A customer sends a security questionnaire
Answer it from what has actually been verified, not from memory. CyberProva drafts each reply from your assessment and shows where the evidence is missing.
Business plan and above
INDEPENDENT CYBER ASSURANCE FOR SMALL BUSINESSES
Your IT provider says you're protected. CyberProva shows you the evidence.
Connect Microsoft 365 and see which security controls are actually in place, which are only claimed, and what to ask your IT provider for. You get plain-English findings and a report your board, insurer and customers can rely on.
✓ Read-only access to Microsoft 365
✓ No software to install
✓ No card needed
✓ Hosted in the UK
Sample data
✓Cyber assurance
78%assured
- 70 verified
- 14 waiting for evidence
- 6 need action
Latest verification
ID-01.01 MFA enabled for administrators
Verified · evidence from IT provider
THE PROBLEM
You're outsourcing IT. You're not outsourcing responsibility.
Your IT provider runs your systems and your Microsoft 365. But when an insurer, a customer or your board asks the question below, the answer is yours to give.
“How do you know those controls are actually in place?”
Most businesses can only pass on what they've been told. CyberProva gives you an independent answer, backed by evidence.
43% of UK businesses reported a cyber security breach or attack in the preceding 12 months in the government's 2025/2026 survey. Read the UK government survey.
- They say"MFA is switched on for everyone."
- CyberProva checksIt reads your Microsoft 365 configuration and asks your provider for proof of what it can't see.
- You can show itEvery control has a status, its evidence and a date, ready when someone asks.
WHEN YOU NEED IT
When someone asks "are you secure?", have the answer ready.
Your cyber insurance is up for renewal
Insurers ask about MFA, backups and admin accounts. See the evidence behind each answer before you sign the form.
You're preparing for Cyber Essentials
Our checks cover all five Cyber Essentials technical control areas, so you can see where you stand before you apply.
The board or an investor wants assurance
Turn technical findings into a one-page summary that shows what's verified, what isn't and who is fixing it.
You're reviewing your IT provider
See what your provider has evidenced, what's outstanding and how quickly they respond, before the contract renews.
HOW IT WORKS
From assumption to evidence in five steps
Connect
Sign in with Microsoft and grant read-only access. Automated checks start straight away.
Request evidence
For anything that can't be checked automatically, send your IT provider a secure link. They upload proof without creating an account.
Verify
Review each piece of evidence against the control it supports, and accept or reject it.
Fix
Prioritised findings show what needs attention, why it matters and who owns the fix.
Report
Share a clear report with your board, insurer or customers, and keep the history for next time.
YOUR IT PROVIDER STAYS IN THE LOOP
Your IT provider doesn't need another portal.
When a control needs proof, CyberProva emails your provider a secure link. It names the check and the kind of evidence that usually satisfies it. They upload the file and they're done. No login, no new system to learn.
IT providers: CyberProva is a simple way to show clients the work you already do. Point them here, and answer their questions once, with evidence.
“Please provide evidence that multi-factor authentication is enforced for all administrator accounts (ID-01.01). Typical evidence: an export or screenshot of the Entra authentication settings.”
Secure link valid for 14 days · up to 10 files · PDF, images, Word, Excel, CSV or textEVIDENCE, NOT JUST A SCORE
Not just a score. The evidence behind it.
Every control shows its status, where the answer came from (an automated check or evidence from your provider) and when it was last confirmed. Nothing is marked as passing just because nobody has checked it.
Sample data
| Control | Check | Status |
|---|---|---|
| ID-01.01 | MFA enabled for administrators | Verified · evidence from IT provider |
| M365-01.01 | Microsoft Secure Score is reviewed | Verified · automated check |
| ID-01.03 | Legacy authentication disabled | Action required |
| ID-02.01 | Separate administrator accounts used | Waiting for evidence |
| BC-01.04 | Restore testing has been completed recently | Waiting for evidence |
| BEC-01.01 | Bank detail changes are verified by callback to a known number | Verified |
SEE IT IN ACTION
Watch the demo
See what is supported by evidence, what remains open and who owns the next action.
PRICING
Start free. Upgrade when you need more.
The Free plan includes three assessments and three website scans, so you can see where you stand before you pay anything.
Free
See where you stand, at no cost.
Free
No card required
- 3 lifetime core assessments
- 3 lifetime website/DNS scans across 1 selected hostname
- Full saved findings and on-screen board summary
- Evidence review and basic action list
- Optional Microsoft 365 connection
FOR EVIDENCE & REPORTING
Business
Turn your findings into evidence you can share.
£59 /month
£59 per month, cancel any time
- Unlimited on-demand assessments and scans
- 5 hostnames and advanced Zero Trust checks
- Remediation ownership, deadlines and risk acceptance
- Export reports and quarterly board packs
- In-app configuration-change alerts
Professional
Keep your security checks running automatically.
£129 /month
£129 per month, cancel any time
- Everything in Business
- Email alerts when something changes or regresses
- Scheduled assessments: daily, weekly or monthly
- Scheduled Zero Trust and website monitoring
- Read-only integration API
Enterprise
For groups, multiple sites and bespoke arrangements.
Price on application
Tailored to your organisation
- Everything in Professional
- Multiple workspaces under one agreement
- Priority support with a named contact
- Onboarding and review sessions
- Bespoke reporting
Free needs no card. Paid plans exclude VAT where applicable. Trial access is available with a valid promotion code.
Questions businesses ask before they start
What access does CyberProva need?
Read-only access to your Microsoft 365 security settings, granted by one of your administrators. It can't change anything in your tenant, read your emails or open your files. The full list of permissions is on our Security page.
Where is my data stored?
In Microsoft Azure data centres in the UK. Evidence files are stored privately and are only available to people in your workspace.
Will my IT provider mind?
Good providers welcome it, because it lets them show their work. They receive a simple link, need no account, and answer each request once.
Do I need technical knowledge?
No. Findings are written in plain English, with why each one matters and what to ask your provider to do.
Is this a Cyber Essentials certification?
No. CyberProva helps you understand and evidence your controls. Certification is carried out by an accredited Certification Body.
Can I cancel?
Yes. Monthly plans can be cancelled at any time from your billing page, and your saved results stay readable on the Free plan.
Stop relying on reassurance. Start collecting evidence.
Find out which of your cyber controls are working, which aren't, and what your IT provider still needs to prove. It takes a few minutes, and it's free.
Get your free security check
Microsoft sign-in · Read-only · No card needed