Free tool · 2 minutes

What's your CyberScore?

Answer 10 questions and get your cybersecurity maturity score, your risk level and your concrete priorities. No installation, no jargon.

1. Is multi-factor authentication (MFA) enabled on your email and remote access?

2. Are your backups isolated and tested with a real restore?

3. Do you have endpoint detection and response (EDR)?

4. Are your systems monitored 24/7?

5. Are your employees trained and phishing-tested regularly?

6. Are security patches applied quickly (workstations, servers, apps)?

7. Do you have a written and tested incident response plan?

8. Has a penetration test been done in the last 12 months?

9. Are you compliant with Law 25 (privacy officer, incident log, policy)?

10. Do you regularly review access (least privilege, inactive accounts)?

Please answer every question before continuing.

0/ 100

Get your detailed report

Your prioritized action plan and recommended fixes, by email.

Your priorities

Where to focus first, each point leads to the matching solution.

Method

How CyberScore works

Ten questions, ten minutes, a score out of 100. No installation, no scan of your systems: the score reflects only what you answer.

Each question is worth 10, 5, or 0 points depending on whether the practice is fully in place, partial, or missing. We add up the 10 answers. It covers the essentials: MFA, backups, EDR, monitoring, training, patching, incident plan, penetration testing, Law 25, access management.

This isn't an audit — nobody checks your answers, and the calculation doesn't weight anything: missing MFA counts the same as missing an access review, even though the two don't carry the same real-world impact. There are also angles it doesn't ask about (email filtering, vendors, physical security). In short, a useful signal, not a full diagnosis.

Below 40, we're talking missing basics — and that's where fixing things pays off the most. Between 40 and 64, there's something solid but real gaps to close first. Between 65 and 84, the posture holds up, a few targeted adjustments are what's left. Above 85, you maintain the course with regular monitoring and testing.

FAQ

Frequently asked questions

Does this replace a real audit ?

No. It's a self-assessment based on your answers. Useful to see where to focus a first conversation, not a substitute for a technical review.

Do my answers stay private ?

Yes. They're used to generate your report, nothing else. No resale, no sharing.

What exactly is the calculation ?

The sum of your 10 answers (0, 5, or 10 points each), out of 100. No industry average factors in — just your answers.

After I get my report, am I committed to anything ?

Nothing. You get your priorities and the matching services. The 30-minute call is offered if you want to discuss it, never mandatory.