Seven self-assessment tools

Check where you stand before an auditor or a client does. No sign-up, no contact details — the result stays with you.

Regulatory compliance

25 questions · 6 categories · ~12 min

UKSC / NIS2 readiness

Whether the act applies to you directly or as a supplier to an essential entity — and where your biggest gap is. Risk management, incidents, supply chain, delivery process, continuity.

25 questions · 6 categories · ~12 min

DORA readiness

For banks, fintechs, payment institutions and ICT providers to the financial sector. ICT risk framework, incidents, resilience testing, supplier register, continuity.

25 questions · 5 categories · ~12 min

CRA readiness

Whether the rules on products with digital elements cover your product. Vulnerability reporting, bill of materials, updates, technical documentation.

5 fields · ~2 min

Maximum regulatory fine

The upper cap of the fine you are exposed to given your turnover and status. A number worth showing the board before someone else asks.

Delivery process and selling to enterprise

30 questions · 6 categories · ~15 min

Delivery process maturity

Our most complete assessment, based on OWASP SAMM. Governance, design, build, verification, deployment, response.

25 questions · 6 categories · ~12 min

Client questionnaire readiness

A big client sends a questionnaire of several hundred questions and the contract stalls. Check how much of it you could fill in today — and what it will cost you.

6 fields · ~2 min

Security questionnaire cost

What enterprise client questionnaires cost you in a year — in team hours and in contracts waiting for your answers.

The results are indicative and do not replace an audit or legal advice. They are based only on your answers — we do not inspect your systems. This is a starting point for a conversation, not a conformity assessment.

—

Let's find where risk
enters your delivery process

We reply within 24h on business days