PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteCyber Essentials is the UK government-recommended baseline certification for organisations of any size. It checks five technical control areas; the right assessment level and whether a public contract requires certification depend on the supplier’s systems, the contract and its cyber risk. Applications started on or after 27 April 2026 should use requirements version 3.3, while earlier applications may continue under version 3.2.
What Cyber Essentials checks
The scheme assesses whether an organisation has put controls in place to reduce exposure to common internet-based attacks. The National Cyber Security Centre describes it as the government-recommended minimum standard of cybersecurity for organisations of all sizes. The five control areas are:
As an Amazon Associate I earn from qualifying purchases.
- Firewalls: filter traffic between the internet and the organisation’s network.
- Secure configuration: configure computers and devices to reduce vulnerabilities and disable unnecessary services.
- Security update management: apply fixes that address known software vulnerabilities.
- User access control: limit who can access data and services and what permissions they have.
- Malware protection: identify and block viruses and other malicious software.
The detailed requirements, rather than these short descriptions, determine how controls apply in a particular environment. NCSC Cyber Essentials overview
Free tools Windows power users keep installed
One-click scans. No signup required.
Which requirements version applies in 2026?
The NCSC lists Cyber Essentials Requirements for IT Infrastructure v3.3 as effective from 27 April 2026. Applications begun before that date may continue under v3.2, effective from 28 April 2025. Check the applicable version and its current requirements before answering the assessment; do not rely on an older question set or summary as a substitute for the standard. The NCSC provides a free question set and readiness tool to help organisations prepare. NCSC Help & resources
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How the two certification levels compare
| Level | Assessment method | Assurance | Cost basis | When it may fit |
|---|---|---|---|---|
| Cyber Essentials | Verified self-assessment, signed off by a board member or equivalent and marked by an assessor. A licensed Certification Body can provide support. | Baseline assurance based on the assessed answers and scope. | The NCSC overview lists a starting price of £320 plus VAT, accessed in 2026; it is not a quote for every organisation. | When baseline assurance meets the organisation’s needs and any contract terms. |
| Cyber Essentials Plus | The same five control areas, with independent technical testing and sampling of systems. | Higher assurance through independent technical verification. | Quote-based; price depends on network size and complexity. | When the contract or risk profile calls for stronger independent verification. |
The self-led route involves registering through IASME, paying the applicable fee, completing the verified self-assessment and obtaining the required sign-off before an assessor marks the answers. A supported route uses an IASME-licensed Certification Body to help interpret the questions for the organisation’s circumstances. Certification is applied for through a Certification Body; an adviser can help prepare but does not replace the assessment.
For an actual purchase, check current fees with the scheme or Certification Body: the NCSC’s published entry price is a starting figure, and Plus pricing is not a single fixed amount. NCSC Cyber Essentials overview
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What certification proves—and what it does not
A certificate is evidence that the organisation met the requirements within the certificate’s scope at the assessment point. It is not a guarantee that the organisation cannot be breached, an audit of every product it supplies, or proof of comprehensive resilience. The scheme is designed as a baseline against common attacks, not to address advanced, targeted attacks. Higher-risk environments may need additional technical measures, standards or expert advice. GOV.UK PPN 014
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteWhen public contracts can require it
PPN 014 advises public-sector buyers not to impose Cyber Essentials as a blanket condition for every contract. A requirement should be relevant and proportionate to the goods, services or works and necessary to manage the associated cyber risks. Under the Procurement Act 2023 framework, buyers may accept equivalent controls if the contracting authority is satisfied; for assurance equivalent to Plus, verification must come from a technically competent, independent third party. The contract and procurement documents determine what a supplier must provide.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Where a contract requires certification, PPN 014 says it must be renewed every 12 months. The certificate or equivalent evidence should be available before contract award, and evidence is essential when data is passed to a supplier. Contract terms may require more frequent renewal or risk-based checks. GOV.UK PPN 014
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to check a supplier’s certificate scope
Do not assume that a supplier’s certificate covers its entire corporate group or every service it provides. By default, scope is the legal entity supplying the goods or services. A supplier can restrict scope to part of that entity, and cloud providers or other third parties may sit outside the certificate.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
For procurement or vetting, review the certificate and contract materials for:
- The legal entity named and whether the certificate covers the whole entity or a defined part.
- The systems, users and services included in the assessed scope, and whether those are relevant to the work being purchased.
- Cloud services, subcontractors and other third parties that handle the buyer’s information but are not covered by the supplier’s certificate.
- Any separate assurance needed for those dependencies or for the product or service itself.
ISO/IEC 27001 certification does not automatically demonstrate Cyber Essentials conformity: its scope may not include all five controls or test them. Conversely, Cyber Essentials alone should not be treated as proof of product-level security or full organisational resilience. GOV.UK PPN 014
How to prepare and find support
- Confirm the applicable requirements version. Use v3.3 for applications started from 27 April 2026; applications started earlier may continue under v3.2.
- Use the current preparation materials. Work through the NCSC readiness tool and question set alongside the requirements document.
- Identify gaps against the five control areas. Resolve them before submitting the assessment, and establish which systems and users fall within the intended scope.
- Choose appropriate help. An NCSC-assured Cyber Advisor can provide practical implementation support. Check current NCSC or IASME directories to confirm a provider’s status, and consider its experience with your sector and technology.
- Apply through a Certification Body. Choose the self-led or supported route and select Plus if independent technical testing is needed or required.
The NCSC’s buyer information explains how to choose a Cyber Advisor and what the service involves. NCSC Cyber Advisor buyer information
Conditional insurance benefit
The NCSC describes IASME-arranged Cyber Liability Insurance for UK organisations with turnover under £20 million when certification covers the whole organisation. Its resources page lists a 24-hour incident helpline and a total liability limit of £25,000. These are conditional policy details, not a general promise of compensation; verify current eligibility, exclusions and wording directly before relying on the cover. NCSC Cyber Essentials overview · NCSC Help & resources
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →
