This assessment was designed by a DFIR analyst who has investigated real breaches. Plain-English questions covering the exact areas attackers exploit most — no IT degree required. We'll scope the questions to your business so you only see what applies.
48Questions
~20Minutes
9Risk Areas
📋 Mapped to NIST Cybersecurity Framework 2.0 and CIS Controls v8 Implementation Group 1 — the same standards used by government agencies and Fortune 500 companies, adapted for small business.
👥 How many people work in your business?
Just me
2–10
11–50
50+
🏠 Do you have a physical office or business location?
Yes
No — fully remote
🖥️ Do you run any on-premise IT — business router, server, on-site network gear?
Yes
No — cloud-only
We use this to skip questions that don't apply to your setup.
🏢 What industry is your business in?
🏥 Healthcare
🏦 Financial Services
🛒 Retail / E-commerce
⚖️ Professional Services
🔧 Trades / Construction
🍽️ Restaurant / Food
🏠 Real Estate
🏛️ Gov / Defense Contractor
📦 Other
🌐 Your business domain (optional)
Pro subscribers get an automated email security scan (SPF, DKIM, DMARC) of your domain. Enter it now and we'll include it in your Pro report when you upgrade.