Six short steps. No account, no scanner, no repository access.

We ask about what you build, what it is built from, where it runs and which security tools you already have — then we compute where your controls actually reach. Your answers are stored against an anonymous assessment that is tied to a cookie in this browser and to nothing else. Nobody is asked who you are, and you can delete the whole thing in one click.