For UK small and medium-sized businesses
Understand your cyber and AI risk
Complete a practical security self-assessment designed for small and medium-sized businesses. 41 questions, about ten minutes, and a report you can act on.
Start assessment
No credentials, scanning or system access required.
Identify security weaknesses
Across identity, devices, email, backup, governance and incident readiness.
Review AI governance
Whether staff use of generative AI is known, approved and bounded.
Understand priority actions
A severity-ranked plan for the next 7, 30 and 90 days.
Assess preliminary Cyber Essentials readiness
An indication of which of the five control areas are likely to need attention.
What this assessment does not do
It does not connect to your systems, scan your network, read your email, or ask for passwords, API keys or files. Every result is derived from your answers alone, and scoring is deterministic — the same answers always produce the same result.