NEST by Turtledove Cyber
Scanning and reporting that's Cyber Essentials, ISO 27001, and PCI-DSS ready, made accessible for teams of all sizes with a flat fee based on headcount.
Welcome to NEST, a vulnerability management platform that gives daily updates on vulnerabilities for every device in your organisation. Traditional device management often offers a view on what official patches are available. NEST goes further: it scans for application updates and misconfigurations too, and it does so securely.
What is vulnerability management?
Vulnerability management installs a small piece of software on each of your endpoint devices and reports on vulnerabilities, misconfigurations, and any updates needed.
As of April 2026, this is a functional requirement of Cyber Essentials. Both Cyber Essentials and Cyber Essentials Plus now expect a year-round vulnerability remediation capability, because signing off your submission means attesting to year-round compliance with the controls. That includes detecting and remediating all high and critical vulnerabilities within 14 days.
NEST launched specifically to satisfy compliance requirements for Cyber Essentials, as well as other requirements that come with standards like ISO 27001 or PCI-DSS.
The same scanner the audit runs
Unlike competitors, NEST is built on IASME approved scanner technology, where others use their own secret stack. That gives you perfect parity with a Cyber Essentials Plus vulnerability scan, which makes it the easiest and most cost effective way to guarantee that you'll pass one.
Sensible features
Built openly on IASME approved scanner technology
Competitors run their own secret stack. NEST does not, which produces perfect parity with a Cyber Essentials Plus scan.
Vulnerabilities bundled as issues
Findings are grouped into the thing you actually have to fix, which makes remediation clearer and easier to hand to someone.
Designed for newbies and power users alike
Default views that make sense on the first login, so no time is wasted building clunky dashboards before the platform is useful.
Unlimited user accounts, plus one MSP seat
Every organisation gets unlimited accounts and one MSP access seat. You pay for the outcome, not per seat.
Live demo. No card, no trial.
turteldovecyber-nest.pages.dev/dashboard
What we're building next
Vulnerability inbox
See only the difference between yesterday and tomorrow, today.
Hide or risk-accept issues
Retire the things you have consciously accepted, rather than having them pester you every day.
Sticky notes on assets and issues
Bring the context that currently lives in your head, or in a spreadsheet, onto the platform.
MCP access
Let your AI agent do the heavy lifting.
Spreadsheet and XML reports
View and download automated reports, and do whatever you want with them.
Remediation email drafting
Auto-draft remediation emails to affected users and save hours a week of wrangling, or produce a bulletin for your infosec stakeholders.
Pricing
One flat fee for the whole organisation, set by headcount rather than by device or by seat. Every band includes unlimited user accounts and one MSP access seat.
Committing for a year saves 23% against billing monthly.
Micro
Under 10 employees
Small
Under 50 employees
Medium
50–250 employees
Large
250–599 employees
Registered charities and not-for-profits pay 50% off list price, plus VAT, in every band.
Design Partner
Fortnightly standups to engineer the features you need, plus custom support.
Download the brochure → PDF, 3 pages