About CyberSpec
What it is for
CyberSpec scans the internet-facing estate you have verified you own, explains each finding in plain English, and shows what a Cyber Essentials Plus external scan would likely find before the assessor does. It is built first for MSPs and IT support firms that prepare clients for Cyber Essentials all year, and it works the same for a single business looking after its own domains.
It is a readiness tool, not a certification body. Cyber Essentials certification is issued by IASME and its certification bodies, and CyberSpec is not affiliated with IASME or the NCSC.
Who runs it
CyberSpec is built and run by its founder, Mayank Tripathi, who writes the blog and answers support. There is no sales team and no call centre: email reaches the person who built the scanner.
A one-person supplier is a fair risk to weigh, so nothing here locks you in. Plans are monthly with no contract and no minimum. You can export your account data as JSON from privacy settings at any time, and every PDF report you download is yours to keep. If CyberSpec stopped tomorrow, you would lose future scans, not the reports and exports you already hold.
Contact
- Questions, sales, support and invoices: hello@cyberspec.pro
- Security issues in CyberSpec, or scan traffic you did not expect: security@cyberspec.pro (scans come from 34.56.67.207, scan.cyberspec.pro)
- LinkedIn: linkedin.com/company/cyberspecpro
Company, data and terms
The legal entity, subprocessors and retention periods are in the privacy policy, and the contract is the terms of service. Where data is hosted, how accounts are protected and how scanning is authorised are on the security page. To see what you get before signing up, read the sample readiness report.