Know your IT risk exposure before a client, insurer or auditor asks.

EvRisko is using NIST CSF, ISO27001, COBIT and other similar leading standards for inspiration. While your score does not prove (or disprove) compliance with NIS2 (or any other law or framework), it is a good indicator of your IT posture and can also be used to help answer client security questionnaires.

Yes, you can export the EvRisko report (its details depending on the selected subscription plan). Sharing it is at your discretion. Please keep in mind that EvRisko and its output does not substitute an audit or a legal obligation.

A consultant assessment is usually a one-off, point-in-time review. EvRisko gives you a score in minutes, a ranked plan, and re-scoring over time, for a fixed subscription. It's your 24/7 advisor!

An easy-to-use tool that helps small and mid-sized businesses understand and manage their IT risk through a short questionnaire, a clear score, and prioritized recommendations — built on established frameworks like NIST, ISO 27001, and COBIT.

Businesses that don't have dedicated IT teams but still need to know where their IT risk stands.

We store your information securely and only use it to calculate your score and recommendations. For more information on how we protect your data, have a look at our Security Annex (here).

No. EvRisko is built for business owners and managers, not IT specialists. Technical knowledge does help, of course, but it is by no means required to use EvRisko.

EvRisko was created by TechComply · Reg. 92532748 · Registered office Amsterdam, the Netherlands

Start with the free starter assessment: create an account (no credit card needed) and answer 15 questions across 5 risk domains, which takes about 5 minutes. Your first score is ready right after, and you can choose a plan for the full assessment whenever you're ready.

Yes. The free starter assessment covers 5 out of 15 risk domains: Access Control & Identity Management, Device Security, Incident Response & Business Continuity, Employee Awareness & Training and Email Security. It has 15 questions, takes about 5 minutes and needs no credit card. You get your score and recommendations for those 5 domains, and you can upgrade to a plan at any time.

Yes. When you subscribe to a plan, your answers and score from the free starter assessment carry over.

For now, each account is linked to one company and one entry.

For now, your account and subscription are linked to you. In the future, we might enable inviting others to EvRisko.

You can edit your company profile at any time by clicking "Company details" on your main screen.

Most people finish in about 25 minutes. This depends on your subscription and the number of questions asked, which is dynamic and adapted to each company. We made sure the questionnaire is as to-the-point as possible! The free starter assessment has 15 questions and takes about 5 minutes.

Plain-language questions about your systems, access, backups, and everyday IT practices. No jargon.

You can skip it and come back later. Unanswered questions are flagged in your results. If you're really struggling, you can ask your IT providers for their insights, or contact us at info@evrisko.io and we can give you some pointers.

Yes, any time. It's the best way to see how your score has changed.

A 0-100 number summarizing your IT risk, with a Poor, Fair, or Good band for quick reference. Your score (just like the questionnaire) is tailored to YOUR organization and company profile.

Your dashboard shows a breakdown by area, so you can see exactly where your risk is coming from. You can go deeper to really understand in the domains you find most important or interesting.

Your score will update every time you retake the assessment or resolve any recommendations.

Yes. You can download your results as a PDF report. This option is found in your Recommendations section.

Your fix-these-first list is ranked by impact, so tackling the top items lowers your risk fastest. We recommend you address those first, as these are your highest-impact actions.

Yes. Retaking it periodically keeps your score and recommendations accurate as your business changes. We recommend you rerun the assessment at least annually, but you can also do it more frequently (that may depend on things like contractual obligations you might have towards your clients, regulatory requirements etc.).

Yes! All scores of previous assessments are saved, so you can see your scores rising or falling through time, giving you a dynamic view of your IT posture.