Start with primary sources
BrightCert guidance is checked against current NCSC requirements and IASME scheme information. We link to those sources so you can verify important claims yourself.

About BrightCert
Muhammad built BrightCert after seeing UK small businesses struggle to translate Cyber Essentials requirements into a clear plan. The product guides an organisation through 60 plain-English questions, identifies likely gaps and produces a prioritised readiness report.
BrightCert is operated by Cognumi Ltd. It is a preparation tool, not a Certification Body. Official Cyber Essentials certification is issued only through an IASME-licensed Certification Body.
Credentials are included to show who reviews BrightCert's public guidance. They do not make BrightCert an official Certification Body.
Methodology
The aim is simple: make the scheme easier to act on without pretending readiness software can replace an official assessor.
BrightCert guidance is checked against current NCSC requirements and IASME scheme information. We link to those sources so you can verify important claims yourself.
The assessment turns technical requirements into questions a business owner or operations manager can answer, while keeping the five official control areas intact.
Your answers produce a readiness score and prioritised findings. They are preparation guidance, not an assessor's certification decision.
Public guidance is founder-reviewed when the Cyber Essentials question set, requirements or official pricing changes.
Our Cyber Essentials guides cite NCSC and IASME sources and show when they were last reviewed. Start with the plain-English overview, then use the free assessment when you want a view of your own readiness.