Assessment · Interactive tool

Endpoint Security Readiness Assessment

Are your Windows endpoints ready for everyday risks - a risky download, a lost laptop, a user trying to switch off protection? Six questions gauge your readiness and show where to reinforce.

Readiness isn't about buying more products - it's about whether the controls you rely on are actually enforced, verified, and fast to act on when something goes wrong.

This assessment looks at application control, browser controls, disk-encryption and antivirus health, agent tamper-resistance, and how quickly you can respond to a compromised device. Scored in your browser.

1. Can users run any executable they download?

Yes - no restrictions
We rely on antivirus to catch the bad ones
Some apps are blocked on some machines
Application launch control is enforced by policy

2. How do you control the browser (downloads, extensions, URLs)?

No browser controls
Written guidance only
Partial, configured per machine
Central browser policy for downloads, extensions, and URLs

3. What is your BitLocker (disk encryption) posture?

Not tracked
On for some devices, but not verified
Enabled, reported manually
BitLocker posture monitored centrally

4. How much visibility do you have into antivirus / Defender health?

We assume it's on
Checked occasionally
Reported per device, by hand
AV / EDR / Defender health surfaced in the console

5. Can a determined user disable your agent or edit the registry?

Yes - local admins can switch things off
It's hard, but possible
Registry tools are blocked
Tamper-resistant agent plus registry protection

6. How quickly can you isolate or lock a compromised device?

We have no fast option
Manually, on-site
Remotely, but it's slow
Remote control / endpoint isolation from the console

This is a quick self-assessment, not a formal security audit. Your answers and score stay in your browser - nothing is sent to a server or saved.

Complete the questions above to calculate your security readiness entirely in your browser.