Security questionnaires
A customer sent a security questionnaire. We help you answer it truthfully.
Larger customers, insurers, and vendors now send small suppliers long security questionnaires. We read the real questions, check what is in place, gather evidence, and help you answer accurately. Anything that needs fixing is quoted separately.
The problem, and what we do about it
The questionnaire arrives with a deadline and a lot of acronyms. The temptation is to answer yes and hope. That can backfire, because the customer may rely on those answers in the contract and ask for proof later.
We go through the actual questionnaire with you. For each question we check what is in place, collect evidence like screenshots and settings, and help you write an accurate answer. Where the honest answer is no, we tell you what it would take to change it and what it would cost, and you decide.
Who it's for
Honest on purpose, so nobody wastes a call.
A good fit
- Suppliers and service firms whose customers send security questionnaires
- Businesses bidding on work with larger companies, hospitals, or public agencies
- Firms asked for a security summary by a bank or an insurer
Not a fit
- Signing off on controls we haven't checked
- Formal audits or certifications, such as SOC 2 audits or third-party CMMC assessments
What you get
Written down so there are no surprises on the quote.
What's included
- A review of the actual questionnaire, question by question
- Each control checked against what is really in place
- Evidence gathered for the answers, such as screenshots, settings, and policies
- Draft answers in plain language for you to approve
- A list of gaps with a quote for each fix
- A security evidence summary you can reuse for the next questionnaire
What it's not
- A promise that the customer approves you or signs the contract
- Certification, or a guarantee of compliance with any standard
- Legal review of the contract
- Fixing gaps, which is quoted separately
See a sample security evidence summary, made with fictional data.
What it costs
New services are quoted after a short review, so the price fits your setup instead of a guess. You get a fixed price in writing before any work starts.
| What | Price |
|---|---|
| Questionnaire review and evidence | Quoted after we see the questionnaire |
| Fixes for the gaps it finds | Fixed price in writing |
See the price for this on the pricing page
Price depends on the length of the questionnaire and how much is already documented. You get a fixed price before we start.
What it depends on
- A copy of the questionnaire and its due date
- Access to the systems the questions cover
- Your approval of the final answers, which are your company's statements
Next step
Email us the questionnaire and its due date at [email protected], then book a 15-minute call.
How it works
Simple on purpose. You always know what's next and what it costs.
A 15-minute call
Tell us what's going on. We'll tell you honestly if we're a fit.
A quick look
A short visit or a remote session so we see your setup for real.
A fixed price in writing
What we'll do, what it costs, and when. The price doesn't move.
Scheduled work
We book a time that doesn't shut your business down, then get it done. Reply times and support hours are on the service levels page.
Questions owners ask
Can you fill it out for us?
We draft answers based on what we verified, and you review and submit them. The answers are your company's statements, so you need to agree with each one.
What if the honest answer is no?
Say so, and say what you plan to do about it. A plan with a date is often acceptable. A yes that isn't true is the bigger risk. We quote each fix so you can decide.
How fast can you turn it around?
It depends on the length and what is already in place. Tell us the deadline on the first call and we'll say honestly whether it is realistic.
What does it cost?
We quote it after we see the questionnaire. Fixes are quoted separately.
Sources we used
Public guidance we relied on for the facts on this page. None of it endorses Vektrion.
Ask a quick question, get a straight answer
Three fields. You hear back the same business day by text or email, whichever you give us.
Stop being your own IT person.
Tell us what's bugging you. In 15 minutes you'll know what it takes to fix and roughly what it costs.