Singapore's Cyber Essentials mark helps SMEs put the right cyber hygiene in place. Run a free external scan to see how your public-facing posture measures up before you certify.
Scan your site free →Cyber Essentials is a cybersecurity certification from the Cyber Security Agency of Singapore (CSA), aligned to the SS 712:2025 standard. It recognises organisations that have put in place good cyber hygiene to protect against the most common cyber attacks.
It's designed for organisations — especially SMEs — that are starting their cybersecurity journey. It focuses on the measures that give the greatest protection for the least effort, organised around five practical categories.
Know the hardware, software and data you have, and who has access — you can only protect what you can see.
Put protection in place: anti-malware, secure configuration, and controlled access to accounts and data.
Keep software and devices patched and current so known vulnerabilities are not left exposed.
Back up essential data, keep it separated, and be able to restore it after an incident.
Have a simple, practised plan to detect, respond to and recover from a cyber incident.
Our free scanner assesses the externally observable hygiene signals tied to these categories — TLS configuration, security headers, email authentication (SPF/DKIM/DMARC) and exposed services. It is a fast readiness check, not the formal certification assessment.
The Cyber Essentials mark is aimed at organisations, particularly SMEs, that want to put baseline cyber hygiene in place. Larger or more mature organisations may pursue the CSA Cyber Trust mark instead.
No. Singapore's Cyber Essentials mark is issued by the Cyber Security Agency of Singapore under SS 712:2025 and is distinct from the UK NCSC Cyber Essentials scheme, though both share a cyber-hygiene philosophy.
No. Certification is awarded by CSA-appointed certification bodies. This free scan is a readiness check for the internet-facing signals; use it to fix obvious gaps before you certify.