Cyber Risk Assessment
Discover your organization’s cybersecurity maturity in minutes.
What this cybersecurity risk assessment tool measures
This free cyber risk assessment tool gives leadership teams a fast, structured read on their cybersecurity maturity — without waiting for a full audit. It scores five domains that account for the majority of enterprise breach exposure:
- Identity & access — MFA coverage, privileged access, stale and shared accounts.
- Infrastructure & cloud — public exposure, segmentation, configuration and patch hygiene.
- Application security — secure development practices, API exposure, dependency risk.
- Data protection — encryption, backups, retention, and data-access governance.
- Incident response & recovery — playbooks, backup recovery testing, logging and escalation.
How the cyber risk score is calculated
Each answer contributes a weighted value to a single 0–100 maturity score. The weights are adjusted by industry — a fintech, a healthcare provider, and a SaaS company are evaluated against different risk priorities, so the score reflects what matters most for your context. Your result maps to one of four maturity archetypes:
| Score | Archetype | What it means |
|---|---|---|
| 0–34 | Rookie Risk-Taker | Foundational controls are missing; exposure is high and largely unmanaged. |
| 35–54 | Developing Defender | Some controls exist but coverage is inconsistent across domains. |
| 55–74 | Structured Shield | A workable security posture with identifiable gaps to close. |
| 75–100 | Adaptive Fortress | Mature, well-governed controls with continuous monitoring. |
What you get
In a few minutes you receive an overall cyber maturity score, your archetype, and a domain-level view of where you are strongest and most exposed — a practical starting point before commissioning a full assessment. For the methodology behind the domains and scoring, read our enterprise cybersecurity risk assessment framework guide.
Privacy
The assessment runs entirely in your browser. Your answers are stored only in your device's local storage so you can resume where you left off — nothing is submitted to a server or shared unless you choose to contact us.
Frequently asked questions
Is this cybersecurity risk assessment tool free?
Yes. The tool is completely free and requires no signup. You answer a short set of questions about your industry, footprint, and key security controls, and it returns a cyber maturity score across five domains in a few minutes.
What does the tool measure?
It scores five domains — identity and access, infrastructure and cloud, application security, data protection, and incident response and recovery. Scores are weighted by your industry, so a fintech and a healthcare organisation are evaluated against different risk priorities.
How is the cyber risk score calculated?
Each domain answer contributes a weighted value to a 0–100 maturity score, with weights adjusted by industry profile. The result maps to one of four maturity archetypes: Rookie Risk-Taker (0–34), Developing Defender (35–54), Structured Shield (55–74), and Adaptive Fortress (75–100).
Is my data stored or shared?
No. The assessment runs entirely in your browser and your answers are saved only in your own device's local storage so you can resume. Nothing is submitted to a server or shared unless you choose to contact us.
Is this a substitute for a full cybersecurity audit?
No. It is an indicative self-assessment to surface likely strengths and gaps. A comprehensive engagement adds asset discovery, configuration review, vulnerability scanning, and a prioritised remediation roadmap with named owners.
Want a full cybersecurity risk assessment, not just a score?
We run structured assessments for mid-to-large enterprises — asset discovery, cloud and identity exposure, vendor risk, and a prioritised remediation roadmap with named owners.
Tell us what you're protecting →