Palette Tools
Smart tools for faster framework alignment
Score your security posture against the framework your customers, insurer or regulator asks about. Your company’s first assessment is included.
Example result
Poor
Govern
72% · C
Protect
55% · F
Detect
41% · F
Every domain scored, graded, and ranked by what to fix first. Example figures, for a company that does not exist.
How it works
Step 1
Pick your framework
NIST CSF 2.0, HIPAA, SOC 2 Type II or ISO 27001 — whichever your customers, insurer or regulator asks about.
Step 2
Answer honestly
Targeted questions grouped by domain, weighted by how much each control actually matters. Roughly fifteen minutes.
Step 3
Read your baseline
Domain scores, letter grades and a ranked list of what to fix first — kept against your company account, and yours to print.
The GRC Assessment Tool
Weighted questions across four frameworks, scored by domain, with a ranked remediation list at the end. Your company’s first assessment is free and brief — 100 questions covering the major control areas. Each one after that is $200 and covers the complete framework: 328 questions across every domain.
NIST CSF 2.0
All SMBs, cyber insurance, vendor relationships
32 free · 106 full
HIPAA
Healthcare providers, health IT, business associates
19 free · 63 full
SOC 2 Type II
SaaS companies, MSPs, cloud services, B2B tech vendors
21 free · 66 full
ISO 27001
International recognition, enterprise sales, global operations
28 free · 93 full
A self-assessment is a starting point, not an audit
The tool scores what you tell it. When you need the other thing — 200 to 400 control tests, evidence collection, gap analysis and an audit-ready report package — that is an engagement with our team.
Talk to Palette