Skip to content
New for 2026: what's changed →

Turn Cyber Essentials into
a to-do list you can finish.

Plain questions about your business, a clear list of what to fix, and your policies written for you.

About 10 minutes. No card needed.

Silent product demo: the ReadyCert readiness check asks plain-English questions, translates them back to the official wording, and shows a readiness picture across the five Cyber Essentials controls with a red auto-fail flagged first.

Nobody should need a consultant to answer questions about their own business.

The Cyber Essentials questionnaire is written for assessors. It asks about “in-scope end-user devices” and “multi-factor authentication on cloud services” — perfectly clear if that's your job, and completely opaque if you run a plumbing firm and a client has just asked for a certificate.

So most small businesses do one of two things. They pay someone hundreds of pounds to translate it, or they guess, submit, and find out months later that one unanswered question failed the whole thing. Neither is a good use of anyone's week.

ReadyCert sits in between. It asks about your business in words you already use, maps every answer back to the official control, and tells you honestly what would fail today and exactly how to fix it. Then it drafts the paperwork. Certification itself stays where it belongs — with an IASME-licensed certification body.

The check

Plain questions. Honest answers.

Answer questions about how your team actually works. ReadyCert maps each one back to the official control and tells you, as you go, which answers would fail today.

Works with

MMicrosoft 365
GGoogle Workspace
XXero
WWindows
mmacOS
iiOS & Android

Fix guides are written for the tools small businesses actually run on — with the real menu names, in the order you'll click them.

app.readycert.co.uk/assessment

User access & MFA — A7.14

Does Microsoft 365 ask for a code from a phone or app, as well as a password?

Think about what you type when you sign in from a new laptop.

Yes — it asks for a code from a phone or app too
No — just a password
Not sure
This tool can't do a phone/app code

Maps to A7.14–A7.17. Any in-scope account without MFA fails the whole User access section.

The official question (A7.14)

Gaps and fixes

See exactly what stands in the way.

Every gap ranked worst-first, each with a click-by-click fix guide for the tools you already use — and a “done when” you can actually check off.

app.readycert.co.uk/fix/mfa-microsoft-365
Preparing for: Cyber Essentials (self-assessment)
Scope
Check
3Fix
4Certify

Not ready — yet. Three things stand in the way.

Fix the three items below and you'd no longer fail on the spot. Everything else can wait its turn. 42 questions answered · 3 of 5 controls in shape.

Not ready
In progress
Ready to certify
01 · Fix these firstWould fail today
!
1 of 3 · User access & MFA

Microsoft 365 sign-in has no second step

Six accounts sign in with a password alone. One account without MFA fails the whole User access control.

See the fix →
!
2 of 3 · Updates & patching

Two Windows laptops are past their update deadline

High-severity updates must be applied within 14 days. Two devices are at 22 and 31 days.

See the fix →
!
3 of 3 · Firewalls & routers

The office router still has its supplied password

Default administrative passwords must be changed before a device is used on the internet.

See the fix →
02 · Then work through the rest4 items
No written joiner and leaver processUser access & MFAIn progress
Automatic updates not confirmed on 3 phonesUpdates & patchingNot started
Malware protection unconfirmed on one MacMalware protectionNot started
Password policy not written downSecure configurationDone

Paperwork

Your policies, already written.

Scope statement, asset register, password policy, joiner-and-leaver process — drafted from your own answers, yours to edit, alongside draft responses to every question in the official portal.

app.readycert.co.uk/documents
Preparing for: Cyber Essentials (self-assessment)
Scope
Check
Fix
4Certify

Documents

Drafted from your answers · 3 of 11 generated
DocumentGroupStatus
Scope StatementScope & inventory✓ Generated · v2 · edited
Asset & Cloud-Service RegisterScope & inventory✓ Generated · v1
Password & Authentication PolicyPasswords & accountsGenerate
Choosing Good Passwords — a note for the teamPasswords & accountsGenerate
What We Do If a Password or Account Is CompromisedPasswords & accountsGenerate
Joiner & Leaver ProcessPasswords & accountsNeeds the check
Administrator Accounts — how we control themPasswords & accountsNeeds the check
Patch Management StatementOperations statements✓ Generated · v1
Malware Protection StatementOperations statementsGenerate
Firewall & Network StatementOperations statementsGenerate
Personal Devices at Work (BYOD) PolicyConditionalNot needed

All year

Certified once. Ready all year.

A renewal runway with 90-, 60- and 30-day checkpoints, quarterly re-checks that take one click when nothing has changed, and a readiness picture that stays current.

app.readycert.co.uk/status
Preparing for: Cyber Essentials (self-assessment)
Scope
Check
Fix
Certify
Certificate runwayRenews 14 March 2027 · 231 days left
90 days
60 days
30 days

We'll nudge you at each checkpoint. Nothing renews automatically — your certification body handles that.

What's coming up
14 Dec 202690-day checkpoint — re-run the checkReminder
13 Jan 202760-day checkpoint — book your certification bodyReminder
12 Feb 202730-day checkpoint — final gap sweepAct soon
Re-check historyEvery 3 months
12 Apr 2026Nothing changedNo action
14 Jan 20262 devices addedRe-checked
10 Oct 2025Nothing changedNo action

About 10 minutes

See where you stand in about ten minutes.

Answer the questions, get your readiness picture and a prioritised list of what to fix. No card, and no access to your systems — you describe your setup, ReadyCert never connects to it.

Pricing

One plan. Everything included.

Everything, all yearFounder price — launch month
£95/ year£149SAVE £54

Locked for life while your subscription stays active. It never goes up.

Billed annually. No monthly tier, no add-ons.

  • The readiness check, re-runnable any time
  • Click-by-click fix guides for your tools
  • All 11 policy documents, drafted from your answers
  • Draft answers for every question in the official portal
  • Quarterly re-checks and renewal reminders
See where you stand

The certificate itself is £330–£400 + VAT for a business this size, paid to your certification body — and consultants charge £600 a day to walk you through the questions. ReadyCert costs less than half the certificate fee, and the time it saves is the point.

Stay on top of the rules

Plain-English updates when Cyber Essentials changes, plus the other certifications UK small businesses start getting asked for — ISO 27001, SOC 2, supplier questionnaires.

No more than once a month. Unsubscribe any time.

Certification is bought separately from your IASME-licensed certification body; their assessment fee is not part of your ReadyCert subscription. ReadyCert is preparation software and cannot guarantee a pass.