KeptCompare
Cyber Essentials consultant vs software
Both routes end at the same certificate. The difference is who does the preparation, what happens after, and what you pay over three years of renewals.
| Consultant | Kept | |
|---|---|---|
| Typical cost | A fixed preparation fee or day rate, usually several hundred pounds and up, plus the certification fee. | From £29 a month, plus the certification fee. 14-day free trial, no card required. |
| Your time | Low during the assessment — the consultant does the preparation. | A short setup, then minutes a month keeping evidence current. |
| After certification | Usually ends at the certificate; renewal is a new engagement. | Evidence register and reminders run all year, so renewal starts prepared. |
| Best for | Complex networks, previous failures, tight tender deadlines, nobody internal to spare. | Mainstream cloud setups where organisation and follow-through are the real challenge. |
The renewal question
Cyber Essentials lasts twelve months, so compare three years, not one assessment. A consultant-led approach repeats most of the preparation fee each year. A software approach costs the subscription, but the evidence is already dated and current when renewal arrives. For most small businesses on mainstream cloud services, that difference adds up to thousands of pounds over three years.
Common questions
- How much does a Cyber Essentials consultant cost?
- Consultants typically charge a day rate or a fixed preparation fee, usually several hundred pounds and up for a small business, on top of the certification fee itself. Prices vary widely, so get a written scope before agreeing.
- When is a consultant worth it?
- When your setup is genuinely complicated: on-premises servers, unusual network equipment, several sites, a failed previous assessment, or a tight tender deadline with nobody internal to spare. A good consultant earns their fee in those cases.
- When is software the better option?
- When your business runs on mainstream cloud services with managed laptops — which describes most UK small businesses. The controls are standard, the policies are templated, and what you actually need is organisation and reminders rather than specialist expertise.
- Can I use both?
- Yes, and many businesses do. Some use software for the routine evidence and renewals, and bring in a consultant only for the first assessment or for Cyber Essentials Plus preparation.
See if Kept fits your setup
The free scan shows how your cloud services look today — no card, no commitment, and a fair picture of how much preparation you actually need.