BESECUREDAI

PRIVATE BY DESIGN

Security Self-Check

Answer 20 quick questions. “Not sure” is useful: it tells you what to verify next. Five minutes is a suggested pace; take the time you need.

Your answers stay in this page. There is no account, submission, analytics or browser storage. No answers are sent to BesecuredAI. Reloading clears them. Following an external resource link opens that service under its own privacy practices.
How the score works

Each Yes earns 5 points. No and Not sure earn 0. Answer all 20 questions to get a score out of 100. If MFA, unique passwords, account recovery or either backup control is No or Not sure, the highest available band is Build consistency; the numeric score stays the same. The bands are Start with essentials (0–49), Build consistency (50–79) and Verify and maintain (80–100). These are planning labels, not a risk probability, certification or insurance rating.

Fixes affecting account access, recoverability, money and response appear first, then the remaining areas in question order. A serious gap still matters at a high score. If something does not apply, choose Not sure for this quick check and document the scope in your own private review notes.

1. Is multi-factor authentication (MFA) or a passkey enabled on your main email account?
2. Do you use unique passwords or passkeys for important accounts?
3. Have you checked recovery access and removed former users?
4. Have you checked SPF, DKIM signing and DMARC alignment for legitimate mail? These are email settings that help stop others from sending mail pretending to be you.
5. Are your devices and apps supported and receiving updates?
6. Are devices with sensitive files encrypted, with recovery keys stored privately?
7. Do you have a backup isolated from everyday account or device failures?
8. Have you restored and opened a harmless sample from that backup?
9. Do you verify changed payment instructions using a trusted number already on file?
10. Is there a second authorized review for sensitive payments or bank-detail changes?
11. Does your team or family independently verify urgent requests, even familiar voices?
12. Do you have approved AI tools and clear rules for data that must stay out?
13. Are AI agents limited, logged and blocked from consequential actions without approval?
14. Have you reviewed critical vendors’ security evidence, access and exit arrangements?
15. Have you checked your owned website’s HTTPS, updates and security headers?
16. Have you mapped website data and reviewed applicable privacy, consent and opt-out duties?
17. Do you have an incident lead and trusted contacts accessible offline?
18. Have you rehearsed a simple incident scenario and recorded follow-up actions?
19. Have you reviewed cyber insurance needs and checked application answers against reality?
20. Does everyone know how to report a concern, and who owns each security fix?

0 of 20 answered

Before you start

Who is this training for?

Small-business owners, nonprofits, coaches, creators and families who want a clearer understanding of everyday systems and security. The shop example connects technical ideas to familiar decisions.

Does a high self-check score mean I am secure?

No. The score organizes your next checks. It cannot detect a breach, verify an answer or certify a system. Missing account or backup controls still need attention at a high score.

Are the videos and self-check free?

The linked training, overview, short lessons and this self-check are free to use. The audit kit, paced course and book on our resources page remain in development, with no purchase or registration open on this page.

What happens to my answers?

The self-check calculates in this page without sending or storing your answers. Reloading clears them. If you print or save your results, keep them private because they may reveal security gaps. YouTube follows its own privacy practices when you open a video.