Free tools for staying out of trouble.
Built for companies of 10 to 250 people that use AI, hold customer data, and do not have a compliance department. No account needed to run any of them. Your answers stay in your browser until you choose to save them to a free workspace.
Posture Review
The whole company in nine areas: people, systems, security, privacy, AI, vendors, incidents, contracts. A scored report and your first ten actions.
What applies to me
Eight questions, no account, a dated list of the laws and expectations that apply to you.
Security Essentials and risk register
Essential cyber hygiene sized to your company, with the Texas SB 2610 tiers, insurer questions, and a risk register builder.
Domain check
Passive checks of your email and website setup: SPF, DKIM, DMARC, HTTPS, headers, certificate.
AI Tool Register
What the common AI tools do with your data, and what each is safe for.
CMMC Level 1 self-check
The fifteen requirements every defense supplier handling federal contract information must self-assess annually.
Fraud and deepfake kit
The payment verification procedure and checklist that stop voice-clone and fake-invoice fraud.
Incident Desk
First 24 hours for the five things that actually happen to small companies, with who to notify.
Privacy check
Which privacy laws apply to you, and what they ask for.
Deployer Baseline self-assessment
Fifteen controls, a maturity level, and the gaps to close first. Publish it as an attestation if you choose.
Policy generator
Six starter policies written from your answers, mapped to the Baseline.
Free courses
AI literacy, deepfake awareness, and security basics, with certificates you can keep as evidence.