Security Posture Audit
Small teams often know their security gaps in general but not in detail. These prompts help you review access (who can reach what), cloud configuration, vendor risk and incident readiness. Describe your set-up in plain language or paste sanitised settings, and the prompt returns risks ranked by likelihood and impact, missing controls and low-cost fixes. They are useful before a customer security questionnaire or an insurance renewal. They are not a penetration test or a compliance certificate, and you should never paste passwords, keys or live configuration secrets. Confirm anything critical with your security lead or an independent professional.
Start with these
A short list of well-specified prompts from this page, picked by our checklist score (specific inputs, clear output format, concrete steps). It is a heuristic, not a verdict.
-
Multi-Factor Authentication Coverage Audit
Audit multi-factor authentication coverage by system and user, calculate gaps and rank which priority systems to fix first.
-
Incident Response Plan Completeness Review
Review an incident response plan for completeness, including severity levels, roles, contacts, escalation and testing.
-
Tabletop Exercise Design and Scoring
Design a tabletop exercise with a four-stage scenario, timed injects, discussion questions and a scoring sheet for your team.
-
Logging and Detection Capability Audit
Assess whether your logs and alerts would catch a suspicious sign-in, mass deletion or new admin account, and who would notice.
-
Password and Authentication Policy Review
Check rules against current practice.
-
User Access Review for a Small Business
Check who has access to what, and remove what is not needed.
Prompts
-
User Access Review for a Small Business
Check who has access to what, and remove what is not needed.
-
Admin Account and Privileged Access Audit
Check how many people hold the keys and how they are used.
-
Offboarding Access Removal Audit
Check what happens to accounts when someone leaves.
-
Vendor and Third-Party Access Audit
Check who outside the company can reach our systems.
-
Password and Multi-Factor Practice Audit
Check how staff sign in and recover accounts.
-
Shared Accounts and Credentials Audit
Find logins used by several people and plan replacements.
-
Group Membership and Permission Creep Analysis
Find accumulated permissions from role changes.
-
Multi-Factor Authentication Coverage Audit
Audit multi-factor authentication coverage by system and user, calculate gaps and rank which priority systems to fix first.
-
Password and Authentication Policy Review
Check rules against current practice.
-
Small Team Access Review: Who Has Access to What and Why
Review accounts and permissions in a small organisation.
-
Shared Password and Credential Practice Audit (No Secrets Shared)
Review how a team stores and shares credentials.
-
Account Recovery and Lockout Readiness Audit
Check whether you could get back into your key accounts.
-
Home Network and Router Settings Audit (Defensive, Your Own Network)
Check basic settings on a router you own.
-
Browser Extension and App Permission Audit (Your Own Devices)
Remove tools you no longer use or trust.
-
Cloud Storage Bucket Exposure Audit
Check who can read and write stored files.
-
Cloud Identity and Role Permission Audit
Check roles for least privilege.
-
Email Domain and DNS Hygiene Audit
Check records, registrar access and expiry.
-
Network and Wi-Fi Setup Audit for a Small Office
Check router, guest access and device inventory.
-
Endpoint Device Baseline Audit
Check laptops and phones against a simple standard.
-
Remote Work Security Practices Audit
Check home working habits and tools.
-
Data Inventory and Classification Audit
Check whether we know what data we hold and where.
-
Security Policy Set Audit for a Small Organisation
Check that policies are short, current and followed.
-
Security Roadmap Prioritisation Audit
Rank security work by risk and effort.
-
Data Breach Notification Readiness Audit
Check preparation for deciding who to tell and when.
-
Network Exposure and Firewall Rule Review
Check what is reachable from the internet.
-
Personal Cloud Storage Sharing Audit: Who Can See Your Files?
Find shared links and permissions you forgot.
-
Device Security Basics Audit for a Small Team
Check updates, encryption and lock settings across laptops and phones.
-
Incident Response Plan Audit for a Small Team
Check that a plan exists and can be followed.
-
Phishing Readiness and Reporting Audit
Check how staff spot and report suspicious messages.
-
Lost or Stolen Device Procedure Audit
Check that a missing laptop or phone is handled quickly.
-
Backup Ransomware Resilience Review
Check that backups survive an attack.
-
Security Awareness Training Content Audit
Check training for relevance and respect.
-
Incident Response Plan Completeness Review
Review an incident response plan for completeness, including severity levels, roles, contacts, escalation and testing.
-
Tabletop Exercise Design and Scoring
Design a tabletop exercise with a four-stage scenario, timed injects, discussion questions and a scoring sheet for your team.
-
Logging and Detection Capability Audit
Assess whether your logs and alerts would catch a suspicious sign-in, mass deletion or new admin account, and who would notice.
-
Contact Tree and Communication Plan Test
Check that people can be reached in an emergency.
-
Evidence Preservation and Post-Incident Review Audit
Check records of how an incident was handled.
-
Backup and Recovery Readiness Audit for a Small Business
Check that backups exist, work and are protected.
-
Vendor Security Questionnaire Response Audit
Check what a supplier told us against what they proved.
-
Software-as-a-Service Tool Inventory Audit
Find tools in use that nobody approved.
-
Supplier Concentration and Resilience Audit for Technology
Check dependence on single technology suppliers.
-
Payment Provider and Card Data Handling Audit
Check how payments are taken and what data we touch.
-
Vendor Risk Tiering and Assessment Plan
Sort suppliers by risk and assess in proportion.
-
Subprocessor and Data Location Mapping
Find where data goes through your suppliers.
-
Vendor Incident and Breach Notification Terms Check
Check what suppliers must tell you and when.
-
Business Continuity Dependency Check for Critical Vendors
Check what happens if a key supplier fails.
-
Open Source and Software Supplier Risk Review
Check libraries and tools for upkeep and licence issues.
-
Vendor Offboarding and Data Return Audit
Check that data is returned and deleted when suppliers leave.
-
Payment Processor and Financial Vendor Controls Review
Check access and reconciliation with financial suppliers.
-
New Software Tool Risk Review Before You Sign Up
Check a tool's data handling and terms before using it with real data.
No prompts match those filters.