Practical cyber security assessment and risk management
Assess your organisation against the 47 Foundation controls, and run AI-powered risk reports on the apps and vendors you use. Built for business, education and not-for-profit.
Start free
Two tools, one platform
The Foundation platform covers both sides of the job: how secure your organisation is, and how risky the software you rely on is.
Foundation Cyber Security Check
Assess your security posture against the 47 Foundation controls
Work through one plain-language question per control, at your own pace, across the four pillars: Strategy, Protection, Response and Recovery.
- AI-generated executive summary and a prioritised task report, written for your leadership team
- Risk and alignment reporting mapped to the Essential Eight, ISO 27001, CIS Controls and NIST
- Export reports to Word and Excel, and track your maturity year on year
- Invite colleagues and work through the assessment as a team
App Risk Reporter
Know the risks before you roll out a new app
A school weighing up an edtech app, or a business signing up to a new SaaS vendor - enter the app, add its privacy policy or terms if you have them, and get a structured risk report.
- Findings across privacy, security, compliance and data handling, with risk scores per category
- Web research built in - the platform finds the vendor’s public documentation for you
- Clear recommendations: what to action now, what to monitor, what to ask the vendor
- Export to Word for your records, or to share with your leadership team
How it works
Sign up free
Create a free account with your work email. No credit card, no sales call.
Run your first assessment
Take the 2-minute Quick Security Check, start the full 47-control assessment, or run an app risk report.
Share board-ready reports
Generate plain-language reports your leadership team can act on, and track improvement over time.
Our clients
Customers just like you who are implementing their own robust and practical cyber security strategy
Want an independent review instead?
If you’d rather have someone run the assessment for you, the Dedicated Cyber Security Review is a one-week, documentation-based review against all 47 Foundation controls, with a board-ready report and a prioritised action plan.
About the Dedicated Review