Your security in 2 minutes.
Six essential questions for a first diagnostic. Get a clear verdict and the recommended next step.
1. Is multi-factor authentication (MFA) enabled on your email and remote access?
2. Are your backups isolated and tested with a restore?
3. Do you have endpoint detection beyond antivirus (EDR)?
4. Do your systems generate monitored security alerts?
5. Are your employees trained to recognize phishing?
6. Do you have a written incident response plan?
Please answer every question.
Verdict
—
Get your full diagnostic
The detail by theme and your next steps, by email.
Your next step
How the Express Audit works
Six yes/no questions, two minutes, an instant verdict.
Each "yes" is worth 1 point, each "no" or "not sure" is worth 0. The total runs from 0 to 6, across six practices: MFA, tested backups, EDR, monitored security alerts, phishing training, a written incident response plan.
This is the shortest format on the site, on purpose. No nuance between "partially in place" and "in place" like in CyberScore — here it's yes or no, for a first verdict in two minutes. For a finer assessment across 10 dimensions with partial answers, CyberScore is the one to take instead.
Below 3, we're talking high risk — essential protections are missing. Between 3 and 4, a base exists but important gaps remain. At 5 or 6, a good start, worth confirming with a deeper assessment.
Frequently asked questions
How is this different from CyberScore ?
Shorter: 6 yes/no questions versus 10 with nuance (partial/complete), for a quick first verdict. CyberScore gives a more detailed picture, with a priority plan.
Are my answers kept ?
They're used to generate your diagnostic, nothing else. No resale, no sharing.
After the diagnostic, am I committed to anything ?
Nothing. An expert can review your answers with you if you'd like, no obligation.