Start here
Cybersecurity assessment
How is my company's cybersecurity, and where do I start?
Take the assessment: Cybersecurity assessmentFree cybersecurity tools
Check whether your domain can be spoofed by email and how your website is configured. Each tool explains what it measures, how it calculates it and what it does not cover.
- Free, and you do not need an account
- They explain what they measure, how they calculate it and what they do not cover
- For guidance: they do not replace an audit or legal advice
If you do not know which rules apply to you
Which EU rules apply to me?
Which of NIS2, DORA, the CRA and the AI Act should I review first?
Open the map: Which EU rules apply to me?Where do I stand?
A starting point on the security of your company, your email and your website.
Can my domain be spoofed by email?
Are HTTPS, security headers and cookies set up properly on my website?
Which rules apply to me?
Check rule by rule whether it covers you and what it would require.
Does NIS2 cover me because of my activity and my size?
Am I a financial entity within DORA, or what will my client require from me as an ICT provider?
Are my products with software or connectivity within the Cyber Resilience Act?
What does the EU AI Act require of me for using, integrating or developing AI?
What would it cost me?
The cost of downtime caused by a cyberattack, calculated with your figures.
How much would downtime from a cyberattack cost me?
For suppliers and documentation
Questionnaires and templates to request, record and organise security.
What security should I ask each supplier for, based on its risk?
Frequently asked questions about the tools
On this page: Cybersecurity assessment, Which EU rules apply to me?, Email and domain check, Website check, Incident cost calculator, Supplier security assessment and “Does it apply to me?” checks for NIS2, DORA, the Cyber Resilience Act and the EU AI Act. Each tool explains what it measures, how it calculates it and what it does not cover.
More than specific software, managing security rests on a few foundations: someone in charge with management support, knowing which devices and data you have, controlling who gets in and how, keeping devices protected and up to date, backups that can be restored, an incident response plan and reviewing your suppliers.
With the map of EU rules: a few questions tell you which rules to review first and take you to the check for each one without repeating what you have already answered.
They are free, and you do not need to create an account or leave your email to use them or to see the result. Some also offer an email report, which is optional.