Skip to content

Free tool · 10 questions · Private to your browser

If ransomware hit tomorrow, would you restore — or negotiate?

The businesses that never pay a ransom are the ones that can restore from a backup the attacker couldn't touch. Score your recovery, containment, and response readiness. Nothing is sent anywhere.

Check every item that is true today for your business. Recovery items count for the most — restoring instead of paying is what survival comes down to.

Recovery

Can you restore instead of pay?

Containment

Can you limit the blast radius?

Response

Can you act in the first hour?

Reading this without JavaScript?

The list above is the plan. Every item you can honestly check is one less reason you'd ever have to consider paying a ransom — and the Recovery items are the ones that decide it. The free IT Health Check walks all of them against your real backup and network setup.

Want to be sure you could restore?

Book the free IT Health Check

Straight answers

Why is recovery weighted more than prevention?

Because this is a survival check, not a general security score. Plenty of well-defended businesses still get hit — what decides whether it is a bad week or the end of the company is whether you can restore from a backup the attacker could not touch. Tested, immutable backups are the single biggest factor in never paying a ransom.

Does a high score mean I am safe from ransomware?

No tool can promise that, and this one does not. A high score means that if you are hit, you are positioned to recover on your own terms instead of negotiating. Prevention still matters — the other free tools here (MFA gap, security posture) cover that side.

We back up to the cloud. Isn't that enough?

Only if that cloud copy is immutable or otherwise out of reach of the credentials on your network, and only if you have tested restoring from it. A sync folder or a backup an admin account can delete is not ransomware-proof. That is exactly what the immutability and restore-testing questions check.

Is anything I enter stored or sent?

No. There is no signup and nothing leaves your browser — the scoring runs entirely on this device. It is a private self-check.

The backup you never test is the one that fails.

We build separated, immutable, actually-tested backups — and the containment and response around them — so a ransomware hit is a restore, not a ransom. Let's make sure you'd recover.