Firevault Awarded Cyber Essentials and Cyber Essentials Plus Certification

Firevault has been awarded Cyber Essentials and Cyber Essentials Plus certification, the UK Government-backed scheme run by the NCSC, following an independent technical audit of its systems and controls.

Mark FermorCTO, CMO and Founder, Firevault

Published 26 July 2026 · 2 min read

Firevault is pleased to announce that it has been awarded both Cyber Essentials and Cyber Essentials Plus certification, the UK Government-backed scheme developed by the National Cyber Security Centre (NCSC) to help organisations guard against the most common cyber threats.

About the Certification

Cyber Essentials verifies that an organisation has the five core technical controls in place: boundary firewalls, secure configuration, user access control, malware protection, and security update management. Cyber Essentials Plus goes further, requiring a hands-on technical audit by an independent, qualified assessor, including vulnerability testing of internet-facing systems, workstations, and email clients.

Why It Matters

Achieving Cyber Essentials Plus is an independently verified statement that our controls have been tested in practice, not just declared on paper. For the legal, accountancy, and regulated-sector clients we serve, it provides supply-chain assurance that Firevault handles their data with the rigour their own regulators and insurers expect.

What This Means for Our Clients

Clients using Offline Secure Storage®, Control, and LUV services now have documented, third-party evidence that Firevault''s operational systems meet the UK Government''s baseline for cyber hygiene. This evidence can be referenced in SRA, ICAEW, GDPR, and cyber-insurance due-diligence conversations, and forms part of the assurance pack we provide to prospective customers.

A Word From Firevault

Mark Fermor, Founder of Firevault, said: "Cyber Essentials Plus is a meaningful milestone for us. Our clients trust Firevault with the data that matters most to their business, so independent verification of our controls is the least they should expect. It sits alongside the physical protections we build into every vault, and reinforces our commitment to secure data and trusted futures."

Ongoing Commitment

Firevault will maintain annual recertification and continue to expand its programme of independent assessments as the business grows.

Key Takeaways

• Both certifications achieved: Cyber Essentials and the more rigorous Cyber Essentials Plus.
• Independently tested: Hands-on technical audit by a qualified external assessor.
• Supply-chain ready: Supports SRA, ICAEW, GDPR, and cyber-insurance due diligence.
• Annually renewed: Certification is maintained through yearly reassessment.