Cyber maturity score: assess your security on 6 axes

Your cyber maturity across 6 axes

Six questions, one per axis, and you get an overall view of your security posture — with the weak axes that deserve your attention first. The score is computed in your browser, nothing is transmitted. Answer honestly: it is the only way to get anything out of it.

How are accesses to your systems protected (MFA, privileged accounts)?Passwords only, accounts sometimes sharedMFA on a few services onlyMFA everywhere, separate administrator accountsMFA everywhere, privileged accounts managed and reviewed regularly

Where do your backups stand (3-2-1 rule, immutable copy, tested restore)?Irregular backups, or none at allRegular backups, but a single location3-2-1 rule in place, with an off-site copy3-2-1 with an immutable copy and regularly tested restores

How are your workstations kept up to date and protected (updates, EDR)?Updates left to each user, no managed protectionAutomatic updates on most machinesFleet up to date and centrally managed antivirusFleet up to date and supervised EDR on every machine

Is your network segmented (separate zones, distinct guest wifi)?Flat network, one wifi for everyoneSeparate guest wifi, but everything else on one networkSeparate guest wifi and servers isolated from workstationsFull segmentation with filtering between zones

Are your teams regularly made aware of phishing?No awareness effort at allOccasional guidance (email, posters)Formal awareness sessions at least once a yearRegular campaigns with simulated phishing tests

What happens if an incident hits tonight (written plan, contacts)?Nothing planned, we would improviseThe right contacts are known, but nothing is written downA written incident plan existsWritten and tested plan, contacts and roles kept up to date

Your cookie choice

We only set the cookies you agree to. No data is used for advertising and no profile is built. Privacy policy

Strictly necessary

Always on

Storing this choice and your language preference. Kept in your browser, never sent to a server. Required for the site to work.

Cookieless audience measurement

Always on

We also use Matomo, self-hosted and configured without cookies or cross-site tracking. On that basis it does not require your consent and stays active.

Google Analytics audience measurement

Aggregated traffic statistics via Google Analytics 4, loaded by Google Tag Manager. Sets cookies on your device and transfers data outside the European Union. Off by default.

Your choice is kept for six months. You can change it at any time from « Manage my cookies » at the foot of the page.

Your cyber maturity across 6 axes

Your result

Get the detailed report by email

Your cookie choice