Security Compass

Start with what's happening

Pick the closest description and Security Compass takes it from there.

• A customer is asking security questionsQuestionnaires, evidence, or a certification named in a deal.
• I'm worried about our product or infrastructureApps, APIs, cloud, or something you've built and haven't tested.
• We've got a compliance requirementISO 27001, SOC 2, Cyber Essentials, or another framework.
• Something has happened and we need helpA suspected breach, exposure, or a reported vulnerability.
• Nobody owns security as we growYou need direction and ownership rather than one piece of work.
• Something else is going onYour situation doesn't fit the routes above.

How Security Compass works

1. Step 1

   Tell us what's happening

   Start with the problem, pressure or question you're dealing with.

2. Step 2

   Answer a few questions

   We'll narrow down what kind of help could make sense.

3. Step 3

   Get your direction

   See the relevant type of cybersecurity expertise, why it could help and what you can do next.

Common questions

What kind of cybersecurity help does my business need?

It depends on what's actually happening in your business. Security Compass asks a few plain-English questions and points you towards the type of expertise that may be relevant, such as penetration testing, GRC and compliance, application or cloud security, incident response, or security leadership.

How does Security Compass work?

You start with what's happening, answer a few short questions, and get a direction: the type of cybersecurity expertise that could help, why it could help, and what you can do next.

Do I need to understand cybersecurity services before using it?

No. Security Compass starts with your situation rather than expecting you to know which service to buy, and every question is written in plain English.

Is Security Compass free?

Yes. It's free to use and takes about two minutes.

Do I need a Heelr account?

No account is required to use Security Compass. You only sign in if you decide to post what you need on Heelr afterwards.

What happens after I get a recommendation?

You can browse relevant providers on Heelr, post what you need, or simply keep the direction and act on it in your own time.

What if I don't need outside cybersecurity help?

That's a valid outcome. If your answers suggest outside help isn't needed yet, Security Compass says so and can point you to the free Startup Security Check instead.