For UK small businesses
Cyber security & compliance, in plain English
Free checks built around what a UK small business actually faces — Cyber Essentials and UK GDPR, the controls insurers and buyers ask about, and the ICO fines that show why it matters. Priced out of a consultant, not out of knowing where you stand. No sign-up, nothing stored.
Cyber Essentials readiness
Start here · Free · UKCyber Essentials is the UK government-backed baseline certification — increasingly required to win public-sector and larger supply-chain contracts. Check whether you'd pass the five controls today, in plain English, with the exact gaps to fix. Free, no sign-up, nothing stored.
Check my readiness→UK compliance & certification
UK GDPR readiness
Free · UKWhere does your business stand on UK GDPR? A free, plain-English check across the areas the ICO actually looks at — with clear steps to fix each gap. No sign-up.
Check my GDPR readiness→Cyber insurance readiness
Free · UKCould you get UK cyber insurance — and would a claim actually be paid? A free check against the controls insurers ask about (MFA, patching, backups, email spoofing), with the knock-outs flagged. No sign-up.
Check my insurability→Cyber Essentials guides
Free · UKNew to Cyber Essentials? Plain-English guides to all five controls, every question explained, and what the scheme means for your industry — the reference library behind the readiness check.
Read the guides→Free security scans
Security posture scan
Free · no sign-upThe main free check. Grade any domain's public security hygiene A–F — security headers, HTTPS/TLS, email anti-spoofing (SPF/DMARC), DNS and reputation — with plain-language fixes. Passive and read-only. No sign-up.
Run a posture scan→Exposure check
Free · no sign-upSee your site the way an attacker does — which services are reachable from the open internet, and what to do about them. No sign-up, nothing stored.
Run an exposure check→Can your domain be spoofed?
Free · no sign-upCan criminals send email pretending to be your business? An SPF/DMARC traffic-light verdict with exactly what to fix — a common route into UK invoice fraud. No sign-up.
Check email spoofing→Is this link safe?
Free · no sign-upGot a suspicious link in an email or text? Paste it — instead of clicking it — for a plain-English verdict and what to do next. No sign-up, nothing stored.
Check a link→In-depth vulnerability scan
Verified · privateA full nmap + nuclei scan, every finding explained in plain language and mapped to security frameworks. For a website you verify as your own — no account, and we delete it after a few days.
Verify & scan — no sign-up→Self-checks
Self-assessment
FreeCheck the practices only you can see — your internal cyber hygiene — against the NIST CSF 2.0 functions, in plain English.
Start the self-assessment→Have your emails been in a breach?
Free · ExternalCheck whether your email address appears in known data breaches, via Have I Been Pwned — the trusted, independent breach database. Opens on their site.
Check on Have I Been Pwned↗UK cyber news & guidance
ICO fines & breach roundup
Free · UKRecent UK ICO fines and breaches in plain English — who was penalised, why, and the cheap lesson for your business. A reason to check back; reinforces the readiness checks. No sign-up.
Read the roundup→What to patch now
FreeA weekly, plain-English briefing of the vulnerabilities attackers are actively exploiting right now — from the CISA Known Exploited Vulnerabilities list — and what to do about them. No sign-up.
See what to patch→Cyber security news
FreeA plain-English digest of the cyber-security news that actually matters to a small business — the story, and what to do about it. Updated regularly. No sign-up.
Read the digest→These are free readiness / gap reports to help you prepare — they are not a certification, not an ICO assessment, and not legal advice. We are not an IASME Certification Body. Findings reflect what we could observe at the time of the check.