A free check of your website and email settings, with a friendly to-do list that tells you exactly what to fix and why it matters. Every fix is mapped to the government-backed Cyber Essentials themes.
Gentle, look-only checks of what your domain already shows the world: nothing is installed and nothing is attacked. The free score works for any domain. You verify ownership to unlock the full report and monitoring.
SPF, DKIM and DMARC: the settings that stop criminals sending fake invoices that look like they came from you.
Is your certificate valid, up to date and using modern encryption? Is HTTPS switched on everywhere?
Simple settings that make your site harder to copy, frame or tamper with.
Mail servers, DNSSEC, and software version numbers you're giving away.
Your high-risk count in plain English, your tidiness score and your top 3 things to fix.
One-off, step 1. A PDF with every finding, step-by-step fixes and the Cyber Essentials theme each one relates to.
Add-on after your full report. A fresh full PDF report every month for 1 domain, plus alerts if your risks change or your certificate is about to expire, and your dashboard.
Add-on after your first full report. Up to 5 domains, each with a fresh full report every month, alerts and dashboard. Great for accountants, IT support and agencies.
Prices in GBP. Start with the £29 full report, then keep it tidy with monitoring. Cancel monitoring any time.
One plain-English email a month: the UK scams actually hitting small businesses, one fix you can do in ten minutes, and nothing else.
Tidy Cyber is run by Chris Kirby, a UK engineering technician in Brighton who is studying Computer Science and specialising in cyber security. "Most small businesses I meet have never been told that one missing DNS setting lets anyone send email pretending to be them. Tidy Cyber finds those gaps automatically and explains them in plain English, with no jargon and no scare tactics."
Chris Kirby, founder
Tidy Cyber is an external, automated check of publicly visible settings. It is not Cyber Essentials certification (only IASME-licensed certification bodies can certify), an audit or a penetration test. It can't see your devices, accounts or internal network.