Request a proposal
Free Audit
Cyber Risk Management
Risk Assessments
Free Cyber Security ScorecardFreeCompliance Readiness AssessmentFreeWhich Compliance Gap Should You Close First? QuizFreeCompliance Readiness Priorities SurveyFreeCompliance Priority Matrix$300Security Posture Dashboard$300Compliance Readiness Review$1,000Unified Security & Compliance Readiness ScorecardFree
Penetration & Phishing Testing
Free Phishing Risk AssessmentFreePhishing and Social Engineering Audit$1,000Penetration Testing Engagement$12,500
Security Compliance
SOC 2 Readiness ChecklistFreeISO 27001 Readiness ChecklistFreeNIST CSF 2.0 Quick-StartFreeHITRUST CSF Readiness GuideFreeISO 9001 Readiness ChecklistFreeCREST Readiness ChecklistFreeApp Defense Alliance Readiness ChecklistFreeWebsite Compliance Checkup$300Unified Security & Compliance Platform Program$9,500 + $1,750/mo
GRC
Free Compliance TrainingFreeCompliance Starter GuideFreeCompliance Roadmap PosterFreeCompliance Frameworks Field GuideFreeCompliance Assessment Starter KitFreeCompliance Dashboard TemplateFreeThe Compliance Defender Circle$300/mo · $397/yrGRC Templates Bundle$300Compliance Gap Remediation Package$497Governance, Risk & Compliance (GRC)from $2,500
Cyber Security Operations
Threat Detection & SOC
SIEM Readiness Report$300SOC Readiness Assessment$497Security Operations Build-Out$9,500Managed Detection & Response Program$2,500/moSOC Readiness Assessment$1,997
Incident Response
Incident Response Playbook TemplateFreeTier 2 Enterprise Security Program$12,500Incident Response Retainer$1,750/mo
Data Operations
Data Platform Design & Architecture Advisory$5,997Operationalized Data — Normalization & Context$9,500
vCISO & Threat Hunting
Threat Hunting Engagement$4,997vCISO Operations Leadership$3,500/mo
Managed Security
Managed Compliance
Managed Compliance Plans$300–$797/moManaged Compliance Essentials$697/moManaged Compliance Complete$1,497/moSecurity Compliance Suite$2,497/moCybersecurity Compliance Program$2,500/mo
Compliance Programs
Compliance Management as a Service — Buyer’s GuideFreeCompliance Services — HIPAA & SOC 2from $997ISO 22301 Gap Assessment & BCMS Buildfrom $797ISO 27001 Gap Assessment & ISMS Buildfrom $997ISO 9001:2015 Readiness Advisoryfrom $997CREST Accreditation Readiness Advisoryfrom $997App Defense Alliance Readiness Advisoryfrom $997Compliance Buildout Program$4,997Public Sector Cloud & FedRAMP Authorizationfrom $12,500
vCISO & Advisory
Zero Trust + vCISO Security Programs$497–$2,997/moCISO-as-a-Service$7,500/mo
Vendor & Third-Party Risk
Trust Center Document ChecklistFreeTrust Center Care Plan$300/moTrust Center Services$997 · $6,997 · $1,497/moCybersecurity Trust Center Build$4,997
Zero Trust Cyber Defenses
Zero Trust
Zero Trust Deployment$4,997Zero Trust Architecture Build$5,000
Edge Security (WAF & DDoS)
Edge Security Readiness AssessmentFreeEdge Security Configuration Audit$300Managed Edge Security$497 · $497/moWAF & Application Security Setup$1,497
AI Security
AI Risk ChecklistFreeAI Risk Exposure Report$300AI Security Starter Pack$300AI Risk Assessment$3,997Managed AI Risk Monitoring$1,497/mo
Cloud & Data Security
Data Encryption Audit ChecklistFreeCloud Priority Matrix$300Cloud Priority Matrix — Encryption & Data Protection$300Managed Key & Data Protection Program$997/moEncryption & Data Protection Rollout$4,997
HomeAboutBlogContactRequest a proposal
Free Audit Request a Briefing →
Free Cyber Security Scorecard

Score your security posture in five minutes

Twelve yes/partly/no questions across identity, devices, data and monitoring — the same four areas DimensionStone Security reviews first in every engagement. Your score and domain breakdown appear instantly on this page; nothing is required to see it.

Start the scorecard

The scorecard

Answer honestly — "partly" is a valid answer. Each question is worth up to 2 points.

Identity & Access

1. Every user account, including admins and vendors, has multi-factor authentication enforced.
2. Departed staff and contractors lose all access the same day they leave.
3. Admin rights are limited to the people who need them and reviewed at least quarterly.

Devices & Network

4. Every laptop and server has managed endpoint protection that reports to a central console.
5. Operating systems and applications are patched within 30 days of a critical release.
6. Remote access uses a VPN or zero-trust gateway rather than open RDP/SSH.

Data & Backups

7. Backups are automated, encrypted, tested by restore at least twice a year, and one copy is offline or immutable.
8. You know where your sensitive data lives (customer, health, payment, personnel) and who can reach it.
9. Laptops and phones that hold company data are encrypted.

Monitoring & Response

10. Security logs from identity, endpoints and cloud are collected somewhere someone actually reviews them.
11. You have a written incident response plan that names roles and has been walked through in the last 12 months.
12. Staff receive phishing/security awareness training at least annually.

Want the written version?

Enter your details and we will email you a copy of your scorecard result with a short, plain-English note on what to fix first. No obligation; we do not share your answers.




    Where to go from your score

    Under 55 — Website Compliance Checkup

    A $300 review of your public website's security headers, TLS, privacy/cookie compliance and exposed services. The fastest way to close visible gaps.

    See the checkup

    55–80 — SOC Readiness Assessment

    A $497 assessment of your monitoring, detection and response readiness, mapped to the controls a SOC 2 or ISO 27001 auditor will ask about.

    See the assessment

    Any score — Security Posture Dashboard

    Turn this scorecard into a live dashboard your leadership can read every month. $300 build.

    See the dashboard

    Questions

    Is this a certification or an audit?

    No. It is a self-assessment to help you prioritise. It does not certify anything and is not a substitute for a formal audit.

    Do you store my answers?

    Your answers are scored in your browser. We only receive what you choose to send through the email form.

    Who is it for?

    Owners, operations leads and IT managers at companies of roughly 10–500 people who want a quick, honest read before spending money.

    Editorial & AI Disclosure