Reports & Checklists / BROWSER-ONLY UTILITY
Self-Reported Security Checklist
Keep an unanswered question visible. This checklist counts your answers and lists follow-up work without pretending to have tested the system.
Choose a topic, then answer Yes, No, Unknown or Not applicable for each question. Leave an unassessed control Unknown. Limit: 100,000 characters.
Loading local tool code...
Input stays in this tab. No upload, AI call, analytics or ads. Reset clears the workspace. Clipboard copies and downloaded files remain under your control.
Result
Technical details (optional)
Review the result before sharing. It may still contain personal or confidential information.
Deployment and privacy questions
Deployment covers supported software, least privilege, TLS, tested backups and monitoring. Privacy covers the data inventory, minimisation, retention, access controls and user requests. Each topic presents five practical starting questions. They do not form a complete control framework, establish compliance or replace a legal assessment. Choose a topic that fits the work you are actually reviewing.
Devices and Active Directory
The IoT questions cover unique credentials, signed updates, network isolation, support lifecycle and data protection. Active Directory covers separate administration, legacy protocols, privileged MFA, recovery tests and audit logging. Answer from records or checks you performed elsewhere. This page does not discover devices, query a directory, inspect credentials or verify a setting on your behalf.
Linux and Windows reviews
Linux covers patching, SSH hardening, least privilege, firewalling and logging. Windows covers patching, disk encryption, endpoint protection, least privilege and logging. Yes remains a self-reported assertion. No creates a follow-up warning; Unknown keeps the gap visible. Not applicable is a separate answer, not a hidden way to count a control as passed.
Use counts without a safety score
Results count yes, no, unknown and not-applicable separately and retain the full control list. Not-applicable is not a pass. There is no overall security percentage, compliance badge or certification. Keep evidence, exclusion rationale and ownership in your normal review process. Exported answers may reveal gaps in your environment, so review them before sharing.
References
Documentation reviewed: . Rule results describe the supplied text, not a live application test.
Useful next steps
Maintained by MetaCyberGuru. A review point may need source, runtime or deployment context before you act on it.