# CAT - Cybersecurity Assessment Tool

> A free, open-source web application that assesses the cybersecurity maturity, resiliency, and strength of NGOs and civil society organizations. Users complete a questionnaire and receive ratings and actionable recommendations for improvement across multiple security domains.

The CAT is built by the Ford Foundation. It runs entirely in the browser using vanilla JavaScript, HTML, and CSS — no frameworks. Version 2.0.0.

## Pages

- [Home](https://cybercat.tools/): Landing page with an overview of the tool, how it works, and who it's for
- [Assessment](https://cybercat.tools/#assessment): The cybersecurity questionnaire with sections covering understanding risk, protecting your organization, and responding to threats
- [Results](https://cybercat.tools/#results): Personalized ratings and recommendations generated from assessment answers
- [Legal](https://cybercat.tools/#legal): Privacy policy and terms of use

## Key Features

- Questionnaire-based cybersecurity assessment with scored answers
- Three assessment sections: Understanding Risk, Protecting Your Organization, Responding to Threats
- Results with below/meeting/exceeding ratings per subsection
- Actionable recommendations with resource links
- Shareable results via URL-encoded answers
- Save and resume assessment progress via local storage
- Available in 6 languages: English, Spanish (Latin America), Brazilian Portuguese, Simplified Mandarin, Egyptian/Lebanese Arabic, Bahasa Indonesian
- Right-to-left (RTL) layout support for Arabic

## Documentation

- [README](https://github.com/the-engine-room/CAT/blob/main/README.md): Project overview and folder structure
- [How-To Guide](https://github.com/the-engine-room/CAT/blob/main/docs/how-to.md): Guide for adding questions and updating content
- [Content Structure Guide](https://github.com/the-engine-room/CAT/blob/main/docs/content-structure-guide.md): JSON schema for survey questions, results, and recommendations

## Technical Details

- Pure client-side application (no server-side processing)
- Architecture: MVC pattern with templates, controllers, and views
- Content stored in JSON files under assets/i18n/
- No user data is sent to any server; all processing happens in the browser