Save money
Fix the right things first.
Cyber readiness for small business
If you were attacked tomorrow,
could your business keep operating?
Cyber Readiness Kit finds the gaps, verifies what’s really in place, and tells you exactly what to fix next.
Try it free →
Full CRK includes a 60-day Results Guarantee.
Give it a fair shot and if CRK still does not document measurable readiness improvement,
request your eligible first-year platform charge back.
See the guarantee.
What you get
Know what to fix. Know how to fix it. Prove it.
Save time
Skip the research and guesswork.
Clear direction
Know exactly what to do next.
Prove readiness
Show insurers, customers, and leadership the work is handled.
Get the guidance. Keep the capability.
The kind of structured cyber guidance you’d normally hire for — built into a workspace that stays with your business.
From “we think we’re protected” to “we know — and we can prove it.”
The math has changed
It’s not if any more.
It’s when.
80%
of small businesses were hit by at least one cyberattack last year.
Verizon DBIR / StrongDM, 2025
1in323
emails to a small business is malicious — the highest rate of any organisation size
Verizon DBIR 2025
350%
more social engineering attacks on small-business employees than large-enterprise staff
StrongDM / Verizon DBIR
65%
of small businesses don't use multi-factor authentication — and have no plans to
Industry reporting, 2025
54%
click-through on AI-written phishing, against 12% for human-written
Industry reporting, 2025
You are not too small to be worth attacking. You are the right size to be easy.
The difference
Every answer gets checked.
Every gap gets closed.
Two things happen here that a questionnaire cannot do. It verifies what you told it, and it stays until the work is finished.
Cyber Readiness Kit
Establish · prioritize · fix · verify · maintain
Typical one-time cyber review
Questionnaires · checklists · scan reports
Asks for the export, the job report, the screenshot — then reads it
Records whatever you type in
Tells you when your evidence contradicts your own answer
Never finds out you were wrong
Adapts to how you operate, so you skip what you don't run
The same list for every business
Hands you a plan with owners and the proof that closes each item
Hands you a score and a PDF
Keeps your baseline current so you can show the change
Ends the moment you get the file
It tells you where you stand — then it doesn't leave.
How it works
Establish. Prioritize.
Fix. Verify. Maintain.
Establish
Build your starting cyber readiness baseline around how your business actually operates. Unknowns count, and evidence is requested where it matters.
Prioritize
See which conditions matter most to operations and recovery, in the order worth addressing.
Fix
Follow clear guidance for what needs to change, who should own it, and what “done” looks like.
Verify
Upload the proof. CRK checks whether the evidence supports the improvement and moves it toward verified readiness.
Maintain
Keep your baseline current as your business changes and show how readiness improves over time.
The gap
Backup & recovery
“We thought our backups covered everything.”
They didn't. The job report never listed the order-entry database. Nobody knew until someone asked for the file — and by then it had been true for two years.
That gap is the product.
Illustrative examples of what evidence review surfaces. Not customer statements.
Who it's for
Businesses without
a security department.
10 to 250 people. You run on email and cloud services. Security belongs to one IT generalist, an outside provider, or you.
What it isn't: a penetration test, a vulnerability scan, a certification, or a compliance audit. It won't tell you you're compliant, because no tool or process honestly can.
It uses recognized guidance — including NIST 800-171 — as recommendations, not as a certification you can claim.
The Cyber Readiness Results Guarantee
Make measurable progress in your cyber readiness—or get your money back.
We do not want the guarantee to reward buying CRK and doing nothing. Eligible first-year customers have 60 days to give the platform a fair shot. CRK tracks that inside the product.
01
Establish your tracked baselineComplete the readiness baseline so CRK has a real starting point to measure against.
02
Work through your first prioritiesAdvance the first three recommended priority actions, or all of them if fewer than three are available.
03
Use CRK’s proof processAdd supporting proof for those priority actions. Simply starting an action is not enough. A CRK-prepared working document by itself does not satisfy this requirement unless it has been verified.
Pricing
One price.
A full year.
$1,495for the first year
Then $99/month to keep your baseline current, verify new improvements, and track progress.
Includes a full cyber readiness baseline across 15 areas of your business, evidence review on every answer that carries weight, deeper AI evidence analysis, a prioritized improvement plan, and ongoing baseline updates to demonstrate the position changed. No add-ons, no per-report charges, no upsells.
Get started →73%
S&P Global and industry reporting, 2026
of small businesses fail to meet cyber insurance requirements.
Carriers stopped accepting questionnaire answers. They want documented proof — and most businesses have never checked whether they can produce it. The result is a declined renewal, or pricing that makes coverage pointless.
If you're the business
Find out before the underwriter does.
Work out which controls you can actually evidence, and fix the gaps while you still have time before renewal.
Try it free →If you're the broker
Your clients need to become insurable.
Carriers moved to documented evidence. We built the platform that produces it — and we're talking with agencies about offering it to their commercial clients.
Start a conversation →Find out what
you can actually prove.
Six questions. Two pieces of evidence. Ten minutes.
Start your Cyber Readiness Checkup →Free. No credit card. No sales call.