Twenty-eight plain-English questions across identity, inventory, workloads, infrastructure code, SaaS, detection, incident response, vendors, multi-cloud governance, and compliance evidence. You get a scored snapshot of where your programme sits on the four-tier maturity spectrum. About ten minutes. No email required.
Plain-English security — without us ever seeing your answers. Everything stays in your browser. Nothing is transmitted or tracked.
The ten working parts of cloud security. The assessment starts where the books start: identity and access (the cloud's perimeter) and inventory and configuration (knowing what you run, and that it is set up safely). It then covers workloads, containers and Kubernetes, infrastructure as code, and Software-as-a-Service (SaaS) discovery and posture. The operations half follows: logging, detection and identity threats, incident response and forensics, vendor due diligence, multi-cloud governance, and compliance evidence.
What you get. A weighted score out of 68, plus a maturity band. The band uses the same four-tier spectrum as the Sylvan Press three-volume Cloud Security set: Minimum-viable practice, Structured, Integrated, and Platform-grade. You also get a breakdown by area and plain-English priority actions. One honest note from the books: the right tier is the one proportionate to your size and risk — small estates can be exactly where they should be at Tier 1.
What it isn't. This is general guidance. It is not a professional audit, not a penetration test, and not legal advice. Every recommendation is optional. Following it reduces common risks but does not guarantee any outcome. Responsibility for your programme remains with you.
Version 1 · Updated 2026-07-21
For whoever has just inherited a cloud account and wants to know where it stands before diving into runbooks.
When you have worked through this, you will have: your free posture result, and the five starter moves that matter most. Download this as a PDF.
When you outgrow the free tier, the Solo toolkit turns these five moves into worked runbooks — the account inventory, the identity locks, logging, closing public access, and an incident card — with a Start here catalog to sequence them. See the Solo, Team and Enterprise editions →
Everything behind this free assessment — the working documents, templates, runbooks, and depth to put it into practice. Three editions to fit how you work.
See the full toolkit & pricing →One-time purchase · files you own forever · 30-day money-back guarantee.