These tools turn our guides into something you can use in a few minutes: check where you stand, estimate what security costs, draft your policies and tick off the basics. They are free, need no account, and run in your browser.
On this page: The tools · Which first? · Your data · Coming soon · FAQ
Which free tools can you use?
Cyber Insurance Readiness Check
Score your business against 12 controls insurers commonly ask about, see your gaps in priority order, and get a sample premium range for your industry.
Managed Security Cost Estimator
Compare published provider price ranges for managed IT, managed security, MDR and a vCISO at your team size.
Security Policy Generator
Answer 12 questions and get a six-policy pack in plain language: acceptable use, passwords, devices, incident reporting and more. Download as a Word-compatible file.
12-Step Cybersecurity Checklist
Tick off the basics from asset inventory to incident review. Progress saves on your device, and you can print it.
Which tool should you start with?
| If you want to… | Start with | Time |
|---|---|---|
| See if you would qualify for cyber insurance, and what to fix | Cyber Insurance Readiness Check | About 2 minutes |
| Get a to-do list for the basics, from zero | 12-step checklist | 10 minutes to read, then an afternoon per item |
| Budget for managed security or a vCISO | Managed Security Cost Estimator | About 1 minute |
| Write the policies an insurer, client or auditor asks for | Security Policy Generator | About 10 minutes |
A sensible order for most small businesses: checklist, readiness check, policies, then the cost estimator when you are ready to hire help. If you want a schedule, use the 30-day cybersecurity plan.
What happens to the information you enter?
By default, the readiness check, cost estimator and policy generator calculate in your browser, and what you type is not sent to us. The checklist stores your ticks on your own device so they are there when you come back. If we ever add an option to email your results or request quotes from an insurer or provider, it will be a separate step you choose, with its own consent text, and we will update our Privacy Policy first. Some links on this site are affiliate or referral links; we mark them and explain how we earn money in our Affiliate Disclosure.
What tools are coming next?
- Incident response plan template, a fill-in plan for who to call and what to do in the first hours of an incident.
Want something else? Tell us which question you keep asking, and we will consider it.
Frequently asked questions
Are these cybersecurity tools really free?
Yes. They are free to use, with no account or credit card. Some pages link to partners we may earn a commission from, which is always disclosed and never changes the result you see.
Do the tools store or send my data?
By default no: the readiness check, cost estimator and policy generator work in your browser. The checklist saves your progress on your own device only.
Can the readiness check guarantee I will get cyber insurance?
No. It shows how you compare with controls insurers commonly ask about and gives a sample premium range for your industry. Insurers decide for themselves, and real quotes depend on their own questions.
Are the cost figures real quotes?
No. The cost estimator uses provider-published price ranges, which are list prices and not independent measurements. Real quotes depend on scope and vendor.
Is the policy generator legal advice?
No. It drafts plain-language policies from your answers. Have them reviewed if you are in a regulated industry, such as healthcare, legal or financial services.
Which tool is best for a business with no IT staff?
Start with the 12-step checklist, then the readiness check. If nobody can act on security alerts, read our guide to small business cyber security services.
Last updated October 9, 2026. SMB Security HQ provides general information, not legal, financial or professional security advice. See our Affiliate Disclosure and How We Test.
