Free Cybersecurity readiness assessment
GAPZe by Anvay
How cyber-ready is your business?
Find your gaps against leading cybersecurity standards, see what to fix first, and get a practical roadmap towards compliance – with an Anvay expert on hand when you want one.
- Free, no obligation
- Free 30-minute 1:1
- Expert-led
- PDF report and roadmap
Why GAPZe
Clarity first. Not another compliance system.
GAPZe gives you a clear picture of where you stand – without risk registers, audit suites or endless dashboards.
Understand
Which cybersecurity requirements actually matter to your organisation, and why.
Assess
Where your gaps are, based on what you know today. “Not sure” is a valid answer.
Improve
What to do next, in what order, and where expert support would genuinely help.
Framework finder
Not sure which standard you need?
Answer four quick questions and GAPZe will suggest where to start. Then get in touch for your free assessment.
How it works
From question to roadmap in four steps
Get in touch
Send us a short message and we will arrange your free assessment.
Assess
Short, plain-English questions. Answer Yes, Partially, No, Not sure or Not applicable.
Report
Readiness by framework, priority gaps, quick wins and a 30-day plan, in a free PDF report.
Talk it through
A free 30-minute 1:1 with an Anvay expert to review your results and agree your roadmap.
One assessment, many frameworks
Answer once. See every view.
Where requirements genuinely overlap, GAPZe reuses your answers, so you get several readiness views without repeating yourself.
Is MFA enforced for administrator and privileged accounts?
Your answer: Partially- Cyber Essentials
User access control - ISO/IEC 27001:2022
A.8.2 · A.8.5 - NIST CSF 2.0
PR.AA - SOC 2
Coming soon
Illustrative mapping. Requirements and sufficiency of evidence differ between frameworks.
What GAPZe can assess
24 frameworks. One assessment.
From Cyber Essentials and ISO/IEC 27001 to NIS2, DORA, IEC 62443 and ISO/IEC 42001. Three GAPZe packs are live now, and Anvay can assess any of the others with you today.
- Cyber Essentials / Plus (GAPZe pack available now)
- ISO/IEC 27001:2022 (GAPZe pack available now)
- NIST CSF 2.0 (GAPZe pack available now)
- ISO/IEC 27002:2022
- SOC 2 Type I / II
- CIS Controls v8.1
- ISO 22301
- NIS2
- NCSC CAF
- DORA
- UK GDPR / EU GDPR
- PCI DSS v4.0.1
- HIPAA Security Rule
- TISAX / VDA ISA
- IEC 62443-2-1
- IEC 62443-3-3
- IEC 62443-2-4
- NIST SP 800-82
- MITRE ATT&CK for ICS
- ISO/IEC 42001
- NIST AI RMF
- ISO/IEC 27017 / 27018
- CSA Cloud Controls Matrix
- ISO/IEC 27036
Expert support from Anvay
GAPZe finds the gaps. Anvay helps you close them.
Your assessment, PDF report and 30-minute 1:1 are always free. If you would like more help, we can support you at every step.
- Free
Assessment, PDF report and 1:1
Your readiness by framework, priority gaps and a 30-day plan, plus a free 30-minute 1:1 to walk through your results.
Start your free assessment Expert validation
An Anvay consultant reviews your answers and evidence and confirms the findings.
Prioritised remediation plan
A detailed, costed implementation plan built around your business.
Implementation support
ISO 27001, Cyber Essentials, SOC 2, NIS2, CAF or IT/OT security programmes.
Fractional security advisory
Ongoing guidance from a fractional CISO.
We agree the scope and cost of any further support with you before work starts. Paid services never change your score, and no one can guarantee certification.
Is it really free?
Yes. The assessment, your PDF report and a 30-minute 1:1 with an Anvay expert are all free, with no obligation. We never charge to unlock your results.
Is this a certification?
No. GAPZe gives an indicative readiness screening based on your own answers. It is not a certification, an audit, a legal compliance determination or a SOC 2 attestation report.
How do I get started?
Select Start your free assessment and send us a short message through our contact page. We will arrange your assessment, send you your PDF report and offer a free 30-minute 1:1 to talk it through.
What happens to my information?
We use your details only to arrange your assessment and send your report, and we will only contact you about other services if you agree. See our privacy notice.
How is my score calculated?
Each question has a reviewed weight and maps to specific framework requirements. Yes scores fully and Partially scores half. Not sure is shown separately as an unknown, not hidden in your score, and Not applicable is excluded. No AI decides your score.
Ready to find your gaps?
Get in touch and we will set up your free assessment. Free PDF report and a free 30-minute 1:1. No obligation.
GAPZe results are indicative readiness screenings based on self-reported answers. They are not a certification, audit opinion, legal compliance determination or attestation report. Framework names are trademarks of their respective owners.