A readiness self-assessment, scored the same way every time.
Twelve questions across security controls, compliance readiness and evidence readiness. You answer; it scores; you get a PDF with your lowest-scoring gaps and what to do about them. It takes about ten minutes.
Twelve questions, in three groups.
Written for a founder or an operator rather than for a security engineer. Every question takes yes, partly, no, or unsure — and unsure is a real answer that scores differently from no.
Security controls
Multi-factor authentication, backups and restore testing, endpoint protection and patching, joiner-mover-leaver access, and whether you would notice an unusual sign-in.
Compliance readiness
Whether you know what Cyber Essentials would ask of your current setup, where personal data sits and who can reach it, and whether a customer security questionnaire is answerable without a scramble.
Evidence readiness
Documented policies with review dates, evidence kept in one place, named owners and due dates on security actions, and an incident process staff know how to start.
A score, its method, and your gaps.
The scoring method is published rather than described as proprietary, because a readiness score you cannot check is the same problem as a compliance claim you cannot check.
A score per category, and overall
Each answer scores: yes 100, partly 60, unsure 25, no 0. The three category scores are averaged for the overall figure. That is the whole method, and it is published here so the number is not a black box.
Your lowest-scoring gaps, ranked
Up to six, ordered by how far short the answer fell, each with a practical recommendation rather than a control reference.
A PDF report
Generated at submission and queued for delivery to the address you give. It carries a reference number so you can cite it back to us.
This is a lead form, and it is fair to say so.
The assessment is genuinely free and genuinely useful. It is also how Fortoxa finds customers, and you should know that before you type your email address in.
Your answers are stored
Your name, work email, company, role, company size and all twelve answers are saved against a report reference, along with what prompted the assessment and any deadline you give.
A person may follow up
The submission is scored for sales priority and sent to the Fortoxa team with your report attached. Expect an email; you can decline it and ask us to delete the record.
It is not shared onward
The report is generated and stored by Fortoxa and delivered to the address you give. See the privacy notice for retention and for how to ask for erasure.