How exposed is your business?
Find out in 9 minutes. Instant result.
What kind of business do you run?
Before the 21 questions, tell us a bit about the business context.
This helps us recommend the right starting point, not just the obvious gaps.
Optional personalisation
Add your company and website now
We will start preparing company-specific website context while you complete the assessment, so the full brief is ready faster at the end.
Optional. Leave this blank to skip and you can still personalise at the end.
How many people work in your business?
This helps us tailor cost estimates to your business size.
If a security or privacy issue hit your business, how hard would it hit?
How much security pressure are you under right now?
How complex is the environment you need to stay on top of?
Your results by domain
Recommended services based on your gaps and what the business is dealing with
Recommended starting point
What your results mean
Based on a typical business in your industry. Add your team size above for a more specific estimate.
With Basic Controls
Incident contained within
Typical cost:
Business continues with minor disruption
With Your Current Gaps
Incident escalates over
Typical cost:
The difference is not the attack — it is the response. Businesses with a tested incident response plan contain incidents 74 days faster.
Source: IBM Cost of a Data Breach Report 2024
What's changing around you
Things shifting for businesses in your sector, regardless of whether an incident occurs:
Right now, everything above is sitting on your desk.
For /month, it sits on ours.
Source details
Cost ranges sourced from NCSC NZ Cyber Threat Report 2024, ACSC Annual Cyber Threat Report 2024, Kordia NZ Cyber Security Report 2024, and IBM Cost of a Data Breach Report 2024. Environmental pressure data from Arctic Wolf 2025, NZ Privacy Commissioner 2024-25, and industry-specific regulatory sources. All figures in NZ dollars.
Security Exposure Brief
A report you can actually take away.
Most likely starting point:
Where exposure is most likely to show up
What to do in the next 30 days
Personalise your brief
See how this applies to your business
We'll fetch your website's public pages and use AI to identify business context relevant to your security position. No data is stored — the analysis happens in real time and the results stay in your browser.
Here's what we picked up — does this look right?
We will send the full brief and your assessment context, not just the score.
Sent. Check your inbox.
This assessment is a structured benchmark based on self-reported answers. It is not a substitute for a professional security review.