Structured AI-guided assessments that give you an honest, expert-quality picture of your business — across digital resilience and compliance. Free to start, with a full management portal included.
Take a free assessment
A 10-minute AI-guided conversation. No forms, no jargon — Alex asks the right questions.
Get your report
Automated PDF with a personalised findings summary and prioritised action plan, emailed instantly.
Manage it in the portal
Import your results. Track findings, build policies, manage incidents — everything in one place.
A natural AI-guided conversation. No forms to fill in. A personalised PDF report with your findings and action plan delivered to your inbox.
Find out how your business performs across digital maturity, operational resilience, cloud security, and more — with a personalised action plan delivered to your inbox.
Free · No sign up required
A structured GDPR assessment that tells you exactly where you stand on data protection — from a quick free check to a full compliance programme ready for investor due diligence.
Free · No sign up required
Which regulations and certifications apply to your business?
Map your compliance obligations across UK, EU, and US in minutes. Covers GDPR, NIS2, EU AI Act, HIPAA, SOC 2, ISO 27001, and 50+ more — instant results, no account needed.
CE+ is mandatory for central government contracts, NHS supplier access, and an increasing number of sector procurement frameworks. Fortify maps your readiness across all five control areas for free — then guides you through the full audit with AI.
5 control areas
Portal audit add-on
£99/mo
5 sections · 26 controls
Your assessment results import automatically. From there, the portal gives you the tools to actually fix what you found — not just know about it.
Findings & Roadmap
Every gap from your assessment lands here. Build a prioritised 30/60/90-day action plan and track completion over time.
Policy Editor
Draft, maintain, and version your policy library. AI fills templates from your org profile — 8 policy types ready to go.
Incident Management
Log security incidents, run structured playbooks, manage CAPAs, and build an audit-ready incident history.
Evidence Vault
Attach evidence files to findings, policies, and audit controls. Every claim is traceable, every control is defensible.
Ask Alex
AI follow-up questions specific to your organisation's findings and context — not generic answers, but answers about your situation.
Quarterly Reviews
Auto-generated PDF showing score movement, roadmap completion, and an AI narrative — shareable with your board or investors.
Action Plan
Gantt-style timeline with topological dependency scheduling and per-person resource allocation. Annual tier.
Team Collaboration
Invite your team, assign findings and actions to individuals, track accountability — with full role-based access control.
Vendor Management
Maintain a full supplier register with criticality ratings, DPA status, contract dates, and CVE monitoring — so third-party risk never falls through the cracks.
Portal plans
Free
With any assessment
£49 / person / mo
Lite — roadmap & evidence
£99 / person / mo
Pro — policies, vendors & incidents
£3,999 / year
Annual — unlimited users + action plan
Go beyond the assessment. Audit your controls against Cyber Essentials Plus and DORA — guided by AI, with evidence tracking built into your portal. Available as a subscription add-on for portal subscribers.
Cyber Essentials Plus
Work through all 5 Cyber Essentials Plus technical control areas with AI-guided conversation, per-control evidence capture, and a full results summary.
DORA Readiness
Assess your ICT risk management posture against the Digital Operational Resilience Act (DORA) — scoped to your entity type.
Expert-quality security and compliance — without the waiting list, the day rates, or the jargon.
No lengthy questionnaires. Alex has a natural conversation with you, asks follow-up questions, and builds up an accurate picture of where you really stand.
Paid assessments are reviewed by qualified consultants before delivery. You get AI speed with human judgement.
Every report comes with a prioritised action plan. Not just a score and a list of risks — clear next steps you can act on today.
Start with a free assessment. Import it into the portal. Unlock policies, incidents, and audits as your programme matures.
You should know exactly how your information is handled before you start an assessment.
Fortify uses the Anthropic Claude API. Anthropic does not use API data to train its models. Your responses are used solely to generate your report.
Your assessment responses and contact details are never sold to third parties or shared with any external organisation. Full stop.
Assessments ask about your processes and practices — not individuals. Please avoid sharing personal data such as customer or staff details during the conversation.