Free · 10 questions · runs in your browser
Cyber-readiness score: a 10-question cybersecurity scorecard
The short answer: if you have MFA everywhere, tested backups, EDR, prompt patching and DMARC on your domain, you are ahead of most attacks and most insurer questionnaires. Answer ten questions to get a score out of 100 and the next step for each gap.
Your answers stay in your browser. Nothing is sent unless you use the optional form below.
What it checks
Ten controls, in five groups.
- Identity: MFA everywhere and separate, limited admin accounts.
- Endpoints: EDR on every device and security updates applied on a schedule.
- Email: SPF, DKIM and DMARC on your domain, plus staff who can spot phishing.
- Recovery: Backups you have actually restored from, and a written incident plan.
- Network and cover: A managed, updated firewall and the evidence a cyber insurer will ask for.
Check your domain's SPF, DKIM and DMARC for free with the email security checker. Read how to answer cyber-insurance security questionnaires, or see how managed detection and response (MDR) covers EDR monitoring around the clock.
Common questions
About the score.
What does the cyber-readiness score measure?
Ten controls: MFA, tested backups, EDR, patching, phishing training, admin accounts, an incident plan, email authentication (SPF, DKIM and DMARC), the firewall and cyber-insurance readiness. Each scores 0, 5 or 10, for a total out of 100, and every weak answer comes with a specific next step.
Why these ten controls?
They are controls cyber insurers and security questionnaires commonly ask about, and the ones that stop the common attacks: stolen passwords, phishing, ransomware and unpatched systems.
Will a high score get me cyber insurance?
Not on its own. Insurers set their own questions and evidence requirements. A high score means you can probably answer yes to the common questions; our cyber-insurance guide explains what evidence to keep.
Is this a full security audit?
No. It is a ten-minute self-assessment. A full review checks configurations, not answers. If you want one, use the form on this page.
Are my answers sent anywhere?
No. The score is calculated in your browser. Nothing is sent unless you fill in the optional form and press send.
Email me my results, or get a review
Your score and weakest answers are attached automatically. We reply within one business day.
Turn your score into a plan.
The free IT health check takes your weakest areas and puts the fixes in order for leadership.