Eleven self-assessments for the situations small businesses and product teams meet most. Every one runs entirely in your browser; your answers never leave your device. Pick the one that fits your situation.
Plain-English essentials if the topic is new to you.
Score where you stand in your browser. Your answers never leave your device.
Templates and a prioritised plan when you're ready to go deeper.
12 questions · about five minutes · free
Covers the controls that matter most for businesses with 2–50 people: identity and access, data handling, backups, and patching. Get a plain-English score and a prioritised list of fixes.
Take the free assessment →28 questions · in your browser · free
Reviews how your team uses AI tools, what data they touch, and whether your controls keep pace with the risk. Practical and jargon-free.
Take the free assessment →28 questions · in your browser · free
Covers identity and access, logging, network boundaries, and data handling across one cloud account or many. Suitable for small engineering teams.
Take the free assessment →9 questions · in your browser · free
See where you stand on the questions carriers actually ask, with green, amber, or red per control, in plain English, while there is still time to act on it.
Take the free assessment →24 questions · in your browser · free
A readiness check across the eight plain-English control areas our assessment covers on the way to a SOC 2 examination. Before you spend $20,000+.
Take the free assessment →28 questions · in your browser · free
Assesses how you discover, prioritise, and close vulnerabilities: scanning, patch cadence, and escalation paths.
Take the free assessment →9 questions · a few minutes · free
Walks the breach decision tree: whether to notify the supervisory authority, whether to notify affected individuals, and your Article 33 deadline.
Take the free assessment →30 questions · under 10 minutes · free
Scores your readiness across data mapping, lawful basis, storage, sharing, and breach readiness, then routes you to plain-English fixes.
Take the free assessment →Branching triage · in your browser · free
Guides the critical first decisions in an incident: contain, assess, notify. Works for breaches, ransomware, account compromise, and supplier incidents.
Take the free assessment →17 questions · in your browser · free
Assesses whether your product team can receive, triage, and respond to vulnerability reports in a coordinated way.
Take the free assessment →Guided scan · in your browser · free
Scans the common security-questionnaire categories and helps you build a concise, accurate picture of your security posture to share with prospects and partners.
Take the free assessment →Every free assessment has a paid toolkit that goes further, with action plans, templates, and step-by-step remediation. Solo, Team, and Pro tiers.
See the toolkits and pricing →Free, plain-English guides on the most common security and compliance situations. No email required, and each pairs with one of these assessments.
Browse the free guides →