You're not sure where you stand
You know Cyber Essentials matters, but you don't have a clear view of how close your business is to being ready.
BrightCert guides UK SMEs through a plain-English readiness assessment, highlights what needs attention, and creates a practical report before you apply for certification.
Does everyone in your business have their own login account?
Powered by
The problem
For many small businesses, Cyber Essentials starts with a simple goal: prove your organisation takes cyber security seriously. But preparation quickly becomes confusing, and that uncertainty leads to delays, guesswork, or expensive consultancy before you even understand the gaps.
You know Cyber Essentials matters, but you don't have a clear view of how close your business is to being ready.
Firewalls, secure configuration, access control, patching: important, but rarely explained in a way SMEs can act on quickly.
Many businesses only find out what needs fixing after paying for external help. You deserve the picture first.
A score alone is not enough. You need a practical list of what to fix, why it matters, and what to do next.
The solution
BrightCert turns preparation into a guided, step-by-step process. Answer simple questions about your organisation, devices, users, software and security controls: BrightCert analyses your responses across the five control areas and gives you a readiness score, plain-English gap findings, and prioritised remediation steps.
Every requirement translated into language a business owner can answer.
Your answers are scored across all five Cyber Essentials control areas.
Know what to fix first, why it matters, and how to evidence it.
How it works
A guided assessment across the five Cyber Essentials control areas. Every question written in plain English, with helpful context where you need it.
~2 hours · save & return anytimeBrightCert analyses your answers and scores your organisation across the core Cyber Essentials areas, instantly.
Scored out of 100See where your business may fall short, with clear explanations and practical next steps: no auditor-speak.
Plain-English findingsPay £99 including VAT with code FOUNDING10 when you're ready — a £100 founding discount from £199, for the first 10 customers — and unlock detailed gap analysis, remediation actions and a preparation summary.
PDF · shareable with your teamSee it working
A full run through the four steps above: answering the questions, the analysis, and the report that comes out the other end.
What we check
Cyber Essentials focuses on five technical control areas that protect organisations from common internet-based threats. BrightCert structures your assessment around exactly these five areas: 60 questions in total.
Whether your business has suitable protection between your internal systems and the internet: the first line of defence against external attack.
Whether devices, systems and software are configured securely before they are used: removing default passwords, unneeded accounts and services.
Who has access to your systems and whether permissions are appropriate: unique accounts, least privilege, and proper joiners and leavers processes.
Whether your devices are protected from malware and unsafe applications: active anti-malware, application allow-listing and safe defaults.
Whether software and devices are kept updated against known vulnerabilities: patching within 14 days for critical and high-risk updates.
Your report
Your BrightCert report gives you a structured view of your Cyber Essentials readiness: understand your position, share findings with the right people, and work through improvements before applying for official certification.
Your readiness score, strongest areas, and main risks.
Performance across each Cyber Essentials control area.
Where your current setup may not meet expected requirements.
Recommended fixes, ordered by importance.
Guidance before working with a Certification Body.
Save it, share it, review it with your team.
Complete the assessment first. Unlock the report for £99 including VAT with code FOUNDING10 — a £100 founding discount from £199, for the first 10 customers.
4 gaps to close before you apply: 2 are quick fixes your team can do this week.
Pricing
Start with a guided readiness assessment. Upgrade only when you need ongoing monitoring, CE Plus preparation, or partner features.
Best for UK SMEs preparing for Cyber Essentials who want a clear view before applying.
£99including VAT
Code FOUNDING10 · £100 off £199 · first 10 customers
Pay nothing until you unlock your report
£99/month
Ongoing visibility after your initial readiness report.
Coming soon£499one-time
Preparation for Cyber Essentials Plus before technical testing.
Coming soon£299/month
For MSPs supporting multiple UK SME clients.
Coming soonWhy BrightCert
Traditional consultancy can be valuable for complex organisations. But most SMEs first need an answer to a simpler question: are we ready, and what do we need to fix?
✕You may not know where to begin
Start with a guided assessment
✕Technical language can slow you down
Questions written in plain English
✕You may pay for advice before knowing the gaps
See your readiness position first
✕Findings scattered across emails or calls
Get a structured PDF report
✕Teams may not know what to fix first
Receive prioritised remediation steps
✕Progress can feel unclear
Track score, status and next actions
Who it's for
Show customers, suppliers and partners you take cyber security seriously, without a large internal IT team.
You've been asked to prepare for Cyber Essentials and need a structured way to collect answers, spot gaps and organise next steps.
You support clients who need Cyber Essentials preparation and want a repeatable way to assess readiness before formal application.
You're bidding for work where Cyber Essentials is expected or required, and need to know whether your business is ready.
BrightCert is careful about what it does, and what it doesn't do. We help you prepare for Cyber Essentials by assessing readiness, identifying gaps and creating a practical report. We do not issue the official certificate. Official certification is handled through IASME-licensed Certification Bodies.
Readiness assessment, not official certification

Founder, BrightCert · Cognumi Ltd
Founder's note
“I started BrightCert after watching UK small businesses stall out on Cyber Essentials. Not because the technical controls are hard, but because the preparation process is opaque and the language is written for auditors, not business owners.”
My background is in cybersecurity research. I hold a Master's degree in Cyber Security with Advanced Research from the University of Hertfordshire, awarded with distinction. My thesis compared the Nessus and OpenVAS vulnerability scanners on Ubuntu web servers. I also hold certifications in Digital Forensics, Ethical Hacking and Network Defense from EC-Council, alongside Fortinet's Cybersecurity Fundamentals and Huawei's HCIP in Routing & Switching.
Outside BrightCert, I run Cognumi, building AI-managed operations and security-focused automation for service businesses. BrightCert brings that same approach, plain-English analysis backed by real security research, to Cyber Essentials preparation.
FAQs
Everything UK SMEs usually want to know before starting their readiness assessment.
No. BrightCert provides readiness assessment and preparation support. Official Cyber Essentials certification must be completed through an IASME-licensed Certification Body.
No. You can complete the full assessment first. The report unlock is £99 including VAT with code FOUNDING10 — a £100 founding discount from the standard £199 price, limited to the first 10 customers.
Most businesses complete the assessment in around 2 hours. You can save your progress and return at any time.
Yes. BrightCert explains Cyber Essentials preparation in plain English. You do not need to be a cyber security expert to complete the assessment.
Yes. Your assessment responses are stored securely and used only to generate your readiness report. We don't sell your data or use it for marketing. See our Privacy Policy for the specific processors involved, including the Gemini API that powers the analysis.
Cyber Essentials is a self-assessed questionnaire reviewed by a Certification Body. Cyber Essentials Plus adds external technical verification. BrightCert supports preparation for both, with specific CE Plus guidance in the CE Plus Pack.
Ready when you are
Complete your Cyber Essentials readiness assessment, review your score, and unlock a practical report showing exactly what to fix next.