- Run by
- The UK Government, announced on 3 November 2026. Cyber Essentials was developed by the National Cyber Security Centre (NCSC)
- Who can apply
- Eligible UK micro, small and medium-sized businesses that haven’t been certified to Cyber Essentials in the last four years
- Discount
- 75% off a new Cyber Essentials certification. The government says eligible businesses could pay as little as £80 and no more than £125 (plus VAT)
- Funding
- £2.4 million, which the government expects to help around 6,000 businesses
- Places
- First come, first served
- Closing date
- Available until March 2027, or until the funding runs out
How to apply
Applications are made through the official First Step Fund application site, which is linked from the government’s announcement. The discount is available from 3 November 2026 and places are allocated first come, first served, so it’s worth checking your eligibility early.
Not sure where to start? Our free Cyber Essentials readiness check shows how ready you are before you apply.
Free certification for suppliers
The government also announced a Cyber Essentials for suppliers grant worth up to £7 million until March 2029. It pays in full for first-time Cyber Essentials certification, with tailored support, for eligible UK-based SME suppliers of organisations that have signed the Cyber Resilience Pledge. You can’t apply for it directly: signatories nominate their suppliers and guide them through the process. The government expects around 8,000 businesses to benefit.
Why it’s worth doing
Cyber Essentials covers the basic technical controls that protect against the most common cyber attacks. The government also notes that organisations with Cyber Essentials and a turnover under £20 million receive up to £25,000 of cyber liability insurance.