NCSC BASELINE / FREE DAST AUDITOR

UK Cyber Essentials Technical Controls Pre-Audit Checker

Audit your web perimeter against the 5 NCSC technical control pillars in 10 seconds.

NON-DESTRUCTIVE DAST AUDIT // ZERO INSTALLATION RFC & NCSC BASELINE ALIGNED

Quick Test:

✓ Read-Only Socket Handshake ✓ 10-Second Executive Breakdown ✓ CMA 1990 Statutory Safe

Live Perimeter Audit:

--/100 PASS

Security Pillar	Status	Inspection Telemetry

Need 24/7 autonomous monitoring & 1-click healing for this domain? Protect Fleet (£19/mo) →

Control Framework

NCSC Cyber Essentials v3.1

Core Focus

Firewalls, Secure Config, Patch Mgmt

Inspection Protocol

DAST 12-Engine Heuristic

Audit Output

Cryptographic Alignment Dossier

Avoid Costly Re-Assessment Fees on Your Official IASME Audit

Failing your official UK Cyber Essentials or Cyber Essentials Plus audit results in re-assessment fees and delayed public sector contract awards. Over 74% of initial failures are caused by basic web perimeter defects: missing transport headers, outdated TLS cipher suites, open management ports, or permissive origin policies.

Production-Ready Remediation Snippets

Select your deployment environment below and copy the tailored configuration snippet to enforce compliance immediately:

Nginx

# /etc/nginx/conf.d/cyber_essentials.conf
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
server_tokens off;

Frequently Asked Questions

What are the 5 core technical control themes of Cyber Essentials?

The 5 themes are: 1. Firewalls, 2. Secure Configuration, 3. User Access Control, 4. Malware Protection, and 5. Security Update & Vulnerability Management.

Does OhmCode issue official Cyber Essentials certificates?

No. OhmCode provides automated pre-audit technical readiness diagnostics and telemetry. Official statutory certification is granted by accredited IASME Certification Bodies.

CONTINUOUS SENTINEL FLEET / UK STATUTORY RESISTANCE

Commercial Subscription Plans

Transparent UK billing with isolated statement descriptors. Cancel anytime with 1 click.

SOLO BUILDERS & DEV TEAMS

Team Sentinel

Stop shipping exposed keys and missing headers in rapid AI builds.

£ 19 /month

⚡ Just 6p / site / day (£1.90/site across 10 domains)

Up to 10 Target Domains (6p / site / day · £1.90/mo)
Full 12-Engine DAST & AST Code Auditing
Instant AI Prompt Remediation Exporter
Git Pre-Commit Secret Blocker Hook

MOST POPULAR • DIGITAL AGENCIES & AUDITORS

DIGITAL AGENCIES & AUDITORS

Agency & Compliance

The Retainer Justifier. Audit client sites, prove compliance, and automate remediation.

£ 79 /month

Up to 50 Target Domains
Signed UK Cyber Essentials Readiness & Alignment Proofs
OhmHeal 1-Click Autonomic Secret & Header Patcher
OhmGuard AI Prompt Proxy on localhost:8080
SARIF 2.1.0 GitHub Actions CI/CD Workflows

REGULATED ENTERPRISE & FLEET OWNERS

Sovereign Enterprise

Statutory security armor for high-stakes regulated UK portals.

£ 299 /month

Unlimited Sovereign Asset Fleet
Ofsted NMS 24, NHS DSPT & DPA 2018 Statutory Checklists
AI Project Manager Telemetry Bus & Autonomic Ingestion
Dedicated Incident SLA, Webhook Dispatch & Priority Recovery

Return to Platform Showcase