Employee Owned Since 2022  |  Serving Chicagoland since 1996Support: 630-523-0220Sales: 630-526-8030Remote support

Free security scorecard

How secure is your business? Get your grade in two minutes

Ten plain-English questions about the controls that stop most attacks. You get an instant letter grade and your three biggest gaps, then a full report with a fix for every answer.

Question 1 of 10

Answer honestly. Nothing is saved until you ask for your report.
A

Your security grade

Your three biggest gaps

    Get the full report. Every answer scored, with a plain-English fix for each gap, emailed to you.

    Your full report

      How it works

      What the scorecard measures

      The ten questions cover the controls that security frameworks such as the CIS Controls and most cyber insurers treat as the baseline: multi-factor authentication, endpoint detection and response, backups, patching, training, admin rights, email security, incident response, cloud data backup, and access management.

      Each answer is scored from 0 to 10. Your grade is the total out of 100: A is 90 or above, B is 80 to 89, C is 65 to 79, D is 50 to 64, and anything below 50 is an F.

      Next steps

      What to do with your grade

      Start with the lowest scores. In our experience, a handful of controls, especially MFA, EDR with 24/7 monitoring, and tested offsite backups, prevent the majority of the incidents we see at small and midsize organizations.

      If you scored a C or lower, a short conversation with an owner can turn the report into a 90-day plan. If you scored an A, keep proof of each control ready for your next insurance renewal.

      FAQ

      Security Scorecard: common questions

      Is the security scorecard really free?

      Yes. The grade and your top three gaps show instantly with no sign-up. We only ask for your name and email if you want the full report sent to you.

      How accurate is a 10-question scorecard?

      It is a quick self-assessment, not an audit. It is accurate enough to show where your biggest risks are. For a complete picture, WEBIT offers a free risk assessment that checks your actual systems.

      Who should take the scorecard?

      Owners, executive directors, office managers, and IT leads at organizations with roughly 20 to 200 employees. You do not need to be technical to answer.

      What happens with my answers?

      Nothing is stored unless you ask for the report. If you do, your results are emailed to you and shared with WEBIT so an owner can answer questions.

      More free tools

      Try another tool

      Cyber Insurance Readiness Checklist

      The 21 controls insurers ask about, with a readiness score and gap report.

      Open the tool →

      IT Budget Planner for 2027

      Hardware, licensing, support, security, and projects in one plan.

      Open the tool →

      Email Spoofing Checker

      See whether your domain can be spoofed and exactly what to fix.

      Open the tool →

      Two new clients per month. Maximum.

      Want an owner to walk through your results?

      Thirty minutes, no pressure. You will leave with a clear next step, whether or not we end up working together.

      Your report

      Where should we send your report?

      We will email your full scorecard with a fix for every gap. A WEBIT owner may follow up to answer questions, not to pressure you.