Cybersecurity readiness for small and mid-sized businesses
Stop guessing. Know you're ready.
In under an hour, find out how ready your business is when an insurer, customer or partner asks you to prove it, and get a clear plan to close every gap.
The question
How secure is your business, really?
Sooner or later, someone will ask. An insurer at renewal, a customer with a security questionnaire, a contract that requires it.
MyCybersecurity Readiness @SMB gives small and mid-sized businesses a clear, plain-language answer, whether you are taking your first step or confirming the work you have already done.
Want the background first? Read A Simple Guide to Cybersecurity for Small and Medium-sized Businesses: How secure is your business, really? by Dr. Noel G. Alexander, available on Amazon.
Who it's for
Ideal for businesses like yours
Built for growing companies with 10 to 499 employees that need a credible answer without hiring a full-time security leader.
10 to 499 employees
From growing teams to established mid-sized companies.
No dedicated security leader
Your IT is handled by an outside provider or a small in-house IT team.
Sensitive data to protect
You hold client, patient or payment information.
A deadline to meet
An insurance renewal, customer questionnaire or contract is coming up.
Especially popular with professional services firms, health practices, small financial firms, and retail and e-commerce businesses.
When it matters
Ten moments when you need to be ready
- Applying for or renewing cyber insurance
- Answering a customer's security questionnaire
- Signing a contract with security requirements
- Going through a lender or investor review
- Fielding a board or partner question
- Hiring new staff or supporting a remote team
- Moving to a new cloud service or software tool
- Hearing that a peer business was hit by ransomware
- Meeting an industry or regulatory requirement
- Setting next year's budget and plan
How it works
Ready in under an hour
One private path: you complete it yourself, at your own pace, in your browser.
- 1FREE · ABOUT 2 MINUTES
Prescreen, then 5 questions
Tell us about your company and whether to include AI Readiness. Then answer the five essentials with no account and no email, and see your preliminary readiness level right away.
- 2CHOOSE A PLAN · 20 MORE QUESTIONS (+12 IF YOU USE AI)
Finish your readiness check
Your first answers carry over. Answer 20 more plain-language questions aligned to the NIST Cybersecurity Framework. If you selected AI Readiness, its 12 questions are part of the same check.
- 3RESULTS IN MINUTES
Get your Readiness Package
- Signed Readiness Report with a score from 0 to 100
- Gaps ranked P1, P2 and P3
- A Readiness Guide video for every question, in the app
- A separate AI Readiness score, if selected
Check again as you improve. Fix your gaps, then reassess with your rescan or your plan’s credits, and get a progress report you can share with your insurer or customers.
Why readiness matters now
Know where you stand. Fix what matters first.
Know where you stand
See your readiness today, in plain language, measured against a recognized standard.
Fix what matters first
Get your gaps ranked by priority, so time and budget go where they count.
Prove it when asked
Answer insurers, customers and boards with confidence, backed by a written report.
Spend only where it counts
Avoid the cost of a breach, and avoid paying for security you do not need.
Sample Readiness Report
Example Dental Group
Signed by VAST
Example only. Your report reflects your own answers.
Private by design
Your answers never leave your device
You complete MyCybersecurity Readiness @SMB yourself, which is what keeps it private. No one sits in on your answers, and you decide what to share and with whom.
- Only anonymous answer values are sent for scoring.
- Your identity, notes and report stay with you.
- Results are signed so anyone you share them with can trust them.
- No trackers in the readiness app.
Your device
- Your identity
- Your answers and notes
- Your Readiness Report
VAST scoring service
- Scores in memory
- Signs your result
- Keeps nothing that identifies you
Plans
Choose how you stay ready
Every plan includes the full 25-question check, a signed Readiness Report and the Readiness Guide video library. Add AI Readiness to any plan when you select it in the prescreen. No account needed: Stripe handles billing, and your answers never leave your device.
ONE-TIME
Readiness Check
$199once
$279 with AI Readiness
- Initial assessment plus one rescan
- 3 months of access to scanning and videos
- Signed Readiness Report to keep
- Full price credited if you go annual within 3 months
ANNUAL
Stay ready all year
$490a year
$690 a year with AI Readiness
2 months free compared with monthly.
- 12 assessment credits, ready when you are
- Videos and content updates all year
- Progress reports as you improve
- Credits work across My products as they launch
MONTHLY
Stay ready month to month
$49a month
$69 a month with AI Readiness
Your first 3 months are $79 a month ($109 with AI Readiness), then the regular rate. Cancel any time after that.
- 1 assessment credit each month (up to 3 roll over)
- Videos and content updates while active
- Progress reports as you improve
The first 5 questions are always free. AI Readiness adds 12 questions and a separate AI Readiness score to every check on your plan. Scanning and videos are available while your plan is active; reports you download are always yours to keep.
AI Readiness, built in
Uses AI at work? Your check covers that too.
AI Readiness is part of MyCybersecurity Readiness @SMB. In the prescreen, tell us your team uses AI tools and AI Readiness is selected for you: 12 more questions join the same check, and your report adds a separate AI Readiness score. If you do not use AI, you are not asked.
- An AI use policy and a named owner for AI decisions
- Which AI tools staff use, including unapproved “shadow AI”
- Keeping client, patient and payment data out of public AI tools
- AI vendors, AI agents, staff training and what to do when AI gets it wrong
About 15 more minutes. Scored from 0 to 100 against the NIST AI Risk Management Framework, with every gap ranked and a short video for each, just like the core check.
How many people work at your company?
Does your team use AI tools at work?
Do you build or connect AI to your own systems or customer data?
Need more support?
Bring in a VAST vCISO
A vCISO is a virtual Chief Information Security Officer: senior security leadership for your business, part time, without the cost of a full-time hire. Your vCISO picks up where your Readiness Report leaves off, and you decide what to share.
Close your gaps
Turn your priority list into a practical plan, and see it through.
Answer the hard questions
Complete insurer, customer and board security questionnaires with confidence.
Lead your program
Policies, a roadmap and ongoing guidance, in flexible blocks of hours.
Questions
Frequently asked questions
Is it free to start?
Yes. The first 5 questions are free, with no account and no email, and they give you a preliminary readiness level.
How long does it take?
Less than an hour to answer all 25 questions, plus about 15 minutes for the 12 AI Readiness questions if you select them. Your signed Readiness Report is ready in minutes.
Is my information confidential?
Yes. Your answers stay on your device. Only anonymous answer values are scored, nothing that identifies you is kept, and the app has no trackers.
What do I get?
Your signed Readiness Report, which is yours to keep, plus a Readiness Guide video for every question. Stream the videos or save them for offline viewing in the app while your plan is active.
Can I check again after fixing gaps?
Yes. The one-time plan includes one rescan within 3 months, and subscriptions include assessment credits: one a month, or 12 a year. Each reassessment comes with a progress report you can share with your insurer or customers.
Do I need an account to subscribe?
No. Stripe handles billing, and you update your card or cancel through a secure sign-in link Stripe emails you. Your answers still never leave your device.
What happens when my plan ends?
Scanning and videos pause until you renew. Reports you downloaded stay yours, and your saved answers carry straight into your next check.
What is the NIST Cybersecurity Framework?
A widely used standard from the National Institute of Standards and Technology that describes what good cybersecurity looks like. Insurers and customers often refer to it.
Is it the right fit for my company's size?
MyCybersecurity Readiness @SMB is designed for companies with 10 to 499 employees, from a growing team that relies on an outside IT provider to an established mid-sized company with a small IT staff but no full-time security leader.
What is AI Readiness, and how is it included?
AI Readiness is an optional part of MyCybersecurity Readiness @SMB for companies whose staff use AI tools. Select it in the prescreen and 12 plain-language questions join your check: AI policy and ownership, the tools in use, sensitive data, vendors, AI agents, training and incidents. Your report adds a separate AI Readiness score from 0 to 100, aligned to the NIST AI Risk Management Framework. It is available on every plan; see Plans for pricing.
What is a vCISO?
A virtual Chief Information Security Officer: an experienced security leader who works with you part time, in flexible blocks of hours.
Readiness matters when someone asks. Be ready before they do.
In less than an hour, MyCybersecurity Readiness @SMB gives you the clarity to see your gaps, the direction to fix them, and the confidence to answer when it counts.
Private by design. Built for companies with 10 to 499 employees.