A client sent you a 150-question security questionnaire. Answer it this afternoon, honestly.
For agencies, freelancers and small software firms (1 to 25 people) that sell to companies with a security team. Describe what you actually do once. Get a one-page Security Overview for free, then prefilled answers and policies you can send.
Runs in your browser. Your answers stay on this device. No account.
The problem
Bigger clients send vendor security questionnaires before they sign. They are long, they ask about policies a small team never wrote down, and they arrive when you are busy with the actual work. Small vendors on Hacker News describe it like this (public comments, not customers of this kit):
"Whenever we get a client with around 100+ head count, they ask to fill their own security assessment. It takes a lot of time as it has sometimes 100+ questions." source
"I'm just filling in the questionnaires instead for now (and losing some customers who would be too big anyway)" source
Platforms that automate this cost thousands per year. This kit costs EUR 49 once and covers what a small team needs.
Free: build your Security Overview
Answer what is true today. The overview updates as you go. Nothing is uploaded. Skip to your overview
What the full kit adds
86 prefilled answers
Common questionnaire questions in 16 areas (access, devices, encryption, backups, change management, incidents, vendors, AI tools, privacy and more). Each answer is built from your profile, so it says what you actually do. Copy one by one or export all as CSV for the client's spreadsheet.
8 policy templates
Information security, access control, acceptable use, incident response, backup and continuity, data retention, vendor management, secure development. Prefilled with your company name, owner and dates. Download as .md or as .html that opens in Word or Google Docs.
5 email scripts and a gap plan
Send your overview first, ask which sections apply, ask for more time, answer "do you have SOC 2?" honestly. For every "no", an honest interim answer with your target date and a concrete fix step.
Sample answers from the kit (filled from your profile above)
Get the kit
One-time payment. No VAT is charged (small business under Section 19 UStG). Instant access in this browser. No subscription.
Payment by PayPal or card through PayPal. By buying you accept the terms. If the kit does not help you, you get a full refund within 14 days (refund policy).
Questions
Is this a certification or legal advice?
No. The kit helps you describe your real security practices clearly and gives you templates to write them down. It does not make you SOC 2 or ISO 27001 certified, and it is not legal advice. Your answers must match what you actually do.
Does my data leave my browser?
No. Your profile is stored in your browser's local storage on this device. The site has no server that receives it. Payment details go to PayPal only.
The client uses their own spreadsheet. Does this still help?
Yes. Questions are worded differently in every questionnaire, but they ask about the same controls. Find the matching answer in the kit, copy it, or export all answers as CSV and paste them into the client's sheet.
What if I answered "no" to many controls?
The kit writes honest answers for missing controls, with your target date, and the gap plan lists the fix steps. Most fixes for a small team are settings you can change in an hour (MFA, disk encryption, automatic updates).
How do I get access again later or on another device?
Access is unlocked in the browser you paid with. Keep your PayPal order ID. On another device, open the kit page and enter the order ID. If anything is missing, contact support with your order ID.
Who makes this?
A small independent business in Germany. See the imprint.