SimplifiedCS

Your assessment answers

Questions are scored in your browser. Answers are not sent to SimplifiedCS or anyone else, with one exception you control: if you ask for AI-enhanced insights on a report (or AI interpretation of your "Other" answers), the details listed next to that button are sent - after you tick the agreement - to SimplifiedCS's server function, which looks up the products you named (with their versions, if you gave them) in two public sources (CISA's Known Exploited Vulnerabilities catalog and NIST's National Vulnerability Database) and sends the request and those public records to Anthropic's Claude API to generate the text. Company name and "report requested by" are never included. You can see exactly what will be sent before sending it.

SimplifiedCS doesn't store the content of AI requests. Server logs record technical details only (timing, sizes, error types). To prevent abuse, a salted one-way hash of your IP address is counted in a per-day rate-limit counter; counters are deleted by a daily cleanup job once they are more than a day old. Anthropic processes the request under its commercial terms and privacy policy.

Your AI choice is currently: not given. You'll be asked on the report page before anything is sent.

What's stored in this browser

These are kept in your browser's local storage for this site only. They are never sent to a server by SimplifiedCS. On a shared computer, clear them when you're done.

• Your in-progress assessment answers, so you can resume
• Completed assessments: answers, a summary of each report, and any AI insights you requested
• Completed assessments saved before September 2026
• Action-plan tracking you entered (owners, dates, status, notes)
• Whether you've seen the 'saved in this browser' notice
• Your analytics cookie choice
• Whether you agreed to send assessment details for AI processing, and which notice version
• Light or dark theme

Analytics

If you allow it, Google Analytics 4 records page views and a few coarse events (an assessment was started or completed, in which mode; a report was exported, in which format) using cookies. It never receives answers, scores or report content. Google signals and ad personalization are turned off. If you don't allow it, Google's script isn't loaded at all.

Your analytics choice is currently: not made yet (off).

Live feeds

The News, Exploit Tracker and Case Studies pages read public data from SimplifiedCS's Supabase database. Those requests contain nothing about you beyond what any web request contains.

Hosting

The site is hosted on Netlify, which - like any web host - processes standard request information such as IP addresses to deliver pages and protect the service.

Questions

See the About page for how to reach the creator. This page describes how the site works; it isn't legal advice.