Enhanced Security Readiness Audit
Cyber Essentials is the baseline. This audit covers what actually breaches small businesses today: AI tools and agents with access to your data, phishing kits that bypass MFA, deepfake payment fraud, exploited firewalls and VPNs, and cloud services that change every week.
- 27 areas, 171 checks
- AI and modern threats
- Stays in your browser
Open a log book
Files saved from this tool, or from the earlier version of our Cyber Essentials log book, can be imported.
In this browser
What's new in this version
- AI tools and governance: approved tools, shadow AI, and fixing oversharing before Copilot or Gemini can surface it.
- AI integrations, agents and APIs: app consent in Microsoft 365 and Google Workspace, meeting bots, desktop agents and MCP connectors, prompt injection and API key handling.
- AI-powered and modern attacks: deepfake payment fraud, MFA-bypassing phishing kits, ClickFix, QR phishing, fake IT support in Teams, help-desk social engineering and infostealers.
- Cloud servers, code and continuous testing: weekly patching and scanning, security checks on every release, supply-chain risk, secrets, and annual penetration testing.
- Exploited edge devices: firewalls and VPNs patched within 48 hours when attacks are underway.
Also covers
People and policy, inventory, network perimeter and segmentation, Wi-Fi, device hardening, printers, patching, identity and MFA, privileged access, malware defence, email security, Microsoft 365 and Google Workspace, remote access, websites, databases, phones, hybrid working, backups, logging, incident response and suppliers.
- Draws on NCSC guidance, Cyber Essentials, PCI DSS v4.0.1 and the OWASP Top 10 for LLM applications.
- Never record passwords, API keys or other secrets in the log book.
- Need certification? Start with the Cyber Essentials Checker.