Free Security Overview builder for small vendors
Answer 26 questions about what you actually do and get a one-page Security Overview and a list of gaps with fix steps. It runs in your browser.
What the builder does
You answer 26 questions about controls you have today, each as yes, partly, no or does not apply, plus company details such as the person responsible, the hosting providers and where client data is stored. The overview updates as you type. Nothing is uploaded: your answers are kept in your browser's local storage on this device.
What you get
- A one-page Security Overview with an About section (team size, hosting, data region, the most sensitive data you hold, certification status), a list of controls in place and a list of controls in progress with your target date.
- A gap list. Every control you marked as missing or partly in place gets a concrete fix step.
- Three ways to take it away: copy the text, download it as a .txt file, or print it and save it as PDF.
The areas it covers
The 26 controls fall into these areas: Access, Devices, Encryption, Resilience, Monitoring, Development, Incidents, Vendors, People, Data, AI tools, Assurance.
Why send an overview first
Sending the overview before the questionnaire is the second step in the process for answering a security questionnaire. It shows the client what you do before they read a long list of questions.
What the free tool does not do
It does not write answers to the questionnaire questions, policies or emails. Those are in the paid kit: 86 prefilled answers, 8 policy templates and 5 email scripts for EUR 49. The overview does not certify you and is not legal advice.
Guidance and templates, not legal advice. The kit does not certify you. Your answers must match what you actually do.