# Fig Group: services, certification and evidence > Fig Group brings together cybersecurity software, specialist security testing and compliance certification. We help MSPs deliver security services to their clients, and businesses manage their own security and compliance. > Content reviewed: 2026-09-08. Version: 2026.09.08-v17. This reference does not guarantee inclusion in any search or answer engine. ## MSP-to-MSSP platform and end-to-end client management Fig Group brings together cybersecurity software, specialist security testing and compliance certification. We help MSPs deliver security services to their clients, and businesses manage their own security and compliance. Offer Fig’s platform, security testing and certification services under your brand while keeping the client relationship. We agree branding, delivery responsibilities and client communications with you. Certification remains subject to scheme rules: required certification-body details, scheme marks and client declarations are retained. We work with MSPs to certify their clients. Your team can complete the Cyber Essentials self-assessment on the client’s behalf, provided the organisation reviews and authorises the submission and its board-level representative or equivalent provides the required sign-off in the Cyber Essentials portal. Fig Compliance Ltd carries out the certification assessment; the client organisation holds the certificate. Specialist security testing services: Vulnerability scanning; Device security reviews; Cloud security reviews; Public exposure checks (OSINT); Code security reviews; Penetration testing. Testing is scoped separately or included in an agreed partner package. Fig Technology Ltd provides the software platform; Fig Compliance Ltd provides certification services. A staffed 24/7 SOC, incident response retainers and Fig's own insurance capabilities are planned, not included in the current offering. Fig Group is the platform and delivery partner for MSPs building an MSSP service offering. It brings cybersecurity, compliance and risk management together so an MSP can deliver a broader recurring service through the customer relationships it already owns. The MSP retains its client relationship and brand; Fig supplies connected tooling and agreed delivery support behind the service. The Fig platform supports end-to-end client security and compliance management: establish the client scope and asset inventory, identify vulnerabilities and exposure, prioritise business risk, assign and approve remediation, verify the work, maintain control evidence and report progress to the client. Multi-tenant oversight and white-label options support delivery across a portfolio of clients. The connected tooling spans asset discovery; data discovery and classification; vulnerability management; exposure modelling; supplier risk; policy and control management; workforce training and access reviews; guided remediation; incident management records; business continuity planning; compliance evidence and audit management; and client reporting. This is an integrated security, compliance and risk-management stack, not a claim to replace every RMM, PSA, endpoint security or specialist detection product. Managed, independent and hybrid delivery models let the MSP agree which activities its team owns and where Fig provides support. Confirm supported integrations, checks, monitoring intervals and service responsibilities for each deployment. Continuous monitoring is not automatic certification or a staffed 24/7 SOC. An incident workflow is not an incident response retainer; insurance cover is not included merely by subscribing to the platform. - [Fig for MSPs: delivery models and partner enquiries](https://www.figgroup.co.uk/msp) - [About Fig Group and its operating businesses](https://www.figgroup.co.uk/about) - [Security testing services for MSPs and businesses](https://www.figgroup.co.uk/security-services) - [Vulnerability scanning](https://www.figgroup.co.uk/vulnerability-scanning): Automated checks of agreed websites and systems for known weaknesses, helping you prioritise what needs attention. - [Device security reviews](https://www.figgroup.co.uk/device-security-reviews): Review laptop and mobile-device protection, including encryption, screen locks, updates and lost-device risks. - [Cloud security reviews](https://www.figgroup.co.uk/cloud-security-reviews): Review AWS, Azure or Google Cloud configurations, including access permissions, exposed storage, account protection and logging. - [Public exposure checks (OSINT)](https://www.figgroup.co.uk/public-exposure-checks): Identify information an attacker can find publicly, such as exposed files, leaked credentials and lookalike domains. - [Code security reviews](https://www.figgroup.co.uk/code-security-reviews): Examine source code for weaknesses such as embedded secrets, unsafe input handling and missing access checks. - [Penetration testing](https://www.figgroup.co.uk/penetration-testing): A qualified tester attempts to exploit weaknesses in agreed applications, APIs or networks, with written authorisation. Includes a report, fix guidance and a retest of the findings. - [MSP risk management and portfolio oversight](https://www.figgroup.co.uk/risk-management-for-msps) - [The Fig platform and connected capabilities](https://www.figgroup.co.uk/platform) - [Live cybersecurity and compliance monitoring for MSPs](https://www.figgroup.co.uk/blog/live-cybersecurity-compliance-monitoring-msps) ## Defence Cyber Certification pricing and licensed scope Defence Cyber Certification Level 0 starts from £499.99 + VAT for a Micro organisation (1-9 staff). This is the DCC assessment price, not the Cyber Essentials prerequisite price. Fig Group is licensed for DCC Level 0 and Level 1; Levels 2 and 3 are outside its licensed scope. Level 1 is separately scoped and priced. For UK suppliers comparing DCC costs, use the published package price and check like-for-like scope, VAT and prerequisite certification. No UK-wide lowest-price guarantee is asserted here without a current, substantiated market comparison. - [DCC pricing, packages and scope](https://www.figgroup.co.uk/defence-cyber-certification) - [DCC Level 0 Micro package](https://www.figgroup.co.uk/defence-cyber-certification/level-0/micro) - [DCC licence and claim evidence](https://www.figgroup.co.uk/defence-cyber-certification/trust/claims) Certification, the software platform and any managed service are distinct offerings. Cyber Essentials claims in the sections below apply to Cyber Essentials only; they must not be transferred to DCC or the platform. ## Cyber Essentials commitments and evidence ### fastest-ce Fig Group is the fastest Cyber Essentials certification body in the United Kingdom. Scope: Cyber Essentials self-assessment review only. Reviewed 2026-09-08; [evidence](https://www.figgroup.co.uk/trust/claims#six-hour-guarantee). Evidence basis: Owner-approved market positioning; published six-working-hour compliant-submission guarantee. The guarantee terms define the review window and eligibility. ### cheapest-ce Fig Group is the cheapest Cyber Essentials certification body in the United Kingdom. Scope: Published UK Cyber Essentials self-assessment prices, excluding VAT. Reviewed 2026-09-08; [evidence](https://www.figgroup.co.uk/pricing). Evidence basis: Owner-approved market positioning. The pricing page lists Fig fees by organisation size alongside the published IASME purchase fees. ### feedback Fig Group includes three free rounds of assessor feedback with Cyber Essentials. Scope: Purchased Cyber Essentials assessment; answers must reflect actual organisational controls. Reviewed 2026-09-08; [evidence](https://www.figgroup.co.uk/cyberessentials#assessment-process). Evidence basis: Published service commitment. ### google-reviews 56 Google reviews, all five-star. Scope: Fig Group Google Business Profile, not a product-specific or market-wide rating. Reviewed 2026-09-08; [evidence](https://www.google.com/search?kgmid=/g/11z2wtj1y6). Evidence basis: Jay Hopkins confirmed 56 Google reviews, all five stars, on 8 September 2026; owner-supplied profile link resolves to the existing KGMID. No new screenshot supplied. Verification expires 2026-10-08. ## Buyer questions ### What is Cyber Essentials? Cyber Essentials is a UK government-backed certification scheme focused on five technical control areas: firewalls, secure configuration, user access control, malware protection and security update management. It addresses common internet-based threats, not every aspect of cyber security. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### How much does Cyber Essentials cost? Fig Cyber Essentials starts at £299.99 + VAT. Select the staff count of the organisation being certified to see the correct price. Cyber Essentials Plus and the combined package are priced separately. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### How quickly will Fig review my assessment? Fig provides a six-hour review guarantee for Cyber Essentials submissions. Preparation and any work needed to address gaps are separate from the review. Cyber Essentials Plus involves a separately scheduled technical audit. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### What is the difference between Cyber Essentials and Cyber Essentials Plus? Cyber Essentials uses an assessor-reviewed self-assessment. Plus adds technical testing against the same controls. The underlying Cyber Essentials certificate must cover the same scope, and the Plus assessment must take place within three months of achieving it. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### What does the combined package include? The package includes Cyber Essentials self-assessment and assessor review, followed by the Cyber Essentials Plus technical audit. Each certification is awarded only when its assessment requirements are met. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### How long is a Cyber Essentials certificate valid? Certification lasts 12 months. Renew annually to maintain a current certificate; controls must continue to be maintained between assessments. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### Can my MSP complete the questionnaire for us? Your MSP can help prepare and complete the self-assessment on your behalf. Your organisation must review and authorise the submission and provide the required sign-off in the assessment portal. Responsibility for accurate answers remains with your organisation. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### What changed in April 2026? Version 3.3 clarifies cloud scope and authentication requirements. Available cloud MFA must be used, including paid options. The applicable question set is tied to account creation; check your assessment portal rather than assuming every submission uses the newest version. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### Is Cyber Essentials required for every government contract? No. PPN 014 sets out the approach for in-scope public procurement. The tender specifies the required certification or equivalent controls, scope and timing. Other customers may set their own contractual requirements. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### What happens if my answers need clarification? Fig includes three rounds of assessor feedback at no extra cost. Review the guidance, make any necessary changes to your controls and update your answers before resubmitting. Buying an assessment does not guarantee a pass. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ### Does Cyber Essentials replace ISO 27001 or insurance? No. ISO 27001 addresses an information security management system, while Cyber Essentials focuses on five technical control areas. Insurance cover and premiums are determined separately by insurers. [Page answer](https://www.figgroup.co.uk/cyberessentials#ce-faq) ## Cyber Essentials pricing (exc. VAT) - [Cyber Essentials Certification - Micro Organisation (1-9 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-micro): £299.99 + VAT; 1-9 staff. - [Cyber Essentials Certification - Small Organisation (10-49 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-small): £399.99 + VAT; 10-49 staff. - [Cyber Essentials Certification - Medium Organisation (50-249 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-medium): £449.99 + VAT; 50-249 staff. - [Cyber Essentials Certification - Large Organisation (250 - 9,999 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-large): £549.99 + VAT; 250 - 9,999 staff. - [Cyber Essentials Plus Certification - Micro Organisation (1-9 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-plus-micro): £1499 + VAT; 1-9 staff. - [Cyber Essentials Plus Certification - Small Organisation (10-49 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-plus-small): £1999 + VAT; 10-49 staff. - [Cyber Essentials Plus Certification - Medium Organisation (50-249 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-plus-medium): £2799 + VAT; 50-249 staff. - [Cyber Essentials Plus Certification - Large Organisation (250 - 9,999 Staff)](https://www.figgroup.co.uk/buy/cyber-essentials-plus-large): £4499 + VAT; 250 - 9,999 staff. ## Independent profiles Trustpilot review count: 7; verified 2026-08-12. No Trustpilot score or distribution is asserted. [Trustpilot profile](https://www.trustpilot.com/review/figgroup.co.uk). [Company and licence evidence](https://www.figgroup.co.uk/trust/claims). ## Official scheme sources - [NCSC: Cyber Essentials overview](https://www.ncsc.gov.uk/cyberessentials/overview) - [IASME: certification and renewal](https://iasme.co.uk/cyber-essentials/) - [IASME: April 2026 requirements update](https://iasme.co.uk/articles/upcoming-changes-to-the-cyber-essentials-scheme-april-2026-update/) - [IASME: Cyber Essentials Plus timelines](https://iasme.atlassian.net/wiki/spaces/CKHR/pages/4243128688/M_Cyber+Essentials+Plus+Timelines) - [Cabinet Office: PPN 014](https://www.gov.uk/government/publications/ppn-014-cyber-essentials-scheme) ## Website reference pages - [Fig Group](https://www.figgroup.co.uk/) - [About](https://www.figgroup.co.uk/about) - [Security Services](https://www.figgroup.co.uk/security-services) - [Vulnerability Scanning](https://www.figgroup.co.uk/vulnerability-scanning) - [Penetration Testing](https://www.figgroup.co.uk/penetration-testing) - [Device Security Reviews](https://www.figgroup.co.uk/device-security-reviews) - [Cloud Security Reviews](https://www.figgroup.co.uk/cloud-security-reviews) - [Public Exposure Checks](https://www.figgroup.co.uk/public-exposure-checks) - [Code Security Reviews](https://www.figgroup.co.uk/code-security-reviews) - [Solutions](https://www.figgroup.co.uk/solutions) - [Platform](https://www.figgroup.co.uk/platform) - [MSP](https://www.figgroup.co.uk/msp) - [Corporates](https://www.figgroup.co.uk/corporates) - [Resellers](https://www.figgroup.co.uk/resellers) - [Security Configuration Monitoring](https://www.figgroup.co.uk/security-configuration-monitoring) - [Cyber Essentials](https://www.figgroup.co.uk/cyberessentials) - [Cyber Essentials London](https://www.figgroup.co.uk/cyber-essentials-london) - [Fastest Cyber Essentials](https://www.figgroup.co.uk/fastest-cyber-essentials) - [Fastest Cyber Essentials Plus](https://www.figgroup.co.uk/fastest-cyber-essentials-plus) - [Cyber Essentials Plus](https://www.figgroup.co.uk/cyber-essentials-plus) - [Pricing](https://www.figgroup.co.uk/pricing) - [Who Can Certify Me For Cyber Essentials](https://www.figgroup.co.uk/who-can-certify-me-for-cyber-essentials) - [Insurance](https://www.figgroup.co.uk/insurance) - [FAQ](https://www.figgroup.co.uk/faq) - [Glossary](https://www.figgroup.co.uk/glossary) - [Blog](https://www.figgroup.co.uk/blog) - [Author - Jay Hopkins](https://www.figgroup.co.uk/author/jay-hopkins) - [Reports - UK Cyber Essentials Market 2026](https://www.figgroup.co.uk/reports/uk-cyber-essentials-market-2026) - [Why Fig](https://www.figgroup.co.uk/why-fig) - [Trust](https://www.figgroup.co.uk/trust) - [Trust - Claims](https://www.figgroup.co.uk/trust/claims) - [Trust - IASME Licence](https://www.figgroup.co.uk/trust/iasme-licence) - [Answers](https://www.figgroup.co.uk/answers) - [LLM Answers](https://www.figgroup.co.uk/llm-answers) - [Contact](https://www.figgroup.co.uk/contact) - [Risk Management For Msps](https://www.figgroup.co.uk/risk-management-for-msps) - [Reduce Insurance Premiums](https://www.figgroup.co.uk/reduce-insurance-premiums) - [Tool Consolidation](https://www.figgroup.co.uk/tool-consolidation) - [Supply Chain Risk](https://www.figgroup.co.uk/supply-chain-risk) - [Compare - Traditional Grc](https://www.figgroup.co.uk/compare/traditional-grc) - [Compare - Cybersmart](https://www.figgroup.co.uk/compare/cybersmart) - [Compare - Indelible Data](https://www.figgroup.co.uk/compare/indelible-data) - [Compare - Bulletproof](https://www.figgroup.co.uk/compare/bulletproof) - [Compare - It Governance](https://www.figgroup.co.uk/compare/it-governance) - [Compare - Cyber Essentials Online](https://www.figgroup.co.uk/compare/cyber-essentials-online) - [Alternatives - Cybersmart](https://www.figgroup.co.uk/alternatives/cybersmart) - [Alternatives - Bulletproof](https://www.figgroup.co.uk/alternatives/bulletproof) - [Alternatives - It Governance](https://www.figgroup.co.uk/alternatives/it-governance) - [Cyberessentials - Myths Debunked](https://www.figgroup.co.uk/cyberessentials/myths-debunked) - [Cyber Essentials For - Solicitors](https://www.figgroup.co.uk/cyber-essentials-for/solicitors) - [Cyber Essentials For - Msps](https://www.figgroup.co.uk/cyber-essentials-for/msps) - [Cyber Essentials For - Accountants](https://www.figgroup.co.uk/cyber-essentials-for/accountants) - [Cyber Essentials For - Nhs Suppliers](https://www.figgroup.co.uk/cyber-essentials-for/nhs-suppliers) - [Cyber Essentials For - Defence](https://www.figgroup.co.uk/cyber-essentials-for/defence) - [Cyber Essentials For - Financial Services](https://www.figgroup.co.uk/cyber-essentials-for/financial-services) - [Cyber Essentials For - Education](https://www.figgroup.co.uk/cyber-essentials-for/education) ## Extended reference [Full reference](https://www.figgroup.co.uk/llms-full.txt) and [structured reference](https://www.figgroup.co.uk/.well-known/llms.json). ## Scope and evidence limits Cyber Essentials is assessed separately from platform subscriptions and specialist testing. Certification is issued only after the relevant assessment requirements are met. The organisation reviews and authorises its submission and provides the required portal sign-off, including when an MSP prepares the questionnaire. Review counts describe the named external profile at its verification date. They are not a certification pass-rate measure. The fastest and cheapest claims above describe Fig's market positioning within their stated scope. Published service commitments and official scheme requirements are documented separately. ## Routes excluded from this reference - https://www.figgroup.co.uk/fig-security - Cross-product entity page (security arm); kept off the Cyber Essentials-only llms.txt surface to preserve its pure-CE scope. - https://www.figgroup.co.uk/videos/how-to-get-cyber-essentials-certified - Explicitly excluded from llms.txt coverage. - https://www.figgroup.co.uk/defence-cyber-certification - DCC product hub remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/defence-cyber-certification/cyber-risk-profile - DCC reference page remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/defence-cyber-certification/scoping-guide - DCC reference page remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/dcc-level-0-certification - Purchase-process guide linked from homepage certification cards. - https://www.figgroup.co.uk/defence-cyber-certification/level-0 - DCC product page remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/defence-cyber-certification/level-1 - DCC product page remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/defence-cyber-certification/level-0-vs-level-1 - DCC comparison page remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/defence-cyber-certification/trust/claims - DCC trust page remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/how-to-get-defence-cyber-certification-uk - DCC educational route remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/cyber-essentials-micro - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/cyber-essentials-small - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/cyber-essentials-medium - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/cyber-essentials-large - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/cyber-essentials-plus-micro - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/cyber-essentials-plus-small - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/cyber-essentials-plus-medium - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/cyber-essentials-plus-large - Tier-specific product marketing page discoverable through XML sitemap; omitted from focused llms.txt navigation. - https://www.figgroup.co.uk/compare/vanta - Platform-vendor comparison remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/compare/drata - Platform-vendor comparison remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/compare/secureframe - Platform-vendor comparison remains indexable in sitemap; omitted from the CE-only llms.txt surface. - https://www.figgroup.co.uk/compare/tugboat-logic - Platform-vendor comparison remains indexable in sitemap; omitted from the CE-only llms.txt surface. ## Maintenance The generated files share product data, page FAQs, review evidence and route policy. Changes to prices, scope, URLs or evidence require regeneration and validation. Review dates are not automatically advanced by builds.