Cyber Security Associates (CSA) review: Cyber Essentials in 2026
A factual review of Cyber Security Associates (CSA) as a Cyber Essentials certification body - their Gloucester-based SOC + consultancy model, pricing guidance, and where Fig Group differs.
Cyber Security Associates (CSA) review: Cyber Essentials in 2026
Cyber Security Associates (CSA) is a Gloucester-headquartered IASME-licensed certification body with a managed SOC, pen testing, and consultancy practice. They are a credible, mid-market choice for organisations buying managed security alongside certification. Fig Group positions against them on price, certification speed, and platform-first delivery.
Who CSA is
- Founded: 2013, Gloucester (M5 corridor)
- Reputation: managed detection + response, penetration testing, SOC-as-a-service
- IASME-licensed: yes - verifiable on the IASME directory
- Scope: Cyber Essentials, CE Plus, SOC, pen testing, incident response, training
- Typical customer: SME to mid-market organisations buying SOC + certification together
Their regional strength in the South West and Midlands makes them a natural choice for organisations in those regions with an RFP that favours local presence.
Pricing and turnaround
CSA does not publish headline Cyber Essentials pricing. Bundled MSSP pricing typically starts higher than standalone certification; for current figures see csa.limited. Turnaround is engagement-based.
Where CSA makes sense
- You need managed SOC + certification from the same supplier.
- You want local presence in the South West / Midlands.
- You are also procuring incident response retainers or pen tests.
Where Fig Group positions differently
1. £299.99 + VAT published for the Micro tier; no quote needed. See pricing.
2. 6-working-hour SLA on clean Micro submissions.
3. £25k cyber insurance bundled.
4. National platform delivery - same experience wherever you are in the UK.
5. Verifiable IASME licence: 325cdf33-3812-4082-bf8d-7dce7ac02977 on the IASME directory.
The certificate is identical
CSA-issued and Fig-issued Cyber Essentials certificates are equivalent - same scheme, same 12-month validity, same directory listing. The commercial wrapper differs.
When to consider Fig
- You do not need managed SOC from the certification body
- You want a published, low price
- You have a deadline measured in hours
- You want bundled cyber insurance
Bottom line
CSA is a credible regional MSSP with a valid CE practice. If you want managed detection bundled with certification and local presence matters, they are reasonable. For certification at the lowest published UK price with the fastest turnaround, Fig's Micro tier is the direct alternative.
Start Cyber Essentials with Fig - from £299.99 + VAT | All pricing tiers | Free readiness check
About the author
Jay Hopkins
Managing Director, Fig Group
Jay Hopkins is the Managing Director of Fig Group and an IASME-licensed Cyber Essentials assessor. He was previously Head of Technology for a global regulated firm. He works with UK organisations across regulated sectors on baseline compliance, supply-chain assurance, and AI-augmented security tooling.
Next step
Ready to get certified?
Get Cyber Essentials certified with Fig. Same-day certification available when you purchase before 12:00 midday. IASME-licensed with transparent pricing from £299.99 + VAT.
Related solutions