for micro organisations (0-9 employees), £1,495 + VAT for small (10-49), £2,195 + VAT for medium (50-249), and £3,495 + VAT for large organisations (250+). All prices include the IASME certification fee and are quoted as a fixed price with no hidden charges. Read our full CE Plus pricing breakdown →
CE Plus pricing includes the self-assessment questionnaire, independent technical audit, external vulnerability scanning, device configuration checks, CE Plus certificate and badge, IASME public register listing, full technical report, Pre-Assessment Check (a separate controls review before the formal audit, included as standard) and audit readiness checklist, and one free 30-day rescan to verify fixes (IASME timelines apply). Pricing is fixed per organisation size band - the price shown is the price you pay, with no hidden charges.
A Pre-Assessment Check is included as standard with all CE Plus assessments - there is no additional charge. Before your formal audit begins, we review your controls against CE Plus requirements, identify any gaps, and give you the opportunity to remediate - reducing the risk of a failed assessment.
Contact us to discuss renewal pricing. Returning clients benefit from a smoother, faster process as we already understand your environment - which typically means less time and a more streamlined assessment.
Yes. If you purchase Cyber Essentials and Cyber Essentials Plus together as a bundle, a fixed bundle saving is applied to the combined price. Bundle totals: Micro: £1,439 + VAT (save £76), Small: £1,838 + VAT (save £97), Medium: £2,560 + VAT (save £135), Large: £3,890 + VAT (save £205). Contact us when enquiring and we will apply the bundle saving to your quote.
DCC Level 0 costs from £649 + VAT for micro organisations (0-9 employees), £899 + VAT for small (10-49), £999 + VAT for medium (50-249), and £1,199 + VAT for large organisations (250+). These prices assume Cyber Essentials is already held. If CE is also needed, add CE as part of the same engagement - bundle pricing applies from £921 + VAT for micro (save £48). IASME certification fee included. Use the quote builder above to get an instant itemised estimate.
DCC Level 0 pricing includes the IASME certification fee, CE prerequisite support, guided self-assessment questionnaire, independent technical audit (Def Stan 05-138 assessed), IASME-issued DCC Level 0 certificate and digital badge, public IASME registry listing, audit readiness checklist, and UK-based assessor support. The certificate is valid for 3 years with annual CE recertification and annual attestation required.
Penetration testing is priced on a fixed-fee basis following a scoping call. Pricing starts from £1,499 + VAT and depends on scope, test type, and number of assets. A free 30-day retest is included as standard with every engagement. Contact us with your scope and we will provide a fixed-price quote - no obligation. Read our full pen test pricing guide →
With the bundle saving applied, the combined cost of Cyber Essentials and Cyber Essentials Plus is: Micro (0-9): £1,439 + VAT (save £76 vs buying separately), Small (10-49): £1,838 + VAT (save £97), Medium (50-249): £2,560 + VAT (save £135), Large (250+): £3,890 + VAT (save £205). IASME certification fees included in both prices. Use the quote builder above for an instant itemised breakdown and to send a copy to your inbox.
If you need both Cyber Essentials and DCC Level 0 as part of the same engagement, a bundle saving is applied: Micro (0-9): £921 + VAT (save £48 vs buying separately), Small (10-49): £1,272 + VAT (save £67), Medium (50-249): £1,424 + VAT (save £75), Large (250+): £1,709 + VAT (save £90). IASME certification fees included in both prices. Both certifications are managed as a single engagement -CE first, then DCC Level 0 once certified.
Most certification bodies do not publish their prices - you have to request a quote before seeing any figure. Vincent Cyber Defence shows all prices upfront so buyers can compare and budget without making contact first. Every price shown is the fixed price you pay, with the IASME certification fee included. There are no hidden charges, no mandatory add-ons, and no platform access fees.
// Verified Credentials
IASME APPROVED CERTIFICATION BODY
Our accreditations are publicly verifiable. Vincent Cyber Defence is authorised by IASME - the UK Government-appointed scheme owner - to assess and certify organisations for Cyber Essentials, Cyber Essentials Plus, and DCC Level 0. These are not self-declared - every badge below links to our live entry on the IASME public registry.
Hover each badge to verify our accreditation status directly on the IASME registry
READY TO GET STARTED?
Talk to our UK-based team. Fixed prices, no hidden fees, no hard sell.