Had a breach? What to do now
Log inGet started

Protection

Plans and pricingHow it worksManaged responseWhy CrowdStrike

Solutions

RansomwareCyber insuranceCyber EssentialsWho it's for

Company

GuidesAboutHelp and supportLog in

Malware protection that stands up to Cyber Essentials.

Cyber Essentials is the UK government-backed baseline for cyber security. Malware protection is one of its five technical controls, and it is where endpoint protection fits.

What the malware protection control requires

Under the current requirements (v3.3), a malware protection mechanism must be active on all devices in scope. Anti-malware software must be kept up to date in line with the vendor's recommendations, prevent malware from running, prevent malicious code from executing, and prevent connections to malicious websites over the internet.[1]

RequirementHow Falcon meets it
Active on all devices in scopeAgent on every Windows, macOS and Linux device, with coverage visible in the console
Updated in line with vendor recommendationsManaged from the cloud, with update policies set in your console
Prevents malware from runningNext-generation antivirus blocks known and unknown malware
Prevents execution of malicious codeBehaviour-based prevention stops malicious scripts and exploits
Prevents connections to malicious websitesCheck with us: depending on your set-up this may need Falcon's firewall rules or a separate DNS filter

Being straight with you: Cyber Essentials does not require CrowdStrike. Built-in tools such as Microsoft Defender can also meet the malware control. Falcon helps you meet it with stronger detection and, on the higher plans, people watching. Cyber Essentials also covers firewalls, secure configuration, user access and patching, which Falcon does not do on its own.

Why it is coming up more often

  • Public sector contracts: central government and its agencies require Cyber Essentials for contracts involving certain risks, such as handling personal information.[2]
  • Insurance: whole-organisation certification for UK organisations under £20 million turnover can include free cyber liability cover.[3]
  • Few have it yet: only 12% of small businesses hold Cyber Essentials, so it still sets you apart.[4]

Coffee Cup Solutions can help with the rest of Cyber Essentials as a separate piece of work. The NCSC's free Cyber Action Toolkit is also a good starting point for smaller businesses.[5]

Sources
  1. NCSC, Cyber Essentials: Requirements for IT infrastructure v3.3. www.ncsc.gov.uk
  2. Cabinet Office, PPN 014: Cyber Essentials Scheme. www.gov.uk
  3. IASME, Cyber Essentials cyber liability insurance. iasme.co.uk
  4. DSIT, Cyber Security Breaches Survey 2025/2026 (April 2026). www.gov.uk
  5. NCSC, Cyber Action Toolkit. www.ncsc.gov.uk