QoBot · The product: an AI CISO that works with you

How it works

Talk for 10 minutes, get your plan the same day.

Onboarding is a conversation in plain words, like a new CISO's first meeting.

110 minutes
Talk for 10 minutes
QoBot asks about your company, your IT and your customers. Skip anything you don't know.
QoBot
Northwind LogisticsOn this computer
Conversations
QoBot credits$3.42 left
Getting started
Waiting for you
I'm QoBot. I'll set up your security program as we talk: what you have, what matters, and the next three things to do. About fifteen minutes. Everything stays in a folder on this computer.
What does Northwind do, and how many people work there?
Road freight from Lyon, 48 people. Everyone is on Microsoft 365, the drivers use phones.
Updating the company profile
Adding an action to the plan
Adding an action to the plan· MFA
update the company profile (company)
Noted. With 48 people and transport customers, you're likely in scope of NIS2: I'll check it with you later.
First two actions are in your plan, on the right.
QoBot has a question
Who looks after your computers and network?
Some actions go to them, with the time each one takes.
Queues while QoBot works
Workspace
Next three
Turn on MFA for every mailbox
You· Free, 30 min
List who can reach the transport software
Free, 20 min
2Same day
Get your plan
A prioritized plan in plain words, built for your company. Every action has an owner and a time.
Workspace
Next three
Turn on MFA for the 3 shared mailboxes
Hugo· Free, 20 min·
Accounting's mailbox receives the bank details of every supplier. Without a second factor, one leaked password lets someone change them.
Also required: NIS2 art. 21(2)(j), multi-factor authentication
Test a restore of the NAS backup
Hugo· Free, 1 hour·
Sign the insurer's answer
You· Free, 5 min·
3Every week
Work together
QoBot does the CISO work: writes, plans, answers and follows up. Your team applies the actions with its guides.
QoBot
Northwind LogisticsOn this computer
Conversations
QoBot credits$3.42 left
Password policy after MFA
Waiting for you
MFA is on for everyone now. Does the password policy need to change?
Reading the security program· Access and passwords
Updating a policy
Yes, two lines. The 90-day password change can go: with MFA on, it only pushes people to weaker passwords. And MFA moves from recommended to required.
Needs your approvalReplaces a deliverable · undoable from History
Update “Access and passwords” (v1.2 → v1.3)
MFA is on for every account, so the 90-day rotation can go.
policies/access-and-passwords.md
## Passwords

Passwords are at least 12 characters long.
Passwords are changed every 90 days.
Passwords are changed only when there is a sign they may be known to someone else.

## Multi-factor authentication

MFA is recommended for remote access.
MFA is required for every mailbox and for remote access.
Queues while QoBot works
History
mark “Turn on MFA for the 45 personal mailboxes” as doneYou · Oct 15, 09:12
write “Answer to the insurer: multi-factor authentication”QoBot · Oct 14, 16:40
assign “Test a restore of the NAS backup” to HugoQoBot · Oct 14, 16:38
add the risk “Former staff accounts still active”QoBot · Oct 9, 11:05
draft the policy “Access and passwords”QoBot · Oct 7, 10:22
update the company profile (company)QoBot · Oct 6, 14:03

What QoBot does

The CISO job

Decides priorities for your company
Writes policies, plans and customer answers
Explains every action in plain words
Plans the work and follows up with each person
Flags honestly what's still open

What you do

You and your team

Approve what matters
Apply the actions with its step-by-step guides
Answer what only you know

A few short, explained tasks a week, each sized: "20 min", "6 questions".

Your time on what matters

Keep your time for the work that makes a difference.

Security is necessary, but much of it is routine: questionnaires, drafts, evidence, reminders. QoBot does that part, and brings the expertise too. What's left for you is short, explained and sized in minutes.

Does the routineQuestionnaires, policy drafts, evidence, reminders.
Expertise includedPlain words, every acronym explained in one line.
Sizes what's yours"20 min", "6 questions", always with a guide.
Follows upChases what's pending, tells you what's still open.

QoBot works from real evidence only. It tells you what it knows, what it assumes, what's still open, and when you need an auditor, a lawyer or your insurer.

QoBot

Northwind LogisticsOn this computer

Conversations

QoBot credits$3.42 left

Hartmann supplier questionnaire

Waiting for you

Hartmann Retail sent their supplier security questionnaire, it's in the questionnaires folder. Can you fill it in? Put the answered copy in Documents/Hartmann.

Reading the questionnaire· 212 questions
Looking through the security program
Reading the security program· 9 documents

I can answer 187 of the 212 questions from your workspace, each with its source. 25 need someone who knows:

Who	Questions	Time
Hugo	19 on backups and laptops	15 min
Claire	6 on contracts	10 min

Your workspace · policies/access-and-passwords.md
Your workspace · policies/backups.md

Needs your approvalWrites a file outside your workspace

Write the answers into a copy of hartmann-questionnaire.xlsx

187 answers with their sources. The 25 open questions stay empty.

Writes: /Users/claire/Documents/Hartmann
What: 187 answer(s) written into a copy of hartmann-questionnaire.xlsx, in this folder. The original isn't changed.

Queues while QoBot works

Workspace

Next three

Turn on MFA for the 3 shared mailboxes
Hugo· Free, 20 min·
Accounting's mailbox receives the bank details of every supplier. Without a second factor, one leaked password lets someone change them.
Also required: NIS2 art. 21(2)(j), multi-factor authentication
Test a restore of the NAS backup
Hugo· Free, 1 hour·
Sign the insurer's answer
You· Free, 5 min·

Use cases

Ask it anything you'd ask a CISO

Ask in plain words, and QoBot comes back with the right call, the documents and clear next steps. Here is what people ask first.

Another use case in mind? Tell QoBot when you join.Join the waitlist

Frameworks

QoBot gets you ready for NIS2, ISO 27001, TISAX or DORA.

QoBot knows the frameworks your customers, insurers and regulators ask about. It maps what you already do, shows what's missing and gets you ready for the auditor. Auditors grant the certification itself.

NIS2
ISO 27001
DORA
TISAX
GDPR
SOC 2
HDS
Cyber Essentials
CIS Controls
ANSSI hygiene guide
NIST CSF
Cyber insurance forms
+ your customers' own questionnaires

Desktop app · Trust & privacy

An app on your computer. Your data stays there.

Your security workspace is a folder on your machine, with full history. Calls to your own AI provider go out, and anything else leaves only with your OK.

Free. Runs on your own AI: your Claude subscription or an API key.
QoBot uses none of your data for training. Your AI provider's settings apply to your own account. Sources shown for every answer.
Cloud is the only hosted option, and it's opt-in.

macOS
Windows
Linux

Who it's for

For teams with a core business to run

And for security teams who want their time for strategy.

Small businesses
Security done right, your days kept for the business. Customers and insurers get their answers.
Small businesses
Mid-market
A program run every week across sites and teams, with clear tasks for each person.
Mid-market
Enterprise & security teams
QoBot takes the routine so your team spends its time on strategy and risk decisions.
Security teams
Public sector
Your cybersecurity steered, with staff kept on their public service mission.
Public sector
Developers & agents
Give your agents a CISO, with the same judgment through an API and MCP server.
Developers

FAQ

Honest answers

Another question?Write to hello@qobot.io. A human from the team answers, usually the same day.

Do I need to know anything about security?

No. QoBot brings the expertise. It asks simple questions, explains every recommendation in plain words and writes the documents. You make the decisions, and every action comes with a guide.

Is it really free?

Yes. The QoBot desktop app is free. The AI runs on your own AI account: sign in with your Claude subscription, or use an API key from Anthropic, OpenAI or Mistral. You pay your AI provider directly. The paid plans are Cloud (QoBot always on, hosted in France) and Team (several people, roles, shared approvals).

Will I still have things to do?

Yes, a few. QoBot does the CISO work and the routine: priorities, documents, answers, follow-up. You approve what matters, answer what only you know, and your team applies the actions with QoBot's guides. That's a few short tasks a week, each one sized ("20 min", "6 questions"). QoBot follows up and tells you honestly what's still open.

We already have a CISO. Is QoBot for us?

Yes. QoBot takes the routine, from the questionnaire backlog, policy drafts, evidence collection, follow-ups and reminders to reporting prep. Your team spends its time on strategy, risk decisions and architecture, and signs off on what leaves.

Where does my data go?

It stays on your computer, in a folder you own, with full history. The only thing that leaves is the calls to your own AI provider, under your account. Anonymous usage insights are opt-in. Cloud is the only hosted option. It's opt-in and runs on OVHcloud in France. More: where your data goes.

Will QoBot make us compliant with NIS2 or ISO 27001?

It gets you ready and does much of the work. Auditors grant the certification, and QoBot tells you what's still missing, and when you need an auditor, a lawyer or your insurer.

How do I get access?

Join the waitlist with a few quick questions and your email, and we'll be in touch. Each colleague who joins moves you up the list.

Waitlist open

Get your time back and keep security right.

Join the waitlist in a few clicks. QoBot asks who you are and what you need first, so it's ready for you.

Join the waitlist

Free desktop appYour own AImacOS, Windows, Linux

Name	Purpose	Duration
qobot.consent	Your cookie choice (local storage)	6 months
qobot.attribution	The page or ad link that brought you here, sent only with a waitlist signup (session storage)	Until you close the tab
Waitlist chat	Your answers before you give your email (session storage)	Until you close the tab

An AI CISO that works with you

Talk for 10 minutes, get your plan the same day.

Talk for 10 minutes

Get your plan

Work together

What QoBot does

What you do

Keep your time for the work that makes a difference.

Ask it anything you'd ask a CISO

QoBot gets you ready for NIS2, ISO 27001, TISAX or DORA.

An app on your computer. Your data stays there.

For teams with a core business to run

Small businesses

Mid-market

Enterprise & security teams

Public sector

Developers & agents

Honest answers

Get your time back and keep security right.

Cookies, only if you say yes