Check your readiness

Is your operating system or software still supported?

Free tool · A6.1 and A6.3

Search the product, see every version with its end-of-support date and whether it passes A6.1.

Updated 3 November 2026
Key facts
Requirement
All software on in-scope devices must be licensed and supported, and removed when it becomes unsupported
Questions
A6.1 A6.2 A6.3 A6.6 A6.7
Also counts
Router and firewall firmware (treated as an operating system), browsers, plugins, extensions, frameworks
Escape route
A defined sub-set with no internet access, described in A2.2.1, A2.2.2 and A6.7
Products covered
Windows 10, Windows 11, Windows Server 2012 R2, macOS, iOS and iPadOS, Android, Microsoft Office 2016, 2019 and 2021, Ubuntu, Windows Server 2016, 2019, 2022 and 2025, Google Chrome, Microsoft Edge, Mozilla Firefox, Adobe Acrobat Reader, Java (Oracle JDK and OpenJDK builds), Microsoft Exchange Server, Microsoft SQL Server
Short answer

For Cyber Essentials, software is supported only while its vendor still issues security updates for the version you run. Anything past its end-of-support date is unsupported for A6.1, and leaving it in scope means the licensed-and-supported requirement behind A6.3 and A6.6 is not met, so the application will not pass. Search below to check 16 common products version by version.

16 products · 82 versions

Dataset last checked 3 November 2026

Operating system · Microsoft

Windows 10

2 of 7 unsupported

Windows 10 support ended on 14 October 2025. A Windows 10 device counts as supported for A6.1 only while it is enrolled in Extended Security Updates you can evidence (consumer and commercial ESU both run to 12 October 2027) or runs an LTSC edition still in support. Otherwise upgrade it, replace it or take it out of scope.

Windows 10 versions and end-of-support dates
VersionStatus
22H2 (Home, Pro, Enterprise) without ESUEnds 14 October 2025No security updates since 14 October 2025.Unsupported
22H2 with consumer ESUEnds 12 October 2027Microsoft's consumer programme runs to 12 October 2027. Intended for personal devices; organisations buy commercial ESU. Keep a screenshot of Settings > Windows Update showing the device enrolled.Supported
22H2 with commercial ESU (year 2)Ends 12 October 2027Bought per year through volume licensing and cumulative (year 2 needs year 1). Keep the licence and the ESU activation (MAK) evidence. Year 3 is the maximum.Supported
Enterprise LTSB 2016Ends 13 October 2026Unsupported
Enterprise LTSC 2019Ends 9 January 2029Supported
Enterprise LTSC 2021Ends 12 January 2027Ends 12 January 2027. Plan the replacement now.Supported
IoT Enterprise LTSC 2021Ends 13 January 2032Supported
Windows 10 guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Operating system · Microsoft

Windows 11

2 of 11 unsupported

Windows 11 is supported, but each feature update has its own end date: 24 months for Home and Pro, 36 months for Enterprise and Education. In November 2026 Home and Pro must run 25H2, 26H2 or (on new devices) 26H1. Enterprise 23H2 ends on 10 November 2026.

Windows 11 versions and end-of-support dates
VersionStatus
23H2 (Home, Pro)Ends 11 November 2025Unsupported
24H2 (Home, Pro)Ends 13 October 2026Ended 13 October 2026. Upgrade to 25H2 or 26H2.Unsupported
23H2 (Enterprise, Education)Ends 10 November 2026Ends 10 November 2026. Upgrade now; after that date it fails A6.1.Supported
24H2 (Enterprise, Education)Ends 12 October 2027Supported
25H2 (Home, Pro)Ends 12 October 2027Supported
25H2 (Enterprise, Education)Ends 10 October 2028Supported
26H1 (Home, Pro)Ends 14 March 2028Ships only on new devices from early 2026; not offered as an update to existing PCs.Supported
26H1 (Enterprise, Education)Ends 13 March 2029Supported
26H2 (Home, Pro)Ends 10 October 2028Released 29 September 2026.Supported
26H2 (Enterprise, Education)Ends 9 October 2029Supported
Enterprise LTSC 2024Ends 9 October 2029No extended support; IoT Enterprise LTSC 2024 runs to 10 October 2034.Supported
Windows 11 guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Server operating system · Microsoft

Windows Server 2012 R2

2 of 2 unsupported

Windows Server 2012 R2 is unsupported. Extended support ended on 10 October 2023 and the third and final year of paid Extended Security Updates ended on 13 October 2026. Any in-scope 2012 R2 server fails A6.1 unless it is moved into a sub-set with no internet access and declared under A6.7.

Windows Server 2012 R2 versions and end-of-support dates
VersionStatus
2012 R2 without ESUEnds 10 October 2023Unsupported
2012 R2 with Extended Security Updates (year 3)Ends 13 October 2026Year 3, the last ESU year, ended 13 October 2026.Unsupported
Windows Server 2012 R2 guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Operating system · Apple

macOS

2 of 5 unsupported

Apple publishes no end-of-support dates for macOS. In practice it patches the current release and the two before it: on 26 October 2026 Apple shipped security updates for macOS 27, 26 and 15. macOS 14 Sonoma last received one on 6 August 2026, so treat Sonoma and earlier as unsupported for A6.1.

macOS versions and end-of-support dates
VersionStatus
macOS 27 (Golden Gate)Ends 1 January 1970Current release, shipped 14 September 2026.Supported
macOS 26 (Tahoe)Ends 1 January 1970Receiving security updates (26.7.2, 26 October 2026).Supported
macOS 15 (Sequoia)Ends 1 January 1970Receiving security updates (15.8.2, 26 October 2026).Supported
macOS 14 (Sonoma)Ends 14 September 2026Last security update 14.8.9 on 6 August 2026. Date shown is when macOS 27 shipped; Apple publishes no end date.Unsupported
macOS 13 (Ventura) and earlierEnds 15 September 2025Date shown is when macOS 26 shipped.Unsupported
macOS guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Mobile operating system · Apple

iOS and iPadOS

1 of 4 unsupported

Apple publishes no end dates for iOS and iPadOS. On 26 October 2026 it shipped security updates for iOS 27, iOS 26 and iOS 18, so devices on those versions can be answered as supported in A6.1. Apple states only the latest version receives every fix, so upgrade where the hardware allows.

iOS and iPadOS versions and end-of-support dates
VersionStatus
iOS 27 / iPadOS 27Ends 1 January 1970Current release, shipped 14 September 2026.Supported
iOS 26 / iPadOS 26Ends 1 January 1970Receiving security updates (26.7.2, 26 October 2026).Supported
iOS 18 / iPadOS 18Ends 1 January 1970Receiving security updates (18.7.11, 26 October 2026) for devices that cannot upgrade.Supported
iOS 17 and earlierEnds 15 September 2025Not in Apple's October 2026 security releases. Date shown is when iOS 26 shipped; Apple publishes no end date.Unsupported
iOS and iPadOS guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Mobile operating system · Google and device manufacturers

Android

1 of 5 unsupported

Android support depends on the device manufacturer, not the Android version alone. Google's November 2026 security bulletin lists fixes for Android 14, 15, 16 and 17; a phone is supported only while its manufacturer still ships those patches for that model. Check the manufacturer's published end date.

Android versions and end-of-support dates
VersionStatus
Android 17Ends 1 January 1970Confirm the manufacturer still ships patches for the model.Supported
Android 16Ends 1 January 1970Confirm the manufacturer still ships patches for the model.Supported
Android 15Ends 1 January 1970Confirm the manufacturer still ships patches for the model.Supported
Android 14Ends 1 January 1970Oldest version in Google's November 2026 bulletin; confirm manufacturer patch status.Supported
Android 13 and earlierEnds 1 January 1970Not covered by Google's October or November 2026 bulletins.Unsupported
Android guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Office application · Microsoft

Microsoft Office 2016, 2019 and 2021

4 of 6 unsupported

Office 2016 and Office 2019 reached end of support on 14 October 2025, and Office 2021 and Office LTSC 2021 on 13 October 2026. All four are unsupported software for A6.2 and A6.2.4. Upgrade to Microsoft 365 Apps on a supported channel or Office LTSC 2024.

Microsoft Office 2016, 2019 and 2021 versions and end-of-support dates
VersionStatus
Office 2016Ends 14 October 2025Unsupported
Office 2019Ends 14 October 2025Unsupported
Office 2021Ends 13 October 2026Unsupported
Office LTSC 2021Ends 13 October 2026Unsupported
Office LTSC 2024Ends 9 October 2029Fixed lifecycle, no extended support phase.Supported
Microsoft 365 Apps (Current, Monthly Enterprise or Semi-Annual Enterprise Channel)Ends 1 January 1970Supported while it updates on a supported channel and the build is still in support.Supported
Microsoft Office 2016, 2019 and 2021 guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Operating system · Canonical

Ubuntu

2 of 5 unsupported

Ubuntu LTS releases get five years of standard security maintenance and ten with an Ubuntu Pro subscription (Expanded Security Maintenance). Ubuntu Pro is free for personal use on up to five machines. A release past standard support without Pro attached and evidenced is unsupported for A6.1.

Ubuntu versions and end-of-support dates
VersionStatus
26.04 LTSEnds 31 May 2031Standard security maintenance to May 2031; ESM with Ubuntu Pro to May 2036.Supported
24.04 LTSEnds 31 May 2029ESM with Ubuntu Pro to May 2034.Supported
22.04 LTSEnds 31 May 2027Standard support ends May 2027; ESM with Ubuntu Pro to May 2032.Supported
20.04 LTSEnds 31 May 2025Supported to May 2030 only with Ubuntu Pro (ESM) attached. Evidence it with the output of pro status.Unsupported
18.04 LTS and earlierEnds 31 May 202318.04 is covered to May 2028 only with Ubuntu Pro attached and evidenced.Unsupported
Ubuntu guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Server operating system · Microsoft

Windows Server 2016, 2019, 2022 and 2025

All versions supported

Windows Server 2016 and later are supported until their extended support end dates, which is what Cyber Essentials counts for A6.1. Windows Server 2016 ends on 12 January 2027, 2019 on 9 January 2029, 2022 on 14 October 2031 and 2025 on 14 November 2034.

Windows Server 2016, 2019, 2022 and 2025 versions and end-of-support dates
VersionStatus
Windows Server 2016Ends 12 January 2027Mainstream support ended 11 January 2022; security updates end 12 January 2027. Plan the replacement now.Supported
Windows Server 2019Ends 9 January 2029Mainstream support ended 9 January 2024.Supported
Windows Server 2022Ends 14 October 2031Mainstream support ended 13 October 2026; security updates continue to the extended end date.Supported
Windows Server 2025Ends 14 November 2034Mainstream support ends 13 November 2029.Supported
Windows Server 2016, 2019, 2022 and 2025 guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Web browser · Google

Google Chrome

1 of 3 unsupported

Google Chrome is supported while it is on the current Stable or Extended Stable release. Google ships security fixes only to the current release of each channel, and since Chrome 153 (8 September 2026) a new Stable milestone arrives every two weeks, so Chrome must auto-update to stay supported for A6.2 and A6.2.1.

Google Chrome versions and end-of-support dates
VersionStatus
Stable channel (current release)Ends 1 January 1970New major release every two weeks since Chrome 153, with security fixes between them. Must auto-update.Supported
Extended Stable channel (current release)Ends 1 January 1970Eight-week milestone cycle with security backports; for managed fleets that need change control.Supported
Any release behind the current Stable or Extended StableEnds 1 January 1970No security fixes for superseded releases. Update within 14 days of a critical or high-risk fix (A6.5).Unsupported
Google Chrome guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Web browser · Microsoft

Microsoft Edge

1 of 3 unsupported

Microsoft Edge is supported on the current Stable or Extended Stable release. Since Edge 152 the Stable channel moves to a new major version every two weeks and Microsoft fixes only the current release, so Edge must auto-update to remain supported for A6.2 and A6.2.1.

Microsoft Edge versions and end-of-support dates
VersionStatus
Stable channel (current release)Ends 1 January 1970Two-week major release cycle since version 152. Must auto-update.Supported
Extended Stable channel (current release)Ends 1 January 1970Eight-week major release cycle, available only in managed environments.Supported
Legacy Edge (EdgeHTML)Ends 9 March 2021Removed by Windows Update; any remaining install is unsupported.Unsupported
Microsoft Edge guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Web browser · Mozilla

Mozilla Firefox

1 of 3 unsupported

Firefox is supported on the current release or the current Extended Support Release (ESR). In November 2026 the current ESR line is 153, scheduled to run to September 2027; ESR 140 received its last update alongside Firefox 157 on 29 September 2026. Firefox must auto-update to stay supported for A6.2 and A6.2.1.

Mozilla Firefox versions and end-of-support dates
VersionStatus
Rapid Release (current release)Ends 1 January 1970New release every two weeks; Firefox 159 shipped on 27 October 2026 and 160 is due on 10 November 2026.Supported
Firefox ESR 153 (current ESR)Ends 7 September 2027Mozilla's calendar shows the last 153.x update shipping with Firefox 180 on 7 September 2027.Supported
Firefox ESR 140 and earlierEnds 29 September 2026Last 140.x update shipped with Firefox 157.Unsupported
Mozilla Firefox guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Document application · Adobe

Adobe Acrobat Reader

2 of 3 unsupported

Adobe Acrobat Reader on the Continuous track is supported while it auto-updates. The Classic tracks have end dates: Acrobat 2020 ended on 30 November 2025 and Acrobat 2017 on 6 June 2022, so either is unsupported software for A6.2 and must be upgraded or removed.

Adobe Acrobat Reader versions and end-of-support dates
VersionStatus
Acrobat Reader (Continuous track)Ends 1 January 1970Must be set to update automatically.Supported
Acrobat 2020 (Classic track)Ends 30 November 2025Unsupported
Acrobat 2017 (Classic track)Ends 6 June 2022Unsupported
Adobe Acrobat Reader guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Runtime · Oracle and OpenJDK vendors

Java (Oracle JDK and OpenJDK builds)

1 of 10 unsupported

Java is supported for Cyber Essentials when the build you run still receives security fixes and you are entitled to them. Oracle JDK 25 is the current LTS, and Oracle plans to keep its updates free under the NFTC licence until September 2028, a year after the next LTS (JDK 29, planned for September 2027). For business use, Oracle JDK 21 updates from the October 2026 patch, and all JDK 8, 11 and 17 updates, need a paid Oracle subscription. Free OpenJDK builds such as Eclipse Temurin publish their own dates.

Java (Oracle JDK and OpenJDK builds) versions and end-of-support dates
VersionStatus
Oracle JDK 25 (LTS)Ends 30 September 2033Premier Support to September 2030, Extended Support to September 2033 (Oracle roadmap). Oracle plans to keep updates free under the NFTC licence until September 2028.Supported
Oracle JDK 21 (LTS)Ends 30 September 2031Premier Support to September 2028, Extended Support to September 2031. Releases from 20 October 2026 are under the OTN licence, so business use needs a Java SE Subscription. Supported only with that entitlement; otherwise move to JDK 25 or a free OpenJDK build.Supported
Oracle JDK 17 (LTS)Ends 30 September 2029Premier Support ended September 2026; Extended Support runs to September 2029. Updates on paid subscription only; supported only with that entitlement.Supported
Oracle JDK 11 (LTS)Ends 31 January 2032Extended Support to January 2032, on paid subscription only; supported only with that entitlement.Supported
Oracle JDK 8Ends 31 December 2030Extended Support to December 2030, on paid subscription for business use; supported only with that entitlement.Supported
Eclipse Temurin 25 (OpenJDK)Ends 30 September 2031Free. Adoptium commits to at least September 2031.Supported
Eclipse Temurin 21 (OpenJDK)Ends 31 December 2029Free. Adoptium commits to at least December 2029.Supported
Eclipse Temurin 17 and 11 (OpenJDK)Ends 31 October 2027Free. Adoptium commits to at least October 2027; plan the move to 21 or 25.Supported
Eclipse Temurin 8 (OpenJDK)Ends 31 December 2030Free. Adoptium commits to at least December 2030.Supported
Any JDK without a vendor update entitlementEnds 1 January 1970Unsupported for A6.2. Remove it or move to a supported build.Unsupported
Java (Oracle JDK and OpenJDK builds) guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Server application · Microsoft

Microsoft Exchange Server

3 of 4 unsupported

Exchange Server 2016 and 2019 both reached end of support on 14 October 2025 and are unsupported software for A6.2 and A6.2.3. Exchange Server Subscription Edition (SE), released July 2025, is the only supported on-premises version and follows the Modern Lifecycle Policy. Exchange 2013 ended on 11 April 2023.

Microsoft Exchange Server versions and end-of-support dates
VersionStatus
Exchange Server Subscription Edition (SE)Ends 1 January 1970Modern Lifecycle Policy; stay on a current cumulative update.Supported
Exchange Server 2019Ends 14 October 2025In-place upgrade to SE is available from CU14 or CU15.Unsupported
Exchange Server 2016Ends 14 October 2025Unsupported
Exchange Server 2013Ends 11 April 2023Unsupported
Microsoft Exchange Server guide What A6.1 asks Vendor lifecycle page (opens in a new tab)

Server application · Microsoft

Microsoft SQL Server

3 of 7 unsupported

SQL Server is supported for Cyber Essentials until the end of extended support for that version, or while you hold paid Extended Security Updates. SQL Server 2016 ended on 14 July 2026 and SQL Server 2014 on 9 July 2024, so without ESU both are unsupported for A6.2. SQL Server 2017, 2019, 2022 and 2025 remain in support.

Microsoft SQL Server versions and end-of-support dates
VersionStatus
SQL Server 2025Ends 6 January 2036Released 18 November 2025. Mainstream support ends 6 January 2031.Supported
SQL Server 2022Ends 11 January 2033Mainstream support ends 11 January 2028.Supported
SQL Server 2019Ends 8 January 2030Mainstream support ended 28 February 2025.Supported
SQL Server 2017Ends 12 October 2027Mainstream support ended 11 October 2022.Supported
SQL Server 2016Ends 14 July 2026Extended support ended 14 July 2026. Paid Extended Security Updates are available to July 2029; the server counts as supported only while you can evidence the ESU.Unsupported
SQL Server 2014Ends 9 July 2024Paid Extended Security Updates (year 3) run to July 2027; supported only while you can evidence the ESU.Unsupported
SQL Server 2012 and earlierEnds 12 July 2022Unsupported
Microsoft SQL Server guide What A6.1 asks Vendor lifecycle page (opens in a new tab)
Assessor checks

How do assessors check support status?

The assessor reads your device list in A2.6 to A2.8 and your software versions in A6.2.1 to A6.2.4, then checks each one against the vendor's published lifecycle. Version numbers matter: Windows 11 23H2 Home is out of support while 23H2 Enterprise is not. If a version is missing or vague, the assessor asks for it before marking.

Next steps

What do you do with an unsupported product?

  • Upgrade it to a supported version, and record the new version in your inventory.
  • Remove it from the device if it is an application you no longer need.
  • Replace the device if the hardware cannot run a supported operating system.
  • As a last resort, move it into a sub-set separated by a firewall or VLAN with all internet traffic blocked, and describe that sub-set in A2.2.1, A2.2.2 and A6.7.
Common failure
One forgotten Windows 10 laptop, or a browser extension nobody updated, is enough. The device inventory is the control: if you cannot list every version, you cannot answer A6.1 with confidence.
FAQ

Frequently asked questions

Not on its own. Windows 10 support ended on 14 October 2025, and the Danzell guidance for A2.6 and A6.1 says a Windows 10 device used after that date must be enrolled in Microsoft's Extended Security Update programme. Consumer and commercial ESU both run to 12 October 2027. Without ESU you must upgrade the device, remove it, or move it into a sub-set with no internet access.

Requirements v3.3 define licensed and supported software as software you have a legal right to use and that a vendor has committed to support with regular vulnerability fixes, with a published future date when that support stops. An operating system, router firmware or application that no longer receives security fixes is unsupported, whatever its age.

A6.3 asks whether any in-scope software or cloud service is unlicensed or unsupported. A6.6 asks whether you have removed unsupported software. Neither is labelled an automatic fail, but a yes to A6.3 or a no to A6.6 means the requirement that all in-scope software is licensed and supported is not met, so the application will not pass. The only alternative to removing it is A6.7: move the device and software into a defined sub-set that blocks all internet traffic.

Every application, plus browser extensions, frameworks and plugins. The question set asks specifically for browser, anti-malware, email and office application versions (A6.2.1 to A6.2.4), but the requirement applies to all software on in-scope devices.

The dataset was last checked on 3 November 2026 against each vendor's lifecycle page, which is linked on every result. Vendors change dates, so confirm with the vendor before you submit.

Related pages

Sources
Free readiness check

Would you pass the 2026 question set?

Answer 24 yes or no questions, built by the assessors who mark Cyber Essentials, and get a readiness score in about five minutes, with any auto-fail questions you miss flagged first in your results.

Check your readinessBook a gap analysis, from £500
  • IASME Certification Body
  • CREST accredited
  • IASME fee included
  • UK offices in Leeds, Newcastle, London and Edinburgh