Table of contents
We're pleased to confirm that Energicore has achieved Cyber Essentials certification, the UK Government-backed cyber security standard overseen by the National Cyber Security Centre (NCSC) and delivered nationally by IASME.
It's a small announcement in one sense: a certificate, a badge, one more line on a compliance page. But it reflects something we'd rather be explicit about than assume people take for granted — that a platform holding property, energy, and personal data for councils, housing associations, and homeowners needs to treat security as a baseline requirement, not an afterthought.
What Cyber Essentials actually checks
Cyber Essentials isn't a marketing badge you can buy — it's an independently assessed standard built around five technical controls that, together, address the most common ways organisations are compromised over the internet:
- Firewalls and internet gateways — boundary controls between our systems and the wider internet.
- Secure configuration — devices and software configured to reduce vulnerabilities, not left on default settings.
- User access control — accounts and permissions limited to what each person actually needs.
- Malware protection — defences against malicious software across our estate.
- Security update (patch) management — keeping software current against known vulnerabilities.
We completed a self-assessment against all five, which was then independently reviewed and verified by a certifying body before the certificate was issued. The certification is renewed annually, so this isn't a one-off checkbox — it's a standard we recertify against every year.
Worth being precise about scope, too: this is the base Cyber Essentials certification, not Cyber Essentials Plus (which adds an external technical audit on top of the same five controls). We're stating that plainly rather than letting the badge speak for more than it does.
Why this matters if you're evaluating us
If you're a local authority, housing association, or advice charity going through a procurement or governance process, this sits alongside the rest of what we already publish on our security and compliance page: ICO registration (ZB909895), UK/EEA-only hosting, encryption in transit, role-based access, and Data Processing Agreements on request. Cyber Essentials adds an independently verified baseline on top of those existing commitments, rather than replacing any of them.
If your governance team needs a copy of the certificate for a tender or due-diligence pack, get in touch and we'll send it over.
What we're not claiming
No certification makes a platform invulnerable, and we're not going to imply otherwise. Cyber Essentials is explicitly designed by the NCSC to guard against the most common, opportunistic internet-based attacks — it's a floor, not a ceiling. We'll keep investing in security beyond what the scheme requires, and we'll keep saying so plainly rather than treating a badge as the end of the conversation.
If you have a security question we haven't answered here or on our security and compliance page, email us at hello@energicore.app.