Hackability Index How hackable is your company?
Each question is one of the 30 controls on my checklist. Answer yes or no. Every yes moves you down the chart, and a single no is enough for an attacker. Your answers are the same ones saved on the checklist, so each question links to the details and my recommended product.
Sign in and answer each question to see your result.
Yes Does your company use email, computers or the internet?
- Do you have cyber insurance?
- Do you have multi-factor authentication (MFA)?
- Do you have EDR / XDR + MDR?
- Do you have phishing training?
- Do you have Integrated Cloud Email Security (ICES)?
- Do you have EASM + External VM + TPRM?
- Do you have deception technology?
- Do you have backups?
- Do you have IR / DR / Business Recovery?
- Do you have encryption at rest?
- Do you have DMARC?
- Do you have single sign-on (SSO)?
- Do you have Identity Threat Detection and Response (ITDR)?
- Do you have anti-fraud & bot protection?
- Do you have SOAR / security automation?
- Do you have Cloud Access Security Broker (CASB)?
- Do you have User & Entity Behavior Analytics (UEBA)?
- Do you have account takeover protection?
- Do you have Secure Web Gateway (SWG)?
- Do you have Zero-Trust Network Access (ZTNA)?
- Do you have Dynamic Application Security Testing (DAST)?
- Do you have Cloud Security Posture Management (CSPM)?
- Do you have immutable storage?
- Do you have Governance, Risk & Compliance (GRC)?
- Do you have policies and procedures?
- Do you have Static Application Security Testing (SAST)?
- Do you have patching?
- Do you have vulnerability assessments & penetration tests?
- Do you have background checks?
- Do you have internal vulnerability management?
No You are safe.
You are probably safe.