Know your IT risk exposure before a client, insurer or auditor asks.

EvRisko is using NIST CSF, ISO27001, COBIT and other similar leading standards for inspiration. While your score does not prove (or disprove) compliance with NIS2 (or any other law or framework), it is a good indicator of your IT posture and can also be used to help answer client security questionnaires.

Yes, you can export the EvRisko report (its details depending on the selected subscription plan). Sharing it is at your discretion. Please keep in mind that EvRisko and its output does not substitute an audit or a legal obligation.

A consultant assessment is usually a one-off, point-in-time review. EvRisko gives you a score in minutes, a ranked plan, and re-scoring over time, for a fixed subscription. It's your 24/7 advisor!

An easy-to-use tool that helps small and mid-sized businesses understand and manage their IT risk through a short questionnaire, a clear score, and prioritized recommendations — built on established frameworks like NIST, ISO 27001, and COBIT.

Businesses that don't have dedicated IT teams but still need to know where their IT risk stands.

We store your information securely and only use it to calculate your score and recommendations. For more information on how we protect your data, have a look at our Security Annex (here).

No. EvRisko is built for business owners and managers, not IT specialists. Technical knowledge does help, of course, but it is by no means required to use EvRisko.

EvRisko was created by TechComply · Reg. 92532748 · Registered office Amsterdam, the Netherlands

Create a company profile, select your subscription and complete the questionnaire. Your first score is ready right after.

For now, each account is linked to one company and one entry.

For now, your account and subscription are linked to you. In the future, we might enable inviting others to EvRisko.

You can edit your company profile at any time by clicking "Company details" on your main screen.

Most people finish in about 25 minutes. This depends on your subscription and the number of questions asked, which is dynamic and adapted to each company. We made sure the questionnaire is as to-the-point as possible!

Plain-language questions about your systems, access, backups, and everyday IT practices. No jargon.

You can skip it and come back later. Unanswered questions are flagged in your results. If you're really struggling, you can ask your IT providers for their insights, or contact us at info@evrisko.io and we can give you some pointers.

Yes, any time. It's the best way to see how your score has changed.

A 0-100 number summarizing your IT risk, with a Poor, Fair, or Good band for quick reference. Your score (just like the questionnaire) is tailored to YOUR organization and company profile.

Your dashboard shows a breakdown by area, so you can see exactly where your risk is coming from. You can go deeper to really understand in the domains you find most important or interesting.

Your score will update every time you retake the assessment or resolve any recommendations.

Yes, an exportable version of your results will be available to download and use.

Your fix-these-first list is ranked by impact, so tackling the top items lowers your risk fastest. We recommend you address those first, as these are your highest-impact actions.

Yes. Retaking it periodically keeps your score and recommendations accurate as your business changes. We recommend you rerun the assessment at least annually, but you can also do it more frequently (that may depend on things like contractual obligations you might have towards your clients, regulatory requirements etc.).

Yes! All scores of previous assessments are saved, so you can see your scores rising or falling through time, giving you a dynamic view of your IT posture.