How secure is
your business?
Evaluate essential cybersecurity practices, identify potential gaps, and discover practical ways to strengthen your infrastructure.
An indicative, self-reported measure of basic cybersecurity readiness. This is not a penetration test, vulnerability scan, certified security assessment, guarantee against cyberattacks, or measured probability of breach.
How is my score calculated?
Each answer contributes the points below to a total out of 100. The selected antivirus brand does not affect the score. Firewall types are simplified questionnaire indicators, not independently validated measures of effectiveness.
| Category | Maximum |
|---|---|
| Endpoint Protection | 20 points |
| Firewall Protection | 25 points |
| Security Updates | 25 points |
| Backup & Recovery | 30 points |
Endpoint Protection
- Yes: 20 points
- No: 0 points
- Not Sure: 5 points
Firewall Protection
- No: 0 points
- Not Sure: 5 points
- Yes — Basic Router Firewall: 10 points
- Yes — Software-Based Firewall: 15 points
- Yes — Enterprise Hardware Firewall: 20 points
- Yes — Next-Generation Firewall (NGFW): 25 points
- Yes — Not Sure: 10 points
Security Updates
- Regularly: 25 points
- Occasionally: 15 points
- Rarely: 5 points
- Never: 0 points
- Not Sure: 5 points
Backup & Recovery
- Yes, with regular backup and recovery testing: 30 points
- Yes, but recovery is not regularly tested: 15 points
- No: 0 points
- Not Sure: 5 points
Readiness categories
- 80–100: Strong Basic Readiness
- 60–79: Moderate Readiness
- 40–59: Limited Readiness
- 0–39: Low Readiness
Priority rules: reported missing protection or backups, and rare or never updates, are High priority. Unknown controls, configuration suitability and untested recovery are Medium priority. Multiple Not Sure answers create a visibility finding. These are review priorities, not verified vulnerabilities.
An indicative, self-reported measure of basic cybersecurity readiness. This is not a penetration test, vulnerability scan, certified security assessment, guarantee against cyberattacks, or measured probability of breach.
Methodology version 2026-10-25.1. No scanning, probing or access to your systems occurs.