Framework snapshot
NIST CSF 2.0
A clearer view of your security programme.
18 questions. 6 to 8 minutes, depending on your preparation.
See scope and startFree assessments
Choose the right
starting point.
15 original screening paths for business owners, security practitioners and delivery teams. See the scope first, answer what you know and keep unknowns separate from known gaps.
No account or email gate.
Your answers stay in this browser. Saving and exporting are optional. A self-check records your responses; it does not test systems, inspect evidence or issue certification.
Readiness screening
ISO 27001 readiness
Start with the management system, not a badge.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startReadiness screening
SOC 2 preparation
Make your evidence useful before the examination.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startTechnical self-check
Cloud & identity
Follow permissions, exposure and recovery.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startTechnical self-check
AI & agent security
Review what the agent can do, not just what it says.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startOperations self-check
SOC & incident readiness
Know who acts when a signal becomes an incident.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startBusiness self-check
Small business security
Start with accounts, devices, information and recovery.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startEngineering self-check
Web & API release readiness
Review access boundaries, inputs, delivery and operating visibility.
12 questions. 5 to 7 minutes, depending on your preparation.
See scope and startAssurance self-check
Supplier security review
Turn a supplier questionnaire into a scoped decision.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startResilience self-check
Backup & recovery readiness
Check whether recovery expectations match tested capability.
12 questions. 4 to 6 minutes, depending on your preparation.
See scope and startEngineering readiness
Secure software delivery
Connect design, dependencies, releases and remediation.
12 questions. 5 to 7 minutes, depending on your preparation.
See scope and startIdentity readiness
Identity & privileged access
Trace authority from approval through revocation.
12 questions. 5 to 7 minutes, depending on your preparation.
See scope and startRelease readiness
Mobile release readiness
Review the application, API and device boundary together.
12 questions. 5 to 7 minutes, depending on your preparation.
See scope and startPrivacy operations
Data protection operations
Turn data promises into owned, testable work.
12 questions. 5 to 7 minutes, depending on your preparation.
See scope and startPeople readiness
Security culture & role readiness
Measure whether people can make the needed decision.
12 questions. 5 to 7 minutes, depending on your preparation.
See scope and start