Know how exposed your business is, and what to fix first.
32 plain-language questions built on NIST CSF 2.0 and the CIS Controls. You get a score, a ranked list of gaps weighted to your kind of business, and reports your insurer and leadership can read.
Takes about 20 minutes. No scans, no software to install.
Sample dental practice, 28 staff
Illustrative
70 / 100
Fix first
- Backup restores have not been testedCritical
- Admin privileges on everyday accountsCritical
A score you can explain
Every point traces to a weighted control. The methodology is published, and the same answers always produce the same score.
Fixes ranked for your business
A missing MFA policy matters more when you hold patient or card data. Findings are weighted by what you handle and how you work.
Verified where it counts
Connect Microsoft 365 with read-only access to confirm MFA, admin and device settings. Reports mark which answers were verified.
Plans
Monthly, cancel any time.
Basic
Know where you stand
$49 per month
- Guided NIST CSF 2.0 / CIS assessment
- Risk score & prioritized findings
- Executive PDF report
- Remediation task tracking
- 3 team members
Professional
Fix what matters, prove progress
$149 per month
- Everything in Basic
- Technical PDF report
- AI remediation guidance grounded in your findings
- Microsoft 365 read-only verification
- 10 team members
MSP
Run assessments for your clients
$499 per month
- Everything in Professional
- Up to 25 client organizations
- 50 team members
- Priority support
What SecureScore is not
SecureScore is a guided self-assessment. It is not a penetration test, vulnerability scan, audit, or certification of compliance with any law or standard. It never probes or scans your systems. Answers are self-reported unless marked as verified through an integration you authorize.