The Fortly Exposure Readiness Check is a browser-based self-assessment that helps you understand potential exposure across your important business data, identities, external access, applications and security hygiene.
See your result as soon as you finish.
Depending on your answers, with adaptive questions.
No installation, no agent, no administrator access required.
You answer from what your organisation knows today.
Eight exposure domains, with adaptive questions based on your answers.
What important data exists, where it lives and who is responsible for it.
Who has access, which accounts are elevated and how sign-in is protected.
Guests, contractors, partners and anything shared outside the business.
Apps, integrations and service identities with access to business systems.
How AI tools are used and what connected agents or tools can reach.
MFA, patching, backups, hardening and other everyday controls.
Cloud providers and third-party services connected to your environment.
What would be noticed, how you would respond, and how you would recover.
You get an immediate result when you finish. As the product matures, results are designed to include:
Self-reported. The check reflects what your organisation currently believes or knows. It is not verified against your systems.
Not a compliance assessment. The Exposure Readiness Check is not a compliance certification and does not calculate Essential Eight maturity levels. Where relevant, it shows Essential Eight readiness indicators only.
No administrator access. You do not need to give anyone technical access to complete it.
Verification is optional. If you want supported findings checked against Microsoft 365 and Entra evidence, the Verified Exposure Scan is available separately.