Cyber Maturity Audit
Self-assessment · NIST CSF 2.0
Free · In‑App Purchases
All 106 subcategories of NIST CSF 2.0 on a maturity scale from 0 to 4 — with implementation steps, a radar profile and a report for the board.
"How secure are we, really?" — the board's question that rarely gets an answer you can back up. Cyber Maturity Audit produces one: 106 subcategories of the NIST Cybersecurity Framework 2.0, each rated on a maturity scale from 0 to 4, and at the end a number with a profile behind it.
THE FRAMEWORK
The NIST Cybersecurity Framework comes from the National Institute of Standards and Technology, an agency of the US Department of Commerce. Version 2.0 was released in February 2024 and is aimed explicitly at organisations of every size and sector, no longer only at critical infrastructure. New in it: the Govern function, which makes cybersecurity a leadership responsibility. The framework is freely available, used worldwide, and the common language when a group parent, an insurer or an investor asks about maturity.
WHY COMPANIES WORK WITH IT
• Because a maturity score per function says more than a traffic light and can be compared year after year
• Because customer questionnaires, cyber insurers and due diligence increasingly reference CSF categories
• Because before an ISO 27001 certification it pays to know where the gaps are — that is the cheaper order of operations
• Because security budgets are approved more easily when the gap has a number and a page in a report
SIX FUNCTIONS, 22 CATEGORIES, 106 SUBCATEGORIES
• Govern — strategy, roles, policy, oversight (31)
• Identify — assets, risk, supply chain (21)
• Protect — access, awareness, data, technology (22)
• Detect — monitoring and analysis (11)
• Respond — incident management (13)
• Recover — restoration and communication (8)
Every subcategory with its official text and identifier, from GV.OC-01 through RC.CO-04.
FROM THE WHAT TO THE HOW
The framework describes outcomes, not measures — which is exactly what makes it hard in practice. For every subcategory this app adds: one sentence for the leadership, three to five concrete steps, typical mistakes, what counts as evidence in an audit, plus effort, ownership and tool suggestions — open source first.
THE MATURITY PROFILE
0 not implemented, 1 partial, 2 defined, 3 implemented, 4 continuously improved, plus "not applicable" with a justification. Evaluated per category, per function and overall against a target value you set yourself. Radar charts across all categories and per function show the shape of your programme, not just its average.
A REPORT WITH YOUR LOGO
A PDF with management summary, category overview with gap analysis, every open item in full length, maturity profile and detail pages. Consultancies and internal audit add their firm, logo and accent colour — the report goes to the client without rework. CSV export included.
YEAR-OVER-YEAR COMPARISON
Several assessments side by side, each with its own company details — for subsidiaries, sites or client engagements. The comparison shows the overall score, functions and categories with the change since the last round.
NO NETWORK, NO ACCOUNT
Everything stays on the device. No account, no cloud, no tracking, not a single network request — for a tool that collects your weaknesses, that is the point. Face ID or Touch ID lock optional, backup as a portable file.
FREE AND PRO
The first four subcategories of every function stay free forever, maturity scores and radar included. Pro opens the whole catalogue and adds the PDF report, CSV and backup export, report branding and unlimited assessments — monthly or yearly subscription, or a one-time purchase that never renews.
LANGUAGES
English (original), German, French, Italian and Romansh as clearly marked translations.
AN INDEPENDENT TOOL
This app is not affiliated with NIST and is neither reviewed nor endorsed by NIST. The framework itself is freely available. Subscriptions renew automatically until cancelled in the App Store settings.
Terms of Use: https://treeinspired.com/terms.html
Privacy Policy: https://treeinspired.com/privacy.html
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
The developer, treeinspired GmbH, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- treeinspired GmbH
- Size
- 3.5 MB
- Category
- Productivity
- Compatibility
Requires iOS 17.0 or later.
- iPhone
Requires iOS 17.0 or later. - iPad
Requires iPadOS 17.0 or later. - Mac
Requires macOS 14.0 or later. - Apple Vision
Requires visionOS 1.0 or later.
- iPhone
- Languages
- English
- Age Rating
13+
- 13+
- In-App Purchases
Yes
- Pro — Lifetime $199.00
- Pro — Yearly $49.99
- Pro — Monthly $4.99
- Copyright
- © 2026 treeinspired GmbH
