Skip to content
Security self-assessment · businesses and individuals

Take stock of your IT security, at your own pace.

A guided questionnaire of 111 questions, based on recommendations from ANSSI, OWASP and the CNIL. Share it across your team, get a practical action plan and a report to present.

111guided questions
11chapters
1 keyof encryption per account

Take stock of your company’s cybersecurity

Bilanlytics helps you assess the IT security of a business or a website: where it stands today, what is already well protected, and what to tackle first.

  1. 1. Know where you stand

    You review the main areas of cybersecurity point by point: website, code, network, connected devices, workstations, access, backups, staff training, physical security and governance. Each point is marked compliant, non-compliant or not applicable. The compliance rate gives a clear snapshot of the situation.

  2. 2. Spot the areas to improve

    Non-compliances are ranked by severity (critical, high, medium, low) and by area. You immediately see which weaknesses need urgent fixing and which areas are most fragile.

  3. 3. Know the steps to take

    Each point explains what to check, with which tools, and the reference to follow (ANSSI, OWASP, CNIL). The final report brings together findings and recommendations to build an action plan.

An assessment, not a certification. The application gives a snapshot of the situation at a given time to help set priorities. It replaces neither a certification nor a full penetration test carried out by a qualified provider.

Everything you need for a serious internal audit

No need to be an expert: each question explains what to check, with which tools, and who can handle it.

A guided questionnaire

111 ready-to-use questions, from website security to backups, including passwords and staff awareness. You can add your own questions.

Teamwork

Invite your collaborators and assign them whole chapters or specific questions. Everyone only sees what concerns them.

Who can handle it?

For each question: everyone, the manager, IT staff, the developer, a legal adviser or a cybersecurity specialist.

An action plan

Each item to fix becomes an action with an owner and a due date. Track progress and receive reminders.

A clear report

A PDF report ready to present to your management, an insurer or a provider: summary, items to fix by importance, action plan.

Tracking over time

Repeat the audit every year and compare your results: you measure your progress in concrete terms.

How it works

1

Create your account

Your audit file is ready straight away, with all the questions to check.

2

Answer and share out

Answer yourself or assign chapters to your collaborators. Attach evidence if needed.

3

Fix

The weak points make up your action plan: who does what, and by when.

4

Present and repeat

Download the report, then restart the audit the following year to measure your progress.

What is checked

A full review of your security, organised into chapters. A point does not apply to you? Just say so.

See the questions by creating my account
Scope & authorisations
Web & URL security
Code security (OWASP)
Network & infrastructure
Connected devices (IoT)
Workstations & servers
Identities & access
Backups & continuity
Staff training
Physical security
Governance & compliance

Your answers stay yours

A security audit reveals your weak points: this information is protected accordingly.

Encryption per account

Answers, comments and evidence are encrypted with a key specific to your account.

Nobody else reads them

The platform administrator manages accounts, without any access to the content of audit files.

Two-factor authentication

Mandatory for the account owner, optional for all collaborators.

You stay in control

Export all your data or delete your account whenever you want.

Contact us

A question about the service, a suggestion? Write to us.

Your details are only used to reply to you.

Do not share any password or sensitive details about your security.

Your details are only used to reply to you. Privacy policy

Ready to take stock?

Create your account in a minute and start with the questions that matter most to you.

Self-declared assessment: it does not replace an audit or a penetration test carried out by a professional.