Eleven self-assessments for the situations small businesses and product teams meet most. Every one runs entirely in your browser; your answers never leave your device. Pick the one that fits your situation.
Plain-English essentials if the topic is new to you.
Score where you stand in your browser. Your answers never leave your device.
Templates and a prioritised plan when you're ready to go deeper.
12 questions · about five minutes · free
Covers the controls that matter most for businesses with 2–50 people: identity and access, data handling, backups, and patching. Get a plain-English score and a prioritised list of fixes.
Take the free assessment →28 questions · in your browser · free
Reviews how your team uses AI tools, what data they touch, and whether your controls keep pace with the risk. Practical and jargon-free.
Take the free assessment →28 questions · in your browser · free
Covers identity and access, logging, network boundaries, and data handling across one cloud account or many. Suitable for small engineering teams.
Take the free assessment →9 questions · in your browser · free
See where you stand on the questions carriers actually ask — green, amber, or red per control, in plain English, while there is still time to act on it.
Take the free assessment →24 questions · in your browser · free
A readiness check across the eight plain-English control areas our assessment covers on the way to a SOC 2 examination. Before you spend $20,000+.
Take the free assessment →28 questions · in your browser · free
Assesses how you discover, prioritise, and close vulnerabilities: scanning, patch cadence, and escalation paths.
Take the free assessment →9 questions · a few minutes · free
Walks the breach decision tree: whether to notify the supervisory authority, whether to notify affected individuals, and your Article 33 deadline.
Take the free assessment →30 questions · under 10 minutes · free
Scores your readiness across data mapping, lawful basis, storage, sharing, and breach readiness, then routes you to plain-English fixes.
Take the free assessment →Branching triage · in your browser · free
Guides the critical first decisions in an incident: contain, assess, notify. Works for breaches, ransomware, account compromise, and supplier incidents.
Take the free assessment →17 questions · in your browser · free
Assesses whether your product team can receive, triage, and respond to vulnerability reports in a coordinated way.
Take the free assessment →Guided scan · in your browser · free
Scans the common security-questionnaire categories and helps you build a concise, accurate picture of your security posture to share with prospects and partners.
Take the free assessment →Every free assessment has a paid toolkit that goes further, with action plans, templates, and step-by-step remediation. Solo, Team, and Pro tiers.
See the toolkits and pricing →Free, plain-English guides on the most common security and compliance situations. No email required, and each pairs with one of these assessments.
Browse the free guides →