Do you know where your
business is vulnerable?
Only 3% of UK businesses hold Cyber Essentials certification. 43% experienced a breach in 2025. An external scan combined with a structured assessment shows you exactly what's exposed, maps your gaps against Cyber Essentials, and gives you a clear plan to fix it.
The cybersecurity gap facing UK SMEs
The Cyber Security and Resilience Bill is expanding enforcement scope. UK GDPR Article 32 requires "appropriate technical measures." Most SMEs fall into one of three traps.
"We're too small to be targeted"
39% of UK businesses identified a cyber attack in 2025. Automated attacks don't discriminate by company size — they target vulnerabilities, and SMEs typically have more of them. A breach costs an average of £8,170 for small businesses, before factoring in regulatory penalties and reputational damage.
"We have antivirus, we're covered"
Cyber Essentials requires five technical controls: firewalls, secure configuration, access control, malware protection, and patch management. Most SMEs cover one or two. The gaps in the others are where breaches happen — and where regulators look when assessing "appropriate measures."
Paying for a penetration test
A full penetration test costs £5,000–£15,000+. It's designed for businesses with mature security postures who need deep testing. Most SMEs need the basics first — know what's exposed, close the obvious gaps, and work towards Cyber Essentials certification.
Bartram Cyber gives you the picture: what's exposed externally, where your policies have gaps, and a clear path to Cyber Essentials readiness.
Choose your screening tier
Three tiers based on the depth of assessment you need. Every tier combines automated external scanning with a questionnaire-based security assessment.
Tier 1
£497
External scan, questionnaire screening, and AI-powered compliance report.
- External infrastructure scan
- Cyber Essentials gap analysis (all 5 controls)
- UK GDPR Article 32 assessment
- Prioritised remediation roadmap
- Human-reviewed report
Tier 2
£697
Everything in Tier 1, plus Cyber Essentials preparation roadmap with assessor guidance.
- Everything in Tier 1
- Cyber Essentials certification preparation roadmap
- Assessor-ready evidence checklist
- Per-control remediation guidance
Tier 3
£997
Everything in Tier 2, plus incident response plan template and security policy templates.
- Everything in Tier 2
- Incident response plan template
- Security policy templates
- Board-ready cyber risk summary
Questions before you buy? Email us — we're happy to help you pick the right tier.
How it works
We scan your external infrastructure
Automated tools scan your domain for open ports, exposed services, SSL/TLS configuration, DNS security, and email authentication. You also complete a questionnaire about your internal security practices.
AI analyses scan + questionnaire
Our AI combines the external scan findings with your questionnaire responses, mapping gaps against the five Cyber Essentials controls and UK GDPR Article 32. A human reviews every report before delivery.
You get a clear report
A professional PDF with your security posture score, per-control gap analysis, external vulnerability findings, and a prioritised remediation roadmap — including Cyber Essentials certification readiness (Tier 2+).
What we check — and what we don't
Transparency is a core principle. We tell you exactly what our screening covers.
What's included
- External infrastructure scan — open ports, exposed services, SSL/TLS, DNS, email authentication
- Cyber Essentials gap analysis — all five controls (firewalls, secure config, access control, malware, patching)
- UK GDPR Article 32 assessment — "appropriate technical and organisational measures"
- Cyber Security and Resilience Bill readiness — for businesses likely in scope
- Password and access control policy assessment
- Backup and recovery posture evaluation
What's not included
- Penetration testing or vulnerability exploitation
- Internal network assessment
- Malware analysis or incident response
- Cyber Essentials certification (we prepare you; an assessor certifies)
- Physical security assessment
- Social engineering testing
We use automated scanning tools (port scanning, SSL analysis, DNS inspection) and AI analysis (Claude API), with every report quality-checked by a human before delivery.
A real person behind the service
I'm Robert, the founder of Bartram. Every report that leaves Bartram is reviewed by me before it reaches you. If something doesn't meet the standard, it doesn't ship.
More about Bartram →Compliance beyond cybersecurity
Bartram screens across four compliance domains. Each delivers a professional report with a prioritised action plan.
Know where your business is vulnerable
Professional cybersecurity compliance screening from £497. External scan, Cyber Essentials gap analysis, and a clear plan to close the gaps.