Security Audit Scorecard: score your small business in 45 checks

Free, interactive, private. Runs entirely in your browser — nothing is uploaded, nothing is stored. Companion to the 45-point audit walkthrough.

Tick every control that is verifiably true (screenshot or it did not happen). The scorecard computes your zone scores, flags the zone that most often decides whether an incident is a bad day or a company-ending one, and produces a printable one-page summary you can bring to whoever owns the fixes.

Reading your score

• 80–90 (green): you are in the top band of small teams. Keep the twice-a-year cadence and batch the remaining hygiene.
• 55–79 (amber): normal. Sequence the unchecked items by zone order — identity first; the 45-point walkthrough gives you the evidence rule and the day schedule.
• Under 55 (red): the estate is running on luck. Do not buy tooling yet — close the identity and backup gaps first; they are a week of focused work.

The zone-4 flag: if Data & backups scores under 10 of 16, treat it as the critical gap regardless of your total. An untested backup is the difference between a bad Tuesday and an extinction event.

Want the scorecard walked and the findings written up with owners and dates? That is the fixed-fee Small-Team Ops Audit (A$149, five days). If what keeps you up is the 2am call rather than the checklist, the Custom Incident Runbook (A$249, 48h) is built from your actual stack. The whole price picture is in the audit cost guide.

Scored it? Tomorrow-morning moves for the failures live in the audit preparation checklist — the fix-first ten and the evidence folder numbered to these same 45 checks.

From the HIVE80lab kit

• The First 30 Minutes — free incident quick-start
• Ops Starter Kit — full incident-response kit for small teams — $14
• Small-Team Ops Audit — prioritized findings + fix plan, five-day turnaround — $149
• Custom Incident Runbook — done-for-you, built from your estate, 48h — $249
• Ops Mega Bundle — all 5 kits in one download — $29