CYBER ESSENTIALS PLUS VULNERABILITY SCANNING

Preparing for Cyber Essentials Plus?

Identify and address external security vulnerabilities before your official assessment. Get professional, one-time vulnerability scanning from Clone Systems starting at $99, with detailed reporting and remediation rescans included.

CYBER ESSENTIALS PLUS REQUIREMENTS

Why External Vulnerability Scanning Matters.

Cyber Essentials Plus is a UK cybersecurity certification that independently verifies an organization’s implementation of essential security controls.

The assessment includes external vulnerability testing of relevant internet-facing infrastructure.

Identifying security weaknesses before your assessment gives your organization time to apply updates, address vulnerabilities, and verify remediation.

What Should You Check Before Your Assessment?

High & Critical Vulnerabilities

Identify known security vulnerabilities that could affect your external infrastructure.

Outdated Software

Detect vulnerabilities associated with outdated software and missing security updates.

Unsupported Systems

Review externally identifiable software and services for potential security exposure.

Vulnerable Remote Access

Identify known vulnerabilities affecting internet-facing VPNs and remote access services.

SECURITY UPDATE MANAGEMENT

Are Your Systems Up to Date?

Cyber Essentials requires applicable high-risk and critical security updates to be installed within 14 days of release.

This includes relevant updates addressing vulnerabilities with CVSS v3 scores of 7.0 or higher.

Before your Cyber Essentials Plus assessment, it’s important to identify known vulnerabilities and confirm that applicable security updates have been addressed.

Prepare Your Infrastructure

  • Identify your internet-facing systems.
  • Review software versions and outstanding security updates.
  • Check for known high-risk and critical vulnerabilities.
  • Apply necessary patches and configuration changes.
  • Rescan to verify remediation.

Identify Vulnerabilities Before Your Assessment

Clone Systems’ external vulnerability scanning helps detect known security weaknesses, outdated software, and vulnerabilities associated with missing security updates across your internet-facing infrastructure, giving you time to remediate and verify fixes before your Cyber Essentials Plus assessment.

PREPARE WITH CLONE SYSTEMS

Find Vulnerabilities Before Your Official Assessment.

Discovering security vulnerabilities during your Cyber Essentials Plus assessment can require additional remediation and retesting.

Clone Systems’ One-Time External Vulnerability Scanning service helps you assess your public-facing infrastructure beforehand, identify known weaknesses, and verify fixes during a 60-day remediation period.

Our proprietary scanning technology makes professional security assessments accessible without requiring an annual subscription.

What’s Included?

External Vulnerability Scanning

Identify known vulnerabilities across your authorized public-facing infrastructure.

60-Day Assessment Period

Complete your initial scan and remediation verification within your license period.

Remediation Rescans

Verify fixes until your assessment passes or your license expires.

Five Professional Reports

Access detailed findings, remediation guidance, and management-level reporting.

Agentless Technology

Assess external infrastructure without installing local scanning agents.

No Annual Commitment

Purchase a professional assessment with straightforward, one-time pricing.

ONE-TIME EXTERNAL VULNERABILITY SCANNING

Professional Scanning Starting at $99.

Choose the package that fits the number of public IP addresses or URLs you need to assess.

Starter

1 Public IP or URL
$99
One-time purchase · 60-day access

For businesses assessing one public-facing target.

  • One initial scan per licensed target.
  • A 60-day license period.
  • Remediation rescans until passing or expiration.
  • Five professional security reports.
  • No annual subscription.
Recommended

Standard

10 Public IPs or URLs
$395
One-time purchase · 60-day access

For businesses assessing multiple internet-facing systems.

  • One initial scan per licensed target.
  • A 60-day license period.
  • Remediation rescans until passing or expiration.
  • Five professional security reports.
  • No annual subscription.

Advanced

100 Public IPs or URLs
$1,995
One-time purchase · 60-day access

For organizations assessing larger external environments.

  • One initial scan per licensed target.
  • A 60-day license period.
  • Remediation rescans until passing or expiration.
  • Five professional security reports.
  • No annual subscription.

See one-time scanning pricing

PREPARING FOR CERTIFICATION

How to Prepare Your External Infrastructure.

01

Confirm Your Scope

Identify the public-facing systems and IP addresses included in your certification assessment.

02

Review Software & Updates

Check for outdated software, known vulnerabilities, and outstanding security updates.

03

Run an External Scan

Assess your internet-facing infrastructure for known security weaknesses.

04

Address the Findings

Apply updates, correct configurations, and remediate identified vulnerabilities.

05

Verify Your Fixes

Use remediation rescans to confirm that previously detected vulnerabilities have been resolved.

SECURITY REPORTING

Clear Findings. Actionable Remediation.

Every one-time scanning package includes five professional reporting options to help your team understand vulnerabilities, prioritize remediation, and track improvements.

Vulnerability Assessment Report

Detailed findings, affected systems, severity ratings, and remediation guidance.

Executive VRMS Report

A management-level overview of security risks and remediation priorities.

Vulnerability Summary Report

Identified vulnerabilities organized by host and severity.

Remediation Workbook

An Excel workbook for organizing and tracking remediation work.

Scan Comparison Report

Compare scans to identify new, resolved, recurring, and outstanding findings.

ESTABLISHED SCANNING EXPERTISE

Trusted Technology. Straightforward Security Assessments.

Clone Systems has provided cybersecurity services since 1998.

Our proprietary vulnerability scanning technology supports organizations across industries, including financial institutions.

As a PCI Approved Scanning Vendor since 2007, we bring established scanning expertise to businesses seeking professional external vulnerability assessments.

Explore our One-Time External Vulnerability Scanning service, Small Business Vulnerability Scanning, or annual External Vulnerability Scanning service.

Since 1998
Cybersecurity experience
PCI Approved Scanning Vendor
Established scanning credentials
Proprietary Technology
CloneGuard scanning platform
Buy Online
Transparent pricing and self-service access
PREPARE FOR YOUR ASSESSMENT

Find and Fix Vulnerabilities Before Your Cyber Essentials Plus Assessment.

Get professional external vulnerability scanning, detailed security reports, and remediation rescans without an annual commitment.

One-Time Scanning Starting at $99.

FREQUENTLY ASKED QUESTIONS

Cyber Essentials Plus Vulnerability Scanning FAQs

Yes. Cyber Essentials Plus includes technical testing of relevant internet-facing systems as part of the certification assessment.

Focus on known high-risk and critical vulnerabilities, outdated software, missing security updates, and vulnerabilities affecting internet-facing services.

Cyber Essentials requires applicable high-risk and critical security updates to be installed within 14 days of release, including relevant updates addressing vulnerabilities with CVSS v3 scores of 7.0 or higher.

Yes. Our one-time external vulnerability scanning service helps you identify known vulnerabilities, review findings, and verify remediation before your official assessment. Certification itself is conducted by an authorized Cyber Essentials Certification Body.

Start with the public IP addresses and internet-facing systems included in your certification scope.

Your reports provide technical findings and remediation recommendations. After addressing the issues, you can perform remediation rescans during your license period.

Our one-time packages start at $99 for one public IP or URL, with additional packages covering 10 and 100 targets.

Yes. Remediation rescans are included until your assessment passes or your 60-day license expires.

No. Our one-time scanning service is a single purchase with a 60-day assessment period.

Yes. Eligible customers can apply their one-time purchase toward an annual External Vulnerability Scanning package when upgrading within 60 days, subject to the applicable terms.