Schools Cyber Security Assessment

A cyber security assessment for schools: understand your real exposure to the attacks hitting the education sector, fix what matters, and evidence it with Cyber Essentials.

A cyber security assessment for schools: understand your real exposure to the attacks hitting the education sector, fix what matters, and evidence it with Cyber Essentials.

Why schools are targeted

Schools hold exactly what attackers want, pupil and family data, payment details and safeguarding records, often on stretched budgets and mixed, ageing systems. Ransomware and phishing have hit schools and trusts hard. A cyber security assessment tells you where you are genuinely exposed, so you can spend your limited time and budget on the risks that actually matter.

Fixed-price testing for schools

Two tightly-scoped tests you can buy online at a fixed price, no quote needed, ideal for a school or college website and public-facing systems.

Your school website (WordPress, Joomla and similar public-facing sites) fits the CMS test. It is not for a learning management system such as Moodle or Canvas, which we scope separately. Anything larger or bespoke, an internal network or authenticated systems for example, we scope and quote to your environment.

Cyber Essentials for schools

Testing shows where you stand; Cyber Essentials proves you have the basics in place. Schools increasingly need it for funding bids, supplier contracts and data protection. As a Cyber Essentials Certification Body we can certify your school directly. See Cyber Essentials for schools.

Why it matters who assesses your school

CREST accreditedCyber Essentials Certification BodyBESA LaunchPad member

CREST accredited. CREST independently audits our testing methodology, reporting, data handling and tester competence. For a school that means a real, manual test by a qualified tester, and a report your governors, insurers and the DfE will accept, not an automated scan dressed up as an assessment.

Cyber Essentials Certification Body. We are appointed by IASME, the NCSC’s delivery partner, to certify Cyber Essentials directly, so your certificate comes from us with no reseller in the middle. It is the recognised way for a school to evidence the security basics.

BESA member. We are a member of BESA, the British Educational Suppliers Association, through its LaunchPad programme. It means we are a recognised supplier to the education sector who understands how schools and colleges actually work, from the MIS to the safeguarding obligations.

Talk to us about your school

Tell us what you need and we will point you to the right assessment, or scope something bigger. Use our contact form and you will hear back within one business day. Your details are handled by a real person, never fed into AI.

Common questions

Do you work with primary and secondary schools?

Yes, and with colleges and multi-academy trusts. We scope to your size and budget, and we work remotely first so location is no barrier.

How much does it cost?

Our fixed-price tests start at £2,500 +VAT for a school website and £3,000 +VAT for external IPs. Anything larger we scope and quote. Cyber Essentials is priced by organisation size.

Do you certify Cyber Essentials too?

Yes. We are a Cyber Essentials Certification Body, so we can test your systems and certify your school, from one provider.

Related

Assess your school properly.

CREST-accredited testing, Cyber Essentials certification, and a provider that knows education.