A customer sent you a security questionnaire. We help you answer it.
When a buyer's SIG Lite (Standardized Information Gathering) or CAIQ (Consensus Assessments Initiative Questionnaire) holds up your deal, this kit gets you unblocked: a free readiness check finds your gaps, then guided builders produce defensible answers, the proof documents reviewers want attached, and a shareable trust profile that heads off the next questionnaire. Everything runs in your browser; your answers never leave your device.
Two ways to start, both free.
1. Run the free readiness check
Ten plain-English questions, about three minutes. Returns a 0–20 readiness score, a readiness band, and a short plan ordered by the gaps most likely to slow your answer down. Runs in your browser, no email required, and your answers never leave your device.
Run the free check →2. Read the free questionnaire guide
"A Customer Sent You a Security Questionnaire. Now What?" walks through what reviewers actually ask, how to answer honestly, and the evidence they expect — without losing the deal.
Read the free guide →This is for when you are the vendor being assessed.
Our SMB Security Assessment helps you vet your vendors. This kit is the other side of the table: it helps you answer a security questionnaire a customer sent you, so you can close the deal.
Free to scan. Three tiers to answer, prove, and prevent.
The tiers stack. Solo is the Answer Builder app plus 8 documents. Team adds the Proof Pack Generator and 10 more. Pro adds the Trust Profile Builder and 9 more, including the multi-client tracking workbook — 27 documents in all, alongside 3 guided apps and more than 120 pages of playbooks, mappings, and templates. One-time purchase. Your files, yours forever.
- The Answer Builder app — a defensible answer bank from a short interview
- Covers every core domain: multi-factor authentication (MFA), access, endpoint detection and response (EDR), backups, incident response, encryption
- Honest "in progress" wording for controls you do not have yet
- Export the full answer bank and reuse it on every future questionnaire
- The Answer Bank Playbook (PDF)
- The 30 questions you'll be asked most — model answers ready to adapt (PDF)
- The Evidence Artefact & Packaging Guide — what proof to attach, and how to package it (PDF)
Enough if you’re answering your first big questionnaire and need solid answers.
Get the Solo kit — $49- Everything in Solo
- The Proof Pack Generator app — the documents reviewers ask you to attach
- Information Security, Incident Response, Access Control, and Data Handling policy templates
- Acceptable Use and Business Continuity templates
- The Proof Pack Guide (PDF)
- Saying "no" honestly — how to answer a gap and still win the deal
- Answering for the vendors you rely on (your subcontractors and fourth parties)
- ISO/IEC 27001 Annex A mapping — answer 27001-flavoured questionnaires from the same bank
- The Customer Security Call Prep Guide — walk into the follow-up call ready (PDF)
Choose this when you need evidence and a repeatable workflow, not one-off answers.
Get the Team kit — $99- Everything in Team
- The Trust Profile Builder app — a shareable one-page security overview
- Download it as a standalone page to host at yourcompany.com/security
- Send it up front so many buyers never send a full questionnaire
- The standard Pro licence — unlimited clients, one practice, delivered under your own name
- The Trust Profile Playbook (PDF)
- Building a trust page that deflects questionnaires — the build playbook (PDF)
- The Evidence Freshness & Refresh Calendar — keep every artefact current across clients (PDF and editable Excel)
- When the review goes wrong — how to win the deal back
Step up here if you reuse answers across deals or run this for multiple clients.
Get the Pro kit — $199Every tier is a one-time purchase with a 30-day money-back guarantee, no questions asked, and free updates while the toolkit is in our catalogue.
How access works: the documents in every tier are downloads you keep, and the assessment app unlocks in your browser with the licence key from your purchase receipt — no account, no sign-in. The key activates on up to 3 devices on the solo tier, 7 on the middle tier, and 13 on the top tier.
Running client engagements is included in Pro. Want to resell TrustReady itself, or offer it under your own brand as a product? That's our partner track — contact us. It opens after launch.
The companion book: read the thinking behind the toolkit.
The book teaches the discipline; the toolkit does the work with you. Security Questionnaires (the judgement behind answering customer security reviews well) covers the same practice in depth.
If this is your situation, one of these usually is too
SMB Security Assessment
The other side of the table: assess and improve your own security posture, and vet the vendors you rely on, with a full toolkit of policies and templates.
GDPR Checklist
If your buyers also ask about privacy and European customer data, the GDPR Checklist covers the compliance side this kit does not.
The situation this toolkit is built for, written up.
Answering your first security questionnaire — ~9 min read.