Certified. Verified. Handled for you.
Munitus Core is a fully managed Cyber Essentials service that takes you from where you are now to certified against both Cyber Essentials and Cyber Essentials Plus, and keeps you certified year on year, without it becoming a distraction from running your business.
What Core delivers
Cyber Essentials certification is no longer optional for most UK businesses. For defence supply chain organisations it is a contractual requirement. For everyone else, it is increasingly the baseline that clients, insurers and partners expect to see. Core takes you from where you are now to certified, with everything handled for you.
Both certifications
Cyber Essentials and Cyber Essentials Plus, the independently verified level that carries real weight in procurement decisions.
Vulnerability reporting and guidance
Clear reports on any gaps or vulnerabilities found every month, plus the guidance your IT team needs to close them, so you know what to fix and how, not just that something is wrong.
Continuous compliance
Vulnerability reports provided monthly, not just a one-off check at audit time, so your compliance reflects reality throughout the year, not just a snapshot at certification.
Policy support
Written policy templates and hands-on help creating the policies you need. Some internal policies must still be completed by your own team, since only you can write them.
The five control themes
Cyber Essentials and Cyber Essentials Plus both assess the same five technical control themes. Basic is a self-assessed questionnaire against them; Plus adds an independent audit that verifies they are genuinely in place.
Firewalls
Boundary firewalls configured correctly to control traffic in and out of your network.
Secure Configuration
Devices and software set up so default settings and unused features do not create risk.
Access Control
User accounts and permissions limited to what each person actually needs.
Malware Protection
Anti-malware software active and kept up to date across your devices.
Patch Management
Security updates applied promptly across operating systems and applications.
Core vs going it alone
A quick comparison of what's included as standard against doing nothing, or completing Cyber Essentials yourself.
| Feature | Self-assessed Cyber Essentials | Munitus |
|---|---|---|
| Certification held | Cyber Essentials only, self-declared | Cyber Essentials and Plus, independently verified |
| Verification method | Self-assessed questionnaire, not checked by anyone else | On-site and remote audit carried out by a certified assessor |
| Evidence gathering | Left to you to collect and organise yourself | Handled for you, start to finish |
| Remediation of gaps | Left to you to identify and fix | Clear reporting and guidance provided every month; hands-on fixing is down to your IT team |
| Policy documentation | Not provided; you draft policies from scratch | Templates provided plus hands-on drafting support |
| Certificate renewal | A manual process, easy to let lapse without reminders | Actively tracked and managed for you, year after year |
Simple, all-in pricing
One flat monthly fee, based on your headcount, covers both certifications, monthly vulnerability reporting, audit support and renewal: no hidden setup costs, no separate consultancy invoice, no surprises. All figures are shown excluding VAT.
0 to 9 users
£350
per month, flat
10 to 49 users
£450
per month, flat
50 to 249 users
£550
per month, flat
Over 250 users? Get in touch for a quote tailored to the size of your business.
How certification happens
Five straightforward steps, run by the same team who'll support you day to day, so there's no handover to a stranger once you're certified.
Step by step
- 1 Call
A short call about your current setup and which certifications you need.
Book a call - 2 Scope confirmation
We confirm your user band and scope against the five control themes. Core is priced by band, so there is no separate pricing exercise.
- 3 Agreement
A written agreement confirming scope at your published price, ready to sign before anything changes.
- 4 Onboarding
We gather evidence, run the gap assessment and prepare you for audit.
- 5 Ongoing Support
Monthly reporting on gaps and vulnerabilities, guidance to close them, and active renewal management year after year.
Not the right fit?
Core is a fully managed, ongoing service. If that is more than you need right now, these lighter options can get you certified on their own.
Ready to talk through Core?
Book a call and we'll walk through what certification would look like for your business, including pricing based on your headcount.