The security baseline cyber insurers actually ask for — without a six-figure consulting engagement.
A free 12-question self-assessment. It covers access management, data classification, backup and recovery, and patching. With it comes a practical toolkit: policies, Word templates, Excel workbooks, training decks, and tabletop exercises. The assessment runs in your browser. Your answers never leave your device.
Three tiers — one for solo operators, one for small businesses, one for consultants.
- 8-question Solo self-assessment
- Personal multi-factor authentication setup guide
- Personal backup setup guide
- Account-compromise recovery playbook
- Solo Identity and Access Management playbook
- Phishing and scam recognition card
- 12-question SMB self-assessment
- 11 toolkit guides (~160 pages) including the four category toolkits
- 16 working Word templates: policies, incident-response notes, and an offboarding checklist
- 5 Excel workbooks: asset inventory, risk register, and vendor risk scoring
- 6 Security Awareness training slide decks
- 6 facilitated tabletop exercises
- Everything in SMB
- Consultant pack: contract, statement-of-work, engagement-letter, and NDA templates
- Executive Findings Report template and Annual Risk Assessment template
- Branded findings deck and quarterly board-reporting deck
- Multi-client tracking dashboard
- Pricing & Packaging Guide and 1-Day Assessment playbook
- Reseller / white-label terms
Two paths into the toolkit.
1. Take the free assessment
12 questions across four security areas. About five minutes. Returns a category-by-category snapshot of where your business is exposed. Runs in your browser — no email required, no data transmitted.
Take the free assessment →2. Read the free 5-fixes guide
"Your First 5 High-Impact Security Fixes" walks through the actions that address the most common attacks on small businesses, in the right order, with time estimates. Three minutes to read.
Read the free 5-fixes guide →Also commonly bought together
GDPR Checklist
If your business handles any European customer data, the GDPR Checklist covers the privacy-compliance side that the security assessment does not.
PSIRT Response
Do you ship a software product, not just run internal systems? PSIRT Response covers handling vulnerability reports from researchers.