Kit
$199one time
- 25 questions you and your IT provider answer
- Public checks of your domain, email and exposure
- Insurance answer guide for your carrier's form
- Report with priorities and cost to fix
- $199 credited toward a Review or Assessment
[ trulist · by list advisors ]
Proof of your security, ready before anyone asks.
TruList checks what anyone can see, asks the questions an examiner or carrier would ask, and gives you a ranked list with the evidence behind every answer.
[ audit readiness ]
FTC Safeguards and other exams
Every element of the rule, your status and what closes each gap.
[ insurance renewal ]
Answer the application with proof
Each carrier question matched to your answer and your evidence.
[ annual check ]
Same questions every year
What you fixed, what slipped, what's new, and a one-page board summary.
[ pick a level ]
Start where you are.
Not sure? A short intake recommends a level before you pay.
Review
$2,500one time · or $2,500 per year as your annual check
- All 43 questions
- Evidence reviewed by a principal
- Signed readiness report
- 60-minute readout with owners and dates
- Year-over-year view when renewed
Assessment
$3,950up to 25 seats · from $8,000 otherwise
- Read-only evidence collection you run, or screen-share
- Gap matrix for every element of 314.4
- Risk assessment you can adopt
- Remediation plan and board summary
- Scoping call before you buy
Add-ons
- Rush Review
Faster turnaround when a slot is open.$3,500 - Verify the big four
MFA, endpoint protection, backups and email security, checked with you. Coming soon.$750 - Vulnerability scan
Authorized scan of the addresses you list. Coming soon.$995 per scan - Monitoring
Weekly outside-in checks and alerts. Separate from the annual check.Quote after a call
Readiness, not certification, audit opinion or legal advice.
[ what you receive ]
Built to hand to someone else.
- Signed readiness report (PDF)
- Gap matrix, online and in Excel
- Priorities with owners, dates and cost to fix
- Insurance answer sheet for your broker
- One-page summary for owners or the board
Gap matrix · 16 CFR 314.4
- (a) Qualified IndividualPartly
- (b)(1) Written risk assessmentNot met
- (c)(5) MFANot met
- (e) TrainingPartly
- (h) Incident response planNot met
[ questions ]
Common questions
Does this certify us or replace an audit?
No. You get a readiness view and evidence. It is not a certification, an audit opinion or legal advice.
Do you need admin access to our systems?
No. The Kit uses your answers and public checks. For an Assessment, your admin approves read-only access for a set window, and we remove it afterward with proof.
What does our IT provider have to do?
Answer the technical questions through a secure link. No account, and they only see their questions.
How long does it take?
The Kit takes about 45 minutes. A Review is delivered within 5 business days once your evidence is in. An Assessment takes about three weeks.
We hold data on fewer than 5,000 customers. Does that change anything?
Yes. Some FTC Safeguards requirements don't apply to you. We ask at the start and adjust the scope and the report.
Is our data used to train AI?
Never. Ratings come from fixed rules. AI only helps draft, and a principal signs every report.
You sign an authorization before we see anything, and access ends on the date it names.
Fixed rules set every rating. A principal reviews and signs every Review and Assessment.
[ early list ]
The Kit opens soon.
Leave your details and we'll email you when you can start. Reviews and Assessments are open now: book a call.
Know where you stand this week.
Start with the free check, or book a call about a Review or Assessment.