# Cyber Maturity Audit — Self-assessment · NIST CSF 2.0

> Self-assessment · NIST CSF 2.0 (iPhone/iPad app by treeinspired GmbH.)

- Source: https://appshunter.io/ios/app/cyber-maturity-audit/id6805947845 (this page in markdown: same URL + `.md`)
- Developer: [treeinspired GmbH](https://appshunter.io/developer/373040913)
- Category: Productivity, Business
- Price: Free with in-app purchases
- Age rating: 12+
- Requires: iOS 17.0 · 3 MB
- Languages: American English
- Released: 2026-10-09
- Data updated: 2026-10-25

## What is Cyber Maturity Audit?

"How secure are we, really?" — the board's question that rarely gets an answer you can back up. Cyber Maturity Audit produces one: 106 subcategories of the NIST Cybersecurity Framework 2.0, each rated on a maturity scale from 0 to 4, and at the end a number with a profile behind it.

THE FRAMEWORK
The NIST Cybersecurity Framework comes from the National Institute of Standards and Technology, an agency of the US Department of Commerce. Version 2.0 was released in February 2024 and is aimed explicitly at organisations of every size and sector, no longer only at critical infrastructure. New in it: the Govern function, which makes cybersecurity a leadership responsibility. The framework is freely available, used worldwide, and the common language when a group parent, an insurer or an investor asks about maturity.

WHY COMPANIES WORK WITH IT
• Because a maturity score per function says more than a traffic light and can be compared year after year
• Because customer questionnaires, cyber insurers and due diligence increasingly reference CSF categories
• Because before an ISO 27001 certification it pays to know where the gaps are — that is the cheaper order of operations
• Because security budgets are approved more easily when the gap has a number and a page in a report

SIX FUNCTIONS, 22 CATEGORIES, 106 SUBCATEGORIES
• Govern — strategy, roles, policy, oversight (31)
• Identify — assets, risk, supply chain (21)
• Protect — access, awareness, data, technology (22)
• Detect — monitoring and analysis (11)
• Respond — incident management (13)
• Recover — restoration and communication (8)
Every subcategory with its official text and identifier, from GV.OC-01 through RC.CO-04.

FROM THE WHAT TO THE HOW
The framework describes outcomes, not measures — which is exactly what makes it hard in practice. For every subcategory this app adds: one sentence for the leadership, three to five concrete steps, typical mistakes, what counts as evidence in an audit, plus effort, ownership and tool suggestions — open source first.

THE MATURITY PROFILE
0 not implemented, 1 partial, 2 defined, 3 implemented, 4 continuously improved, plus "not applicable" with a justification. Evaluated per category, per function and overall against a target value you set yourself. Radar charts across all categories and per function show the shape of your programme, not just its average.

A REPORT WITH YOUR LOGO
A PDF with management summary, category overview with gap analysis, every open item in full length, maturity profile and detail pages. Consultancies and internal audit add their firm, logo and accent colour — the report goes to the client without rework. CSV export included.

YEAR-OVER-YEAR COMPARISON
Several assessments side by side, each with its own company details — for subsidiaries, sites or client engagements. The comparison shows the overall score, functions and categories with the change since the last round.

NO NETWORK, NO ACCOUNT
Everything stays on the device. No account, no cloud, no tracking, not a single network request — for a tool that collects your weaknesses, that is the point. Face ID or Touch ID lock optional, backup as a portable file.

FREE AND PRO
The first four subcategories of every function stay free forever, maturity scores and radar included. Pro opens the whole catalogue and adds the PDF report, CSV and backup export, report branding and unlimited assessments — monthly or yearly subscription, or a one-time purchase that never renews.

LANGUAGES
English (original), German, French, Italian and Romansh as clearly marked translations.

AN INDEPENDENT TOOL
This app is not affiliated with NIST and is neither reviewed nor endorsed by NIST. The framework itself is freely available. Subscriptions renew automatically until cancelled in the App Store settings.

Terms of Use: https://treeinspired.com/terms.html
Privacy Policy: https://treeinspired.com/privacy.html

## Pricing and in-app purchases

Base price: Free.

**Subscriptions**

| Subscription | Price | Period |
| --- | --- | --- |
| Pro — Monthly | $4.99 | per month |
| Pro — Yearly | $49.99 | per year |

**One-time purchases**

| Purchase | Price | Type |
| --- | --- | --- |
| Pro — Lifetime | $199.00 | one-time |


## Is Cyber Maturity Audit safe?

Not enough ratings yet to assess Cyber Maturity Audit.

## Is Cyber Maturity Audit legit?

Cyber Maturity Audit appears legitimate, with a few gaps. The AppsHunter Legitimacy Score for Cyber Maturity Audit is 75 out of 100 points across 7 verification signals from App Store and developer data.


## Version history (last 1 release)

### 2.1.0 — 2026-10-20

No release notes.

## More apps by treeinspired GmbH

- [Compendium – Medication Guide](https://appshunter.io/ios/app/compendium-medication-guide/id373040910)
- [ICD-10 CM Codes 2022 Reference](https://appshunter.io/ios/app/icd-10-cm-codes-2022-reference/id415731352)
- [Dockti - Med. Symptom Check](https://appshunter.io/ios/app/dockti-med-symptom-check/id1263753802)
- [iSticker Studio](https://appshunter.io/ios/app/isticker-studio/id1397169345)
- [StickLing Sticker Maker Studio](https://appshunter.io/ios/app/stickling-sticker-maker-studio/id1418725724)
- [Read - Focused Reading](https://appshunter.io/ios/app/read-focused-reading/id1613193850)

All apps by treeinspired GmbH: https://appshunter.io/developer/373040913

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-10-25.*