Score your defenses, fix the critical gaps, and track your assessments over time
👤 Your Account (optional — unlocks saving & history)
The tool below works fully as a guest, no account needed. Create a free local account to save, edit and export your own records.
Log in
Sign up
Signed in as
🔒 Local account — your data stays on this device only. This is not a cloud account; use a unique password you don't use elsewhere.
🛡️ Your Ransomware Defense Score
Tick what is genuinely in place — at home or in your small business. Ransomware rarely "hacks in"; it walks through an unpatched system, a phished password, or finds no backup worth restoring.
0/100
🔴 Wide open — start with the ★ critical items
0 protections in place.
💾 My Assessments & Custom Items
Log in above to save assessments over time and add your own checklist items. Custom items appear in the checklist above (5 points each) and are stored as your records — editable, deletable, exportable as JSON.
💰 If It Happens Anyway
Isolate first. Disconnect the infected machine from Wi-Fi/ethernet immediately — ransomware spreads sideways to shared drives and backups.
Don't pay reflexively. Payment funds the next attack, doesn't guarantee a working key, and may violate sanctions. Report to law enforcement and involve professionals.
Rebuild from clean backups. This is why the checklist leads with tested, offline backups — they're the difference between an incident and an extinction event.
Change passwords from a clean device. Assume credentials on the infected machine are stolen; rotate them starting with email and banking.