Cruize Security

Performance of your security program

Know where you stand, what needs attention and who owns the next step. Measure maturity against frameworks, set targets and track the risks behind the score.

HOME · NIST CSF 2.0 BASELINEEXAMPLE DATA

PROGRAM MATURITY

3.0 / 5

3 of 6 functions at target

Detect categories · 0.8 below target

DE.CM 2.9DE.AE 2.5
Program maturity against targets · interactive demo · example data
01

Establish a baseline

Rate requirements and record the evidence behind each rating.

02

Measure against targets

Compare function maturity with the level your organization is aiming for.

03

Track the next step

Prioritize gaps, assign risk owners and report results to the board.

INSIDE THE PLATFORM

From the rating to the result.

One workspace for assessments, targets, recommendations and risk ownership.

See the result. Find the gaps.

Complete an assessment to see overall maturity, function scores and a category heatmap. Keep the questions and evidence alongside the results.

Interactive demo · example data, nothing is saved

ASSESSMENT · Q3 BASELINE · SCORINGEXAMPLE DATA

SCORE

63 / 100

MATURITY

3.0 / 5

PROGRESS

100%

Category heatmap · select a cell

Govern
Identify
Protect
Detect
Respond
Recover

Darker cells are more mature.

A PROGRAM, NOT JUST A SCORE

Keep the work connected.

Your targets. Your overview.

Set maturity targets by framework function. Customize Home with the scores, focus areas and KPIs you need.

Recommendations with sources.

Generate prioritized actions from assessment gaps, organization context and recent threat evidence. Save the report with the assessment.

Work across your team.

Give owners, admins, assessors and viewers the access they need. Risk owners can be on your team or outside the platform.

Take the results to the board.

Export completed assessments as PowerPoint slides and control-detail CSVs. Keep maturity and assessment completion distinct.

CHOOSE YOUR BASELINE

The framework that fits your work.

Measure a security program, CUI safeguards, healthcare safeguards or software security. Each assessment has its own requirements and guidance.

NIST CSF 2.0

Security program

106 subcategories

NIST SP 800-171 R3

CUI safeguards

97 requirements

NIST SSDF 1.1

Secure development

42 tasks

HIPAA Security Rule

Healthcare

54 items

OWASP SAMM 2.2

Software security

90 activities

Startup Top 20

Startup baseline

20 controls

Cruize uses a 0-5 implementation maturity scale. Results are self-assessments, not compliance determinations, certifications or NIST Implementation Tiers. SAMM native activity levels remain references, not converted scores.

CRUIZE SECURITY

Start with where you stand.

Create an assessment, establish your baseline and set the targets for your security program.

Start an assessment