Built on NIST CSF 2.0 · Free to start

Know your cyber risk in 10 minutes

The first mobile-native security maturity assessment built for small businesses and home users. Plain English. No IT degree required. Get a real score, see your biggest gaps, and know exactly what to fix first.

Free assessment
NIST CSF 2.0 aligned
Big 4 advisory background
Your cyber maturity score
62
/ 100
Developing — room to grow
Governance
Identify
Protect
Detect
Respond
Recover
Get early access + free call
Question 1 of 10
19questions · ~8 min
6NIST CSF 2.0 domains
40+curated resources
Big 4advisory background
How it works

From zero to clarity in four steps

No IT background needed. HCA Cyber Score walks you through 19 plain-English questions and turns your answers into a real, actionable score.

01
Answer 19 questions

Plain-English choices across all six NIST CSF 2.0 domains. Takes about 8 minutes. No account required to start.

02
Get your score instantly

A 0-100 maturity score with a per-domain breakdown. See exactly where you are strong and where you are exposed.

03
Get your action plan

Prioritized gaps with free tools mapped to each one. Know the exact next step, not a list of 50 generic recommendations.

04
Get expert help (optional)

Book a free 30-minute call with an HCA advisor to turn your score into a custom roadmap. No pressure, your timeline.

Pricing

Simple, honest pricing

Start free. Upgrade when you are ready to go deeper. Or bring in an expert.

Free
$0
forever

Everything you need to understand where you stand today.

  • Full 19-question NIST CSF 2.0 assessment
  • Overall score and maturity tier badge
  • Top 3 free resources per gap
  • Per-domain score breakdown
Download free
Most popular
Pro
$7.99
per month

Full gap analysis with a real roadmap you can act on.

  • Everything in Free
  • Full resource library (40+ tools)
  • Priority-ranked action roadmap
  • Historical score tracking
  • PDF report export
  • Re-assessment reminders
Start Pro free for 14 days
HCA Advisory
$500
and up · per engagement

Bring in a Big 4-trained GRC expert to go from score to solution.

  • Free 30-min discovery call
  • Custom POA&M and action plan
  • NIST CSF 2.0 maturity report
  • Vendor and tool recommendations
  • Optional monthly retainer
Book free discovery call
Why HCA

Built by practitioners, not marketers

Most cyber tools are built to sell you something. HCA Cyber Score gives you a clear, honest picture of your risk and then gets out of your way.

NIST CSF 2.0 — the real standard

Not a made-up framework. Our 19 questions align directly to NIST CSF 2.0 subcategories, the same standard used by government agencies and Fortune 500 companies.

Big 4 advisory experience

HCA is backed by GRC practitioners with Big 4 consulting backgrounds. You get institutional-quality methodology at small-business scale.

No jargon. No upsell pressure.

Every question was written for a business owner, not an IT manager. We will never sell your data or push products we do not believe in.

Real resources, not fluff

Every recommended resource is vetted. CISA guides, NIST publications, free tools that actually work. No affiliate links, no sponsored placements.