KeptBuilt for small UK businesses
Pass Cyber Essentials this month. Stay compliant all year.
Kept walks you through the five Cyber Essentials controls, writes the policies your assessor asks for, and keeps the evidence tidy between certifications. From £29 a month.
14-day free trial. No card details needed to run the scan.
- A readiness score across the five controls
- A cloud services register with MFA status
- Three signed-ready policy documents
- Your first evidence snapshot
What Kept does, in 30 seconds
How we turn Cyber Essentials into a routine your business can keep up all year — and why it matters as UK rules tighten.
Certification is a project. Compliance is a habit.
Most firms pass their first assessment then drift. Kept keeps the paperwork current so next year's renewal is a formality.
A guided scan of your cloud services shows which accounts lack multi-factor authentication before an assessor does.
Patching, access control and the director's declaration are generated from your company details, ready to sign.
Monthly snapshots build a dated audit trail, so you are never scrambling for screenshots at renewal.
Reminders start 90 days before your certificate expires, with a clear checklist for each stage.
See exactly what you get
A 60-second tour of the readiness dashboard, the five-control checklist and the policy generator, filled in for a made-up company so you can judge it before signing up.
Kept — Harbourline Design Ltd dashboard (sample)
Readiness score
82%
Services without full MFA
1
Dropbox Business
Checks over 90 days old
1
Re-check before assessment
| Service | Multi-factor | Last checked |
|---|---|---|
| Microsoft 365 | All accounts | 12 Aug 2026 |
| Xero | All accounts | 12 Aug 2026 |
| Dropbox Business | 2 accounts missing | 04 Jul 2026 |
| Mailchimp | All accounts | 12 Aug 2026 |
Why you can trust Kept with your compliance
You are handing over a picture of how your business is secured. Here is exactly how that is handled, and what we will never do with it.
Your data is locked to your account
Every record is tied to your organisation and protected by row-level access rules, so no other customer can read it. Traffic is encrypted in transit.
We never see your card details
Payments are handled by Stripe. Kept stores a subscription reference and nothing else. Prices are in pounds, with no setup fee.
Cancel whenever you like
Monthly plans stop at the end of the period you have paid for. No notice period, no minimum term, no sales call to get out.
Your evidence stays yours
Policies, snapshots and answers can be downloaded at any time, so you keep a complete pack even if you leave.
We show our working
Every question and score maps to one of the five Cyber Essentials controls, with the wording an assessor uses. Nothing is a black box.
Independent and honest about it
Kept is an independent tool, not affiliated with or endorsed by NCSC or IASME. We prepare you for assessment; your certification body awards the certificate.
Read more about who we are, our privacy notice and our terms.
Cyber Essentials and cyber security compliance questions
- What is Cyber Essentials certification?
- Cyber Essentials is the UK government-backed scheme, run by IASME on behalf of the NCSC, that checks five basic security controls: firewalls, secure configuration, user access control, malware protection and security update management. Certification is renewed every twelve months.
- How much does Cyber Essentials cost?
- The certification fee is paid to your certification body and is banded by headcount, starting at a few hundred pounds for a micro business. Kept costs £29 a month on Starter or £79 a month on Growth, and covers the preparation, policies and evidence you need.
- How long does Cyber Essentials last?
- A Cyber Essentials certificate is valid for twelve months from the date it is issued. Kept emails you at 90, 60, 30, 14, 7 and 1 day before expiry so a renewal never catches you out.
- Does Kept help with cyber security compliance beyond certification?
- Yes. Kept keeps your cloud services register, multi-factor authentication status, patching and access-control policies and dated evidence snapshots current all year, so compliance evidence is ready whenever a client, insurer or assessor asks.
More detail in our guides on Cyber Essentials cost, how to get certified and how long certification lasts.
Start your 14-day free trial
Create your Kept account in under a minute. You get the full workspace for 14 days: readiness score, cloud services register, policy documents, evidence snapshots and renewal reminders.
- No card details required
- Cancel at any time during the trial
- Your data stays private to your account
Start with a free scan
Tell us a little about your organisation and we will show you where you stand against the Cyber Essentials controls.