Choose Cyber Essentials preparation or a broader NIST CSF 2.0 posture review. Answer focused questions and receive prioritised, plain-English actions without uploading raw evidence or entering your organisation’s name.
Free to start · No RightCyber account
Work email required for delivery
Choose a framework
These are two distinct reviews. Cyber Essentials focuses on certification preparation; NIST CSF 2.0 provides a broader posture view.
Prepare for Cyber Essentials with a prioritised action plan aligned to the current requirements.
Build a practical view across Govern, Identify, Protect, Detect, Respond and Recover.
Free and advanced reports
Start free for a high-level view. Choose the £49 advanced report when you need a deeper, evidence-focused improvement plan.
How it works
Use Cyber Essentials for certification preparation or NIST CSF 2.0 for a broader posture review.
Describe your current practices without uploading evidence files or entering your organisation's name.
Deterministic scoring evaluates the submitted answers before any report wording is generated.
OpenAI turns the structured findings into plain-English explanations and practical actions.
The report link is sent to the work email supplied for delivery.
Privacy and AI
The service is data-minimised, not anonymous. It collects a work email, non-identifying business context, answers, optional notes and the generated report so it can provide the requested service.
OpenAI receives the supplied context, answers, optional notes, deterministic scores and report instructions to generate the wording. Your delivery email is not sent to OpenAI.
Organisation or person names, evidence files, passwords, keys, raw logs or configuration exports.
A work email is used to send the secure report link and service messages. Starting a report does not subscribe you to marketing emails.
Remove identifying or sensitive technical detail before you submit free-text context or notes.
Scope and limitations
The review uses RightCyber-authored questions aligned to the current requirements. It is not the official questionnaire, an assessment, a certification decision or a Cyber Essentials Plus technical audit.
The review samples the six CSF Functions. It is not a complete Organizational Profile, CSF Tier, maturity assessment, compliance review, assurance exercise, certification or independent validation.
After the report
If your goal is Cyber Essentials, organise one organisation’s questions, evidence context, gaps, actions and renewal record.
Choose a focused policy, register, exercise or evidence pack for a specific operational need identified in your follow-on work.
Common questions
Choose Cyber Essentials when you are preparing for that certification. Choose NIST CSF 2.0 when you want a broader posture review across Govern, Identify, Protect, Detect, Respond and Recover.
No RightCyber account is required to start a free report. A work email is required so the secure report link can be delivered.
No. The assessment does not request evidence-file uploads or your organisation's name. Do not put names, credentials, keys, network identifiers, raw logs, configuration exports, personal data or exploitable incident details into optional notes.
A deterministic scoring engine calculates a self-reported planning indicator from the submitted answers before AI writes anything. It is not an official marking method, pass probability, compliance percentage, maturity rating or risk measurement.
OpenAI processes the supplied business context, assessment answers, optional notes, deterministic scores and report instructions to generate the report wording. The delivery email is not sent to OpenAI.
No. RightCyber Analysis is an automated self-assessment aid. It does not perform an audit, certification or attestation, and it cannot guarantee an external assessment outcome.
The advanced report adds framework-specific evidence-focused follow-up checks, deeper evidence examples, area-level actions and a clearer 30-day and 90-day improvement plan.
Free report links remain available for 30 days. Advanced report links remain available for 90 days.
Answer focused questions and receive prioritised gaps and practical actions. No RightCyber account is required; a work email is used to deliver the report.
