You get a scored list of what you missed, why it matters, and how to fix each item. Everything is computed in your own browser - nothing is uploaded and we receive no data. No software to install, no network scan, no access to your systems.
Small and mid-sized companies are rarely breached by an advanced actor. They are breached through three things: accounts nobody controls (shared logins, departed staff, weak passwords), payments nobody verifies (a bank-detail change confirmed by one phone call), and data that exists once (backups on the same network). None of the three requires buying hardware. They require deciding the rule and keeping a record.
The code on the left of each item (3.3, 4.1, 8.1, 9.2 ...) is the pipeline sub-item ID from our delivery report: 3.3 "shared and privileged accounts", 4.1 "sender identity", 8.1 "3-2-1-1-0 backup table", 9.2 "admin and management entry points". The self-check and the paid report use the same numbering, so you will not get "the free check said fine, the report said critical".
Want to go further? Continue to the 18-question assessment for industry fit, tier and quote - or ask us what the full report looks like.