LIVE· 4 fictional Swiss companies

Attackers already know your weak spots. Do you?

Try our platform live: cyber and AI score, top risks and roadmap from a real assessment, in 2 minutes.

Book an assessment → Full screen ↗

NIST CSF 2.0CIS v8.1ISO 27001FINMADORANIS2EU AI Act

xenoit.com/platform-demo Live Open full screen ↗

Loading the demo…

Fictional data. The demo interface is in English.

📊

Executive report

PowerPoint and PDF, ready for the board.

🧾

Technical report

Word and PDF for the CISO and IT, every finding with its steps.

🤖

AI and Copilot score

AI maturity and a clear verdict on rolling out Copilot.

⚖️

Regulatory readiness

FINMA, DORA, NIS2, revFADP and the EU AI Act.

How it works

A real assessment, not a questionnaire

Your team spends as little time as possible. We do the validation.

Scoping

We agree scope, maturity targets and the regulations that apply to you.

Your team answers

In short interviews, or in writing at your own pace. Evidence is referenced where it already lives.

We validate

We check documents and samples and score every control against written criteria, with a second senior reviewer.

Report and roadmap

You receive both reports, a management readout and a roadmap. A yearly re-assessment shows your progress.

What we assess

One assessment, every framework that matters

Each control is scored once and mapped to every framework, so you see the same truth from every angle.

🏛️

Governance and risk

NIST CSF 2.0 Govern, risk appetite, policies, supplier risk and ISO 27001 management clauses.

🛡️

Technical safeguards

CIS Controls v8.1 from essential hygiene (IG1) to advanced protection: identity, endpoints, data and network.

⚖️

Swiss and EU regulation

Readiness for FINMA Circular 2023/1, DORA, NIS2, ISG reporting to BACS and revFADP.

🤖

AI security

Shadow AI, data leaking into AI tools, Copilot oversharing, AI agents and prompt injection, mapped to the EU AI Act and ISO/IEC 42001.

🔁

Resilience

Detection, incident response, backups, restore testing and recovery of your identity systems.

🧩

Optional modules

DORA deep-dive, Microsoft 365 configuration review and SWIFT CSCF independent assessment, on request.

🇨🇭

Your data stays under your control

The assessment runs on Xenoit's encrypted devices in Switzerland. Evidence is referenced where it already lives rather than copied, and assessment data is deleted at the end of the engagement, as agreed in the contract.

FAQ

Common questions

Two to three weeks for organisations up to 500 users, three to five weeks up to 3,000, and five to eight weeks for larger groups.

No. Your colleagues can answer most questions in writing at their own pace. We then validate with short calls and document samples, so the result is verified, not just self-declared.

No. It is an independent maturity assessment that shows where you stand and what to fix first. It prepares you for audits, regulator questions and certification.

A fixed price, agreed before we start, based on your size and scope. The optional AI security and regulatory modules are priced separately.