Cyber Essentials Plus is required for UK government contracts, NHS supplier access, and an increasing number of procurement frameworks. Fortify gives you a free readiness check, a live readiness score across all five control areas, and a guided AI audit — so you arrive at your assessor meeting with nothing left to chance.
Free to start · No account required for the assessment
Independently verified by an accredited assessor, CE+ goes beyond the self-assessed version. These are the organisations that increasingly mandate it.
CE+ is required by default for central government contracts and by the MOD supply chain. Without it, you cannot bid.
NHS Digital mandates CE+ for suppliers accessing national systems. GP practices and ICBs reference it in the DSP Toolkit.
DfE funding streams, NCSC guidance, and MAT-level security expectations all reference Cyber Essentials certification.
The SRA strongly encourages CE+ for client data handling. Cyber insurance underwriters increasingly require it.
RSL procurement frameworks and the Regulator of Social Housing's expectations on cyber governance align with CE+ controls.
CE+ is the UK's government-backed baseline for technical security — the most credible proof of cyber hygiene available.
An accredited assessor will test your organisation against each of these areas. Fortify maps your current posture against all five before you start — so you know exactly where you stand.
Firewalls
Ensure every internet-connected device sits behind a correctly configured firewall or equivalent boundary control.
Secure configuration
Remove default settings, disable unused features, and enforce screen lock timeouts on all in-scope devices.
User access control
Apply MFA across all admin and cloud accounts. Keep admin accounts separate from standard day-to-day accounts.
Malware protection
Deploy anti-malware with real-time scanning on every in-scope device and keep definitions current.
Patch management
Apply OS and application security patches within 14 days of release. Remove end-of-life software entirely.
Fortify handles the preparation work so the assessor visit is a formality, not a fire drill.
Take the free digital resilience assessment
Alex maps your current posture across the five CE+ control areas. No forms — a 10-minute AI conversation. Your CE+ readiness score is calculated immediately.
Track readiness in your portal
Import your results. Your portal dashboard shows a live CE+ readiness breakdown with per-control progress bars and specific actions to close each gap.
Work through the guided CE+ audit
Jamie Sinclair, your AI CE+ assessor, guides you through all 26 controls. Attach evidence — screenshots, documents, links — directly against each control.
Export your scope document and evidence pack
Download a fully formatted scope statement and evidence summary ready to hand to your accredited CE+ assessor — nothing lost, nothing missing.
Jamie Sinclair, your AI CE+ assessor, takes you through all five control areas with structured questions, per-control evidence capture, and an automatically generated scope document. Available as a portal add-on subscription.
£99/month · 12-month subscription · Requires portal account
The free Digital Resilience assessment maps your posture across all five CE+ control areas. No forms, no account needed — a personalised readiness report delivered to your inbox.
Already have a portal account? Sign in and go to Audits