Secure the ascent.

One platform for your compliance programme, security operations and supplier assurance. The evidence gathers as you work, so when an auditor asks for it, you already have it.

  • Cyber Essentials
  • Cyber Essentials Plus
  • ISO 27001
  • Defence Cyber Certification
Fictional figures · Wrenmoor Defence Systems Ltd

Compliance programme

Control coverage

0/193

controls met

Frameworks
  • Cyber Essentials Plus44/44
  • Defence Cyber Certification124/149
Policies
  • 22published
  • 2draft
  • 14to sign
Coverage trend

+29 points in eight weeks

Product tour: select an area

Track every control across Cyber Essentials, ISO 27001 and the Defence Cyber Certification from one programme.

See the gaps. Take action. Build trust.

You do not need to be a security specialist. StandAssured shows where you stand, tells you the next step, and keeps the proof as you go.

  1. See the gaps

    Answer the scheme's questions once. StandAssured scans what an attacker can see and shows which controls still need work.

  2. Take action

    Each gap becomes a task with an owner and a due date, so everyone knows what to do next and why it matters.

  3. Build trust

    Export the audit pack, publish a Trust Centre and keep monitoring the controls between audits.

Do the work once. Count it everywhere.

Every scheme maps to one set of shared controls. Meet a control once and it counts towards each certificate it belongs to.

  • Controls mapped across Cyber Essentials, ISO 27001 and the Defence Cyber Certification
  • Policies signed in the product, with a record of who signed which version
  • Audit packs export the evidence an assessor asks for
Illustration with fictional figures for Wrenmoor Defence Systems Ltd.

Evidence from live signals, not screenshots.

StandAssured reads the tools you already run and checks what an attacker can see, so the evidence stays current between audits.

  • Attack-surface discovery finds your domains, subdomains and lookalikes
  • Connectors for identity, devices, code and cloud
  • An alert when a monitored control drifts
Illustration with fictional figures for Wrenmoor Defence Systems Ltd.

Check your suppliers. Show your customers.

Send questionnaires to suppliers without asking them to sign up, then publish a Trust Centre that answers your own customers' questions.

  • Supplier questionnaires answered through a secure link
  • Supplier risk recorded beside your own
  • A public Trust Centre that shows what you hold
Illustration with fictional figures for Wrenmoor Defence Systems Ltd.

Built for UK schemes, from your first certificate to ISO 27001.

Start with Cyber Essentials and keep climbing. Everything you prove on the way carries forward to the next scheme.

  1. Cyber Essentials

    The self-assessment, with question sets kept in step with the IASME registry.

  2. Cyber Essentials Plus

    The hands-on audit, with the evidence already gathered from your estate.

  3. Defence Cyber Certification

    The defence supply chain's scheme, mapped to the same controls.

  4. ISO/IEC 27001:2022

    A management system made of live registers, not a folder of documents.

People behind the platform.

When self-service runs out, Apexward’s own team takes over, ordered and tracked in the same product. No hand-off to another supplier.

Talk to our team
  • Cyber Essentials Self-Assessment

    Annual Cyber Essentials self-assessment certification, priced by organisation size.

    £320–£600 by size a year + VAT

  • Cyber Essentials Plus Certification

    Hands-on technical audit building on the Cyber Essentials self-assessment.

    £840–£3,340 by size a year + VAT

  • Managed Cyber Essentials / Plus

    Implementation, consultancy, continuous compliance monitoring, and dedicated vCISO quarterly reviews.

    £14 per endpoint a month + VAT, 12-month minimum

  • Penetration Test

    An annual external penetration test, with findings delivered into the vulnerabilities queue.

    £2,400–£7,800 by size a year + VAT

  • vCISO Hours

    A named security lead on a monthly retainer, with the management review written into the ISMS.

    £950–£4,200 by size a month + VAT, 3-month minimum

  • Managed Email Security

    Email threat hunting, BEC investigation, and incident response per user.

    £4 per user a month + VAT

A banded price depends on your organisation’s size.

Connects to the tools you already run.

Identity, devices, email, code and cloud. StandAssured reads them for evidence, so nobody has to screenshot a settings page again.

  • SCIM provisioningIdentity
  • Microsoft 365Productivity
  • Microsoft IntuneMDM and RMM
  • Microsoft Defender XDREndpoint and EDR
  • Google WorkspaceProductivity
  • GitHubDevSecOps
  • GitLabDevSecOps
  • OktaIdentity
  • DuoIdentity
  • 1Password EventsPasswords and secrets
  • Amazon Web ServicesCloud
  • Cyber Protect CloudBackup and DR

Questions, answered.

Who is StandAssured for?

UK organisations that need a certificate, usually because a customer, contract or insurer asks for one, and have no security team of their own. It tells you what to do next and why it matters for the certificate.

Which schemes and standards does it cover?

Cyber Essentials, Cyber Essentials Plus, the Defence Cyber Certification and ISO/IEC 27001:2022, plus a UK GDPR pack. A control you meet once counts towards every scheme it maps to.

Can Apexward do the work for us?

Yes. Apexward's own team delivers Cyber Essentials Plus assessments, penetration tests, vCISO time and managed security services, ordered and tracked in the same product.

Are the figures on this page real?

No. The product tour and the pictures on this page use a fictional company, Wrenmoor Defence Systems Ltd. They show how the product reads, not any customer's results.

Start the climb today.

Create an account, choose the scheme you need, and see your next step straight away.