Free resources
Tools you can use without talking to anyone. No email, no gate, no follow-up.
Sorami Consulting publishes these because the questions they answer come up before anyone is ready to commission work, and a buyer who can answer them is easier to help than one who cannot. The self-checks and the scope builder run in your browser and send nothing anywhere. The report is a download with no form in front of it.
All free, all ungated.
Cloud migration readiness checklist
Record workload context, evidence gaps and blockers, then keep the report.
Browser-only self-assessment. Not validated readiness.
Open itSOC 2 readiness self-check
Twenty questions across the Trust Services Criteria, scored in your browser, with what each band means.
Self-assessment. Not an audit opinion.
Open itEssential Eight Maturity Level 2 self-check
Sixteen questions, two per mitigation strategy, against the ASD maturity model.
Self-assessment. Not an assessment against the ASD model.
Open itIllustrative penetration test report
A 19-page example with a section-by-section explanation of what each part is for.
Illustrative, built from synthetic findings. Not a client report.
Open itPenetration test scope builder
Eleven questions that draft a scope you can copy, print or send with an enquiry.
A draft for discussion. Not a quote or authorisation.
Open itOWASP API Security Top 10 self-check
Ten questions, one per 2023 category, scored in your browser.
Self-assessment. Not a penetration test.
Open itAI on Kubernetes: Default Helm Chart Security
Security defaults of 15 AI serving, vector database and MCP charts, tested live on kind.
Empirical technical research report.
Open itAudioMatch Chrome Extension
Client-side YouTube audio language detector and dub filter. Shows real spoken language on thumbnails.
Free browser extension. Zero tracking.
Open itThe guides.
The guides cover the decisions that come before an engagement.
Used one and want the answers looked at?
Send us what you scored and the deadline you are working to. We reply within one business day.
Last reviewed: