48 frameworks, 4,346 controls
ISO 27001, SOC 2, GDPR, DPDP, HIPAA, PCI DSS, NIST, DORA, NIS2, ISO 42001 and more, from the same control library our readiness platform uses.
Free · No sign-up · Instant result
Free Compliance Self-Assessment
Measure your readiness for ISO 27001, SOC 2, GDPR, DPDP and 44 more frameworks. Answer a short control questionnaire and get an instant score, a gap report and a 30 / 60 / 90-day plan, all in your browser.
- 48 frameworks · 4,346 controls
- Answers stay on your device
- Quick scan in about 5 minutes
Loading assessments…
How it works
Pick a starting point
Start with the 30-question Quick Posture Scan, or choose one of 48 frameworks and answer its controls.
Answer honestly
Mark each control as implemented, partial, planned, not implemented or not applicable. Every control explains what it means in plain words.
Get your score and plan
See your readiness percentage, maturity level, risk rating, strongest and weakest areas, and a 30 / 60 / 90-day plan to close the gaps.
More than a score
Private by design
Scoring runs in your browser. Answers are saved only on your device, and nothing reaches us unless you ask for the report by e-mail.
Pick up where you left off
Progress is kept in this browser, so a long framework can be finished over several sittings. Clear it at any time.
A plan, not just a number
Gaps are sorted into a 30 / 60 / 90-day plan, with a recommended action for each one and your weakest areas first.
Export and share
Download your answers and gaps as CSV, print or save the result as PDF, or copy a link that reopens the same result.
See what your gaps affect
The posture scan shows which frameworks your open gaps map to, so you know which full assessment to run next.
Questions about the self-assessment
Is the self-assessment really free?
Yes. There is no sign-up and no charge. You only share contact details if you want the report sent to your inbox.
Is my score an audit result or a certification?
No. It reflects your own answers and is an internal readiness estimate. Certification and attestation are issued only by accredited certification bodies and auditors.
Where are my answers stored?
In your own browser (local storage), so you can come back later. They are not sent to Bitkosh unless you choose to e-mail yourself the report. Clearing your answers or your browser data removes them.
How is the score calculated?
Implemented counts fully, partial counts half, planned counts a quarter and not implemented counts zero. Not applicable controls are left out. The result is the share of the possible score you reached across the controls you answered.
Which assessment should I start with?
If you are unsure, start with the Quick Posture Scan. It takes about five minutes and shows which frameworks your gaps affect. Then run the framework your customers or regulators ask for.
Can Bitkosh help me close the gaps?
Yes. Our readiness platform tracks every control, owner and piece of evidence, and our team can help with policies, implementation and audit preparation. Book a free 30-minute call to talk it through.