Twelve plain questions about the technology your business runs on. About ten minutes. Nothing is sent to us — the result stays on your computer, and you can print it or save it.
Most small businesses that fail a cyber insurance assessment do not fail because a control is missing. They fail because the owner could not recognise the question, or could not produce the evidence. This asks the questions in language you can answer, and then shows you what you can and cannot prove.
“I am not sure” is a real answer here, and it is often the most useful one. It means a control may well be in place but you could not demonstrate it if someone asked — and that is exactly the gap an insurer turns into a declined claim.