The Security Toolkit Built for Small Business

Take a 20-minute industry-specific assessment and get a scored report your insurance broker will recognize. The assessment covers 8 security domains, maps to NIST CSF and CIS Controls, and produces two downloadable PDFs: one formatted for your insurance application, one that tells your team exactly what to fix and in what order. The average small business scores a 62 out of 100 on their first assessment. Now you will know where you stand.

Coalition, one of the largest cyber insurers in the U.S., reported that 56% of small business claims in 2023 involved ransomware or funds transfer fraud. Knowing your gaps before a claim is filed changes the conversation with your broker.

Generate the nine cybersecurity policies your insurance provider wants to see, customized to your organization, in under an hour. Built from NIST, SANS, and ISACA frameworks and translated into plain English. A law firm paying a consultant to draft these policies would spend between $4,500 and $18,000. You can download all nine for $199.

The FTC's updated Safeguards Rule, which took effect in 2023, requires financial services firms to maintain a written information security program. Firms without documented policies face civil penalties of up to $100,000 per violation.

Before your office manager renews the company's Dropbox subscription or your bookkeeper signs up for a new payroll platform, check our vendor scorecard. We score ten of the most common small business tools on encryption, access controls, compliance certifications, breach history, and SMB fit. Dropbox has experienced three distinct security incidents since 2012. QuickBooks cannot enforce MFA across its user base. Now you can make informed decisions about the tools your business already uses.

Every major cybersecurity control explained in plain English. What it means, why insurance underwriters care about it, and how it applies specifically to your industry. Thirty controls mapped to NIST CSF and CIS Controls 18, with industry-specific notes for healthcare, legal, financial services, and government contractors. No account required.