Answer
Plain questions about how your business actually runs. Adaptive, so you only answer what applies. “Not sure” is a real answer.
Cyber readiness for small business
If you were attacked tomorrow,
what actually happens?
Most owners cannot answer that — not through carelessness, but because nobody has ever checked. Your backups, your accounts, what your provider actually covers: all of it is a belief until someone asks for proof.
The math has changed
It’s not if any more.
It’s when.
80%
of small businesses were hit by at least one cyberattack last year.
Verizon DBIR / StrongDM, 2025
1in323
emails to a small business is malicious — the highest rate of any organisation size
Verizon DBIR 2025
350%
more social engineering attacks on small-business employees than large-enterprise staff
StrongDM / Verizon DBIR
65%
of small businesses don't use multi-factor authentication — and have no plans to
Industry reporting, 2025
54%
click-through on AI-written phishing, against 12% for human-written
Industry reporting, 2025
You are not too small to be worth attacking. You are the right size to be easy.
The difference
Every answer gets checked.
Every gap gets closed.
Two things happen here that a questionnaire cannot do. It verifies what you told it, and it stays until the work is finished.
Cyber Readiness Kit
Assess · verify · improve · reassess
Every other assessment
Questionnaires · checklists · scan reports
Asks for the export, the job report, the screenshot — then reads it
Records whatever you type in
Tells you when your evidence contradicts your own answer
Never finds out you were wrong
Adapts to how you operate, so you skip what you don't run
The same list for every business
Hands you a plan with owners and the proof that closes each item
Hands you a score and a PDF
Reassesses against your baseline so you can show the change
Ends the moment you get the file
It tells you where you stand — then it doesn't leave.
How it works
Assess. Verify.
Improve. Prove it.
Prove
Upload evidence where it counts. The platform reviews it and tells you whether it backs up what you said.
Understand
The likely way in, what it reaches, and whether you'd recover — in language you can take to your board.
Fix
A short list in priority order. Each item has an owner, an expected result, and the evidence that closes it.
Reassess
Come back when the work is done and demonstrate the position actually changed.
The gap
Backup & recovery
“We thought our backups covered everything.”
They didn't. The job report never listed the order-entry database. Nobody knew until someone asked for the file — and by then it had been true for two years.
That gap is the product.
Illustrative examples of what evidence review surfaces. Not customer statements.
Who it's for
Businesses without
a security department.
10 to 250 people. You run on email and cloud services. Security belongs to one IT generalist, an outside provider, or you.
What it isn't: a penetration test, a vulnerability scan, a certification, or a compliance audit. It won't tell you you're compliant, because no assessment honestly can.
It uses recognized guidance — including NIST 800-171 — as recommendations, not as a certification you can claim.
Pricing
One price.
A full year.
$1,495for the first year
Then $99/month to keep assessing, verifying, and tracking improvement.
Includes the full assessment across 15 areas of your business, evidence review on every answer that carries weight, deeper AI evidence analysis, a prioritized improvement plan, and reassessment to demonstrate the position changed. No add-ons, no per-report charges, no upsells.
Get started →73%
S&P Global and industry reporting, 2026
of small businesses fail their cyber insurance assessment.
Carriers stopped accepting questionnaire answers. They want documented proof — and most businesses have never checked whether they can produce it. The result is a declined renewal, or pricing that makes coverage pointless.
If you're the business
Find out before the underwriter does.
Work out which controls you can actually evidence, and fix the gaps while you still have time before renewal.
Try it free →If you're the broker
Your clients need to become insurable.
Carriers moved to documented evidence. We built the platform that produces it — and we're talking with agencies about offering it to their commercial clients.
Start a conversation →Find out what
you can actually prove.
Six questions. Two pieces of evidence. Ten minutes.
Start your Guided Preview →Free. No credit card. No sales call.