About NISTnow
NISTnow exists to close a gap. Small businesses are told to take cybersecurity seriously, but the usual first stop is a formal assessment. NISTnow's own estimate, not a market benchmark, is that a formal assessment for a small business is commonly quoted at $10,000 to $15,000. Many businesses are not ready for that yet. NISTnow is the affordable step a business can take first.
An on-ramp, not a replacement
A formal assessment is the right move when the business is ready for it. Some businesses run one in-house; most bring in an outside firm. NISTnow is built for the months or years before that. The business already knows cybersecurity matters, but a formal assessment is not the next practical step yet.
NISTnow gives the business an honest read of where it stands today and a plan it can act on. When a formal assessment does come, it finds the business further along instead of starting from zero.
Built for small and growing businesses
You are an expert at running your business. NISTnow was built so you can see exactly where your cybersecurity stands without having to become an expert in it. That is who it is for.
NISTnow maps your answers to the NIST Cybersecurity Framework 2.0, the voluntary framework published by the U.S. government, and turns them into practical next steps sized to a business like yours. Technical terms are explained where they appear, and there is no pass or fail.
Who runs NISTnow
NISTnow is an independent service run by one person in the United States.
The security and data handling page sets out how NISTnow treats the data a business enters: where it is hosted, how each organization’s data is kept apart, and how it is deleted.