Know how protected your business really is.

No. The free assessment runs entirely in your browser — nothing you enter is sent to any server. Your answers, domain, and industry selection stay on your device. When Pro launches, account data will be stored securely in an encrypted database with no selling or sharing of your information, ever.

The free government checklists are comprehensive but dense — they're written for IT professionals, not business owners. CyberPosture translates those same frameworks into plain-English questions, generates an instant scored report, flags your industry-specific compliance requirements, and tells you exactly what to fix first. The checklists tell you what good looks like. We tell you where you stand and what to do next.

None at all. Every question is written in plain English — no jargon, no acronyms without explanation. If you run your business day-to-day, you can answer every question. You might not know every answer immediately, but that itself is a finding worth knowing.

No — and any tool that claims otherwise is misleading you. Cyber insurance underwriters run their own external scans, require their own signed application, and verify high-risk controls with supporting evidence (written policies, EDR coverage exports, backup configurations). What CyberPosture does is show you exactly which underwriting questions you'd be flagged on before you apply — so you can close those gaps, qualify for coverage you'd otherwise be declined for, and avoid the higher premiums that come with weak controls. The Pro PDF report is structured as a NIST CSF 2.0 + CIS Controls v8 self-assessment, which is a format some carriers accept as supporting documentation for smaller policies. It's a prep tool, not a certification.

CyberPosture was built by a DFIR (Digital Forensics & Incident Response) analyst — someone who investigates actual breaches at businesses like yours for a living. Every question is based on what we see causing real incidents, not theoretical risk frameworks. The assessment is aligned to NIST Cybersecurity Framework 2.0 and CIS Controls v8, the same standards used by government agencies and major corporations.

Each critical and warning finding includes a plain-English target — what the ideal answer looks like and why it matters. Free users get their top 3 critical findings with links to free resources. Pro users get all findings with step-by-step fix guides, resource links, and a downloadable PDF to share with your IT provider, insurer, or team.