Threat, Risk and Privacy Assessment
Understand your exposure. Decide what to protect.
Explore the risks around your information, your activities and the people who depend on you. Build a clearer picture of your priorities and the steps you can take.
Start the AssessmentPrivate by design
Your answers are processed in this browser. They are sent to Tailored Coding only if you choose to submit your report through the contact form. The assessment needs no account or identifying details.
A practical next step
Understand what needs attention, why it matters and who can help. The report separates urgent action from questions worth clarifying first.
A result with context
The assessment uses what you tell us. It explains uncertainties and its limits, without inspecting your devices or promising that you are secure.
For People and Organizations
Start with what is at stake.
A law firm needs to protect privileged information; a journalist, confidential sources; an executive, strategic information and sensitive decisions. Businesses, other organizations and public figures also face risks shaped by their activities, the systems they use and who has access to them.
Tailored Coding’s assessment helps you organize that context. You can separate up to six personal or professional activities, consider confidential information, personal data and third-party responsibilities, and identify where protection needs attention.
What the Assessment Covers
Digital security and privacy in your circumstances.
The questionnaire covers identity and access, multifactor authentication, account recovery, devices, communications, document sharing and information protection. It also considers backups, business continuity, service providers, incidents, public exposure and situations where making a change could put someone at greater risk.
For personal data protection, it considers the need for collection, retention, access and the effects of processing on other people. This makes room for risks beyond lost files or passwords, including harm to confidentiality, integrity, availability and privacy.
How It Works
From your answers to protection priorities.
After a short introduction, you define the context, select activities and answer questions about risks and existing safeguards. The algorithm applies explicit rules to those answers, connects relevant conditions and prioritizes recommendations. Unknown and unanswered questions remain open points to clarify.
Threat modeling helps establish what needs protection and what could go wrong. Risk assessment considers consequences, exposure and available safeguards. The report explains recommendations, uncertainties and next steps; it does not assign a statistical probability of attack or a score that certifies security.
Your Report
A basis for decisions and a discussion with your team.
Review results by activity, revisit your answers and identify what can be done now, what needs authorization and where specialist support is appropriate. When the tool’s safety conditions allow it, you can save a copy or attach the report to the end-to-end encrypted contact form.
Tailored Coding works across software, artificial intelligence, infrastructure, cybersecurity and privacy. If you need help exploring the findings or implementing safeguards, our team can work through the technical context and priorities with you.
Explore the methodology and a prioritization example.
Methods and References
The research behind the rules draws on risk assessment, threat modeling, privacy engineering and digital safety references. They inform the structure of the analysis; their authors do not certify or endorse this tool.
NIST SP 800-30 Rev. 1
Information security risk assessment: threats, vulnerabilities, consequences and uncertainty.
NIST Cybersecurity Framework 2.0
Governance and cybersecurity outcomes organized around Govern, Identify, Protect, Detect, Respond and Recover.
OWASP — Threat Modeling
Threat modeling and analysis of what could go wrong in systems and information flows.
NIST — Privacy Risk Assessment Methodology
Privacy risk analysis and the possible effects of data processing on people.
LINDDUN GO
Privacy threat identification, including linking data, identifying people and disclosing information.
EFF — Your Security Plan
Security planning around each person’s assets, threats and circumstances.
CPJ — Digital Safety Kit
Digital safety for journalists and protection of sources, accounts and communications.
CERT.br — Cartilha de Segurança
Practical digital security guidance for accounts, devices and information.
ANPD — Relatório de Impacto à Proteção de Dados Pessoais
References for understanding risks to individuals and the role of Brazil’s personal data protection impact report (RIPD).
Frequently Asked Questions
Do I need technical knowledge?
No. The introduction explains the steps, and questions include guidance. You can choose “Unknown”, leave questions unanswered and return to any section. The result identifies what still needs confirmation.
Does the assessment test my devices?
No. The tool works with your answers. It does not run scans, penetration tests, live threat intelligence collection or device inspections. Incident investigation or a technical assessment requires additional work.
Does the report prove compliance with Brazil’s LGPD?
No. It helps identify privacy and data protection questions that need attention, but does not replace legal advice, an audit, a data protection impact assessment (RIPD) or compliance certification.
Who receives my answers?
No one receives them automatically. The questionnaire and report run on a page without analytics tools. Closing it ends the assessment; any files you save and your browser history remain. Sending it to the team is optional and happens only when you submit the contact form.