NCSC launches free in-browser security threat checks for SMBs
The new cyber toolkits will help SMBs assess their cyber readiness in a matter of minutes


SMBs across the UK can now access new tools aimed at reviewing their cyber security processes following the launch of two new services from the National Cyber Security Centre (NCSC).
The cyber security centre has unveiled two new toolkits that it said are designed to “help millions of small businesses stay secure online and protect their livelihoods”.
The ‘Cyber Action Plan’ and ‘Check your Cyber Security’ tools are both free-to-use online, and form part of the centre’s long-running Cyber Aware campaign. The scheme aims to raise cyber security awareness for small businesses, microbusinesses, and sole traders.
According to the NCSC, the Cyber Action Plan allows users to “answer a few simple questions to get a free personalised action plan" which outlines how organisations can protect against cyber attacks and emerging threats.
Meanwhile, the Check Your Cyber Security service is a more comprehensive tool which allows users to perform free online tests to identify common vulnerabilities in public-facing IT systems.
“All checks are remote, without the need to install software and use the same kind of publicly available information as cyber criminals use to find easy targets,” the NCSC said.
This includes an IP address and website assessment tool which allows SMBs to check if their infrastructure is resilient to common attack methods that could lead to data theft.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
In addition, a web browser checker assesses whether web browsers are out of date and therefore vulnerable to exploitation by threat actors.
According to the NCSC website, an email security tool will be made publicly available in due course. This will allow small businesses to check if email domains have “good practice protections in place” to mitigate growing email and phishing-based attacks.
UK SMBs facing increased threats
Commenting on the launch of the services, Lindy Cameron, CEO at the NCSC, said both tools will enable businesses to fine-tune their cyber practices amid a period of escalating threats.
Figures from the government’s last Cyber Breaches Survey revealed that 38% of the UK’s 5.5 million SMBs suffered a cyber incident last year.
“Small businesses are the backbone of the UK, but we know that cyber criminals continue to view them as targets,” she said.
RELATED RESOURCE
“That’s why the NCSC has created the Cyber Action Plan and Check Your Cyber Security to help them boost their online defences in a matter of minutes. I strongly encourage all small businesses to use these tools today to keep the cyber criminals out and their operations on track.”
Martin McTague, National Chair of the Federation of Small Businesses (FSB) welcomed the move as a positive step to support SMB security across the UK and equip them with the “right tools and tailor-made guidance” to tackle growing threats.
“A fifth of small businesses see cyber crime as the most impactful crime in terms of both cost and disruption to their operations,” he said.
“We’re glad to see our recommendations to raise small firms’ awareness on cyber security has been taken forward in NCSC’s Cyber Aware campaign.”

Ross Kelly is ITPro's News & Analysis Editor, responsible for leading the brand's news output and in-depth reporting on the latest stories from across the business technology landscape. Ross was previously a Staff Writer, during which time he developed a keen interest in cyber security, business leadership, and emerging technologies.
He graduated from Edinburgh Napier University in 2016 with a BA (Hons) in Journalism, and joined ITPro in 2022 after four years working in technology conference research.
For news pitches, you can contact Ross at ross.kelly@futurenet.com, or on Twitter and LinkedIn.
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Lateral moves in tech: Why leaders should support employee mobility
In-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
By Keri Allan
-
How the channel can simplify cybersecurity to build trust and agility for SMBs
Industry Insights There's an opportunity for the channel to move from tech resellers to trusted advisors on security and help alleviate the security burden on SMBs
By Ben Aung
-
Why ransomware attacks happen to small businesses – and how to stop them
In-depth With a surge in small business ransomware attacks, it's critical to know what makes your organization a target and what defensive measures you can take
By Kate O'Flaherty
-
Four measures SMBs can take to avoid common security pitfalls
In-depth Security can be challenging for SMBs, but it’s possible to make yourself more resilient to reduce the impact of cyber attacks
By Kate O'Flaherty
-
Microsoft 365 security checklist
Whitepaper A practical guide for the time-strapped admin
By ITPro
-
Datto SMB cyber security for MSPs report
Whitepaper A world of opportunity for MSPs
By ITPro
-
State-sponsored hackers are diversifying tactics, targeting small businesses
News Research has warned that state-sponsored threat actors will increasingly target smaller enterprises in 2023
By Ross Kelly
-
Online banks servicing UK's SMBs found to have 'serious' security flaws
News TSB and Virgin Money were both ranked bottom of a study examining security practices at leading UK banks
By Ross Kelly
-
How MSPs can capitalise on SMBs' security spending spree
Sponsored A single cyber attack can easily provide a death blow to SMBs and they’re now ready to spend their way to safety
By IT Pro