Free self-assessment tool based on the NCSC Cyber Essentials Requirements v3.3. Check your readiness before formal certification.
A free, guided self-assessment against the NCSC Cyber Essentials Requirements v3.3 (April 2026). It walks you through the five core control categories, then returns an immediate readiness score with specific gap feedback - so you can fix issues before you pay for the formal assessment.
What we evaluate
Aligned to NCSC v3.3 (April 2026), including the mandatory MFA requirement on all in-scope user accounts.
What you get back
Plus specific gap feedback per control, so you can remediate before paying for the formal Cyber Essentials assessment.
Score, on the spot
Instant readiness percentage with per-control breakdown - no waiting for a written report.
Per-control gap analysis
Pinpoints exactly which questions you failed and why, against the v3.3 requirements.
Remediation guidance
Tells you what to fix before paying for the formal submission, in plain English.
Free to use
No payment and no obligation. We ask for basic contact details to deliver your results.
Based on v3.3
Aligned to the NCSC Cyber Essentials requirements including the MFA requirement effective from 28 April 2026.
Immediate results
Get your readiness score and gap analysis instantly - no waiting for a report.
10-15 minutes
Typically takes 10 to 15 minutes to complete, depending on organisation size.
All five controls
Covers firewalls, secure configuration, updates, access control, and malware protection.
Actionable feedback
Tells you exactly what to fix before your formal assessment.
Find out how prepared your business is for Cyber Essentials certification. Our free assessment takes about 10 minutes and covers five key security areas.
What you'll learn: Your readiness score, specific gaps in each security area, and next steps toward certification.
NCSC Cyber Essentials Requirements v3.3 (April 2026)
Two outcomes. Either the checker confirms you are ready to certify, or it returns a specific list of gaps to fix before you pay for the formal assessment.
If you pass
You are compliant across all five v3.3 controls. Proceed to checkout when you are ready.
If gaps are found
The checker tells you exactly what needs to change. Most organisations can remediate within a few days. Common issues:
Re-run as many times as you need
There is no limit on how often you can run the checker. Once you pass all five categories, proceed to certification. Fig Group provides up to three structured feedback rounds on your formal submission to help you pass on the first attempt.
Organisations that run the checker before paying for the formal assessment have a significantly higher first-time pass rate - same gaps surfaced, without the cost or time pressure of a failed submission.
Catches the same compliance gaps that would cause your formal IASME submission to fail - before any money changes hands.
You can fix issues at your own pace. The checker does not put your formal certification on a clock or risk a wasted assessment fee.
First-time certifications, organisations renewing after the v3.3 changes, and teams preparing for Cyber Essentials Plus where the technical bar is higher.
The readiness checker is completely free. We collect basic contact details to deliver your results and may follow up with relevant certification information. Your data is handled in accordance with our privacy policy.