Free tool

Free IT security scorecard

Nine quick questions about the basics that protect a small business from common scams, ransomware and data loss. You’ll get an instant grade and your top risks. No sign-up needed.

Answer the questions

1. Is multi-factor sign-in (a code or phone prompt after the password) turned on for everyone’s email and remote access?
2. Are your important files and email backed up somewhere separate from your main systems, and has someone tested restoring them?

Microsoft 365 and Google Workspace don’t back up your email and files for you; deleted items can only be recovered for a few weeks. If that’s your only copy, answer “No”.

3. Do all computers get Windows or Mac updates automatically, and have security protection that someone monitors?
4. Do staff get regular security awareness training or practice phishing emails?
5. When someone leaves, is their access to email, files and business apps removed the same day?
6. Do people who work from home or on the road use company-managed devices or a secure connection?
7. Is your domain’s email protection (SPF, DKIM and DMARC) set up so scammers can’t easily send email in your name?

Not sure? Our free email security check tells you in seconds.

8. If you handle patient or client health information, are technical safeguards in place: access controls, encryption and audit logs?
9. Do you have a written plan for what to do after a breach, ransomware or a long outage?

Why these questions

The basics that cyber insurers and attackers both look at

Many of the attacks we see at small businesses don’t need anything clever: a reused password, a fake invoice, an unpatched computer or a backup nobody tested. These are also the controls insurance applications ask about, so a good score here makes renewal paperwork easier too.

Want the details? Read about our managed security services.

FAQ

Frequently asked questions

How long does it take?

About two minutes. There are nine multiple-choice questions, and “Not sure” is always an answer.

Is this a security audit?

No. The grade is based only on your own answers, so it’s a quick way to spot likely gaps. Our free IT assessment looks at your actual systems and settings.

Why does “Not sure” lower my grade?

If nobody knows whether something is in place, it usually isn’t being checked. Finding out is often the quickest win on the list.

What happens to my answers?

Your grade is worked out in your browser. If you enter your email to see the checklist, we send your answers, grade and email address to Mayertech so we can follow up if you’d like help. We don’t store them on this website or add you to a mailing list. See our privacy policy.

Want a real look at your security?

Start with a free, no-obligation assessment and a practical list of what to fix first.