Web application · Actively maintained
SecureHabits
A free, plain-English security checklist for small businesses, based on NIST guidance. Eight guided checks, no account, and answers that stay on the device.
The job
Give solo business owners a starting point with security that does not read like an IT policy. The app turns NIST's small business guidance into eight guided checks with plain-language steps, examples matched to the owner's type of business, and help for urgent situations such as a lost device or a suspicious email.
The engineering decision
Build privacy into the architecture instead of promising it. There is no account and no backend: plans and confirmations live in the browser's local storage and are never sent anywhere. The app installs as a progressive web app, keeps working offline once saved, and self-hosts its two typefaces so nothing is fetched from third-party font servers.
The limits
Checkmarks record what an owner says they have done. The app performs no scans, keeps no security scores, and is not a compliance result. Coverage of the NIST publication is explicitly partial, and provider instructions and interfaces change over time. A completed checklist is a start, not proof that a business is safe.
