Every control scored, with reasoning.
Answer in plain English and attach your evidence. Assura scores each control on the framework's own scale with written reasoning you can read, challenge and override - grounded in your documents and the live checks from your stack.
A short call about your organisation, then a full demo if it fits - no obligation.
From Cyber Essentials to DORA.
Twenty frameworks on one subscription, assessed from one pool of evidence - and if yours is missing, build it from your internal controls or request it from inside the app.
From first question to finished picture.
Pick a framework
Start with the one your customers or regulators ask for - or import an existing consulting workbook and carry on from where it left off.
Answer with evidence
Plain-English questions, one control at a time. Attach policies, exports and screenshots as you go - and your connected stack contributes live checks automatically.
Assura scores, you decide
Each control gets a score on the framework's own scale with written reasoning. Disagree? Override it - your call stands and is recorded alongside the reasoning.
Results go to work
Gaps become risks with owners and treatment. Reports generate in one click. And the mapping engine shows how far this framework carries you toward the next.
Scored in the framework's own language.
Cyber Essentials talks in compliant, partially compliant and not compliant. Maturity frameworks talk in tiers. Assura scores each framework in its own vocabulary - while keeping one consistent scale underneath, so your dashboard, reports and exposure model never disagree with each other.
- Each framework's own labels, not a one-size-fits-all percentage
- One canonical 0-4 scale underneath, shared by every surface
- Results read the way your auditor or assessor expects
Grounded in evidence, honest about confidence.
A score is only as good as what backs it. Assura grounds every score in the evidence you attach and the live checks from your connectors - and it is honest about the difference: a self-asserted answer can never score as confidently as a verified document or a live check.
- Confidence-ranked: live check, then document, then self-attested
- Provenance on every score - see exactly what backed it
- Override any score; your judgement is recorded and learned from
- Upload once - the same evidence serves every framework it fits
One framework pre-fills the next.
The second framework should never be a blank page. Assura maps controls across all twenty frameworks: finish one and see exactly how far it carries you toward the others, with mapped controls pre-filled and your evidence already attached.
- Readiness percentages for every other framework, the moment you finish
- Mapped controls pre-fill with your answers and evidence
- Consistency alerts when two frameworks would disagree
An assessment that keeps working.
Finishing isn't a PDF and a handshake. Everything the assessment learned feeds the rest of the platform.
A prioritised list of what's missing and what to fix first, ranked by severity - with a remediation plan your team can actually work through.
Every material gap lands in the risk register with severity, ownership and treatment tracking - nothing discovered gets forgotten.
Executive PDF and slide exports generated from your results in one click, with an inline studio to refine the narrative first.
Live percentages showing how far this assessment carries you toward every other framework you might take on next.
Your results feed the exposure model, so the board sees what the posture means as an estimated annual loss - not just a score.
Ask questions about your own results in plain English - where the biggest gaps are, what changed, what to do next - answered from your data only.
Asked and answered.
Do I need to finish one framework before starting another?
No. You can run several in parallel from the same evidence pool - and finishing any one of them pre-fills its mapped controls in the others, so each additional framework starts partly done.
Can I trust the scores?
Every score is grounded in the evidence you attached, capped by how strong that evidence is, and explained in written reasoning you can read. And if you disagree, you override it - your call stands and is recorded alongside the reasoning.
We already paid a consultancy for an assessment. Can we import it?
Yes. Upload the workbook or spreadsheet and Assura imports it as an assessment you can carry on from - so the work you paid for becomes the starting point, not shelf-ware.
Does completing an assessment certify us?
No - certifications like ISO 27001 still require accredited auditors. Assura gets you ready, shows you exactly where you'd fall short, and hands your auditor organised evidence when the time comes.