A client, a partner or an insurer sends you a security questionnaire: dozens of questions on HTTPS, e-mail, backups, MFA, incidents. The Questionnaires received page prepares the answers for you. Each question gets a proposed answer, from your own past answers first, else from what Perimetry proves on your domains. You read them, correct them, and send them yourself.

Answering questionnaires is included from the Solo plan.

Paste a questionnaire

Open Questionnaires received in the menu.
Give it a name, who sent it and, if you like, a due date.
Choose the language of the answers: English, French or German.
Tick the domains to show, or none for all your proved domains.
Paste the questions, one per line, then press Propose answers.

A column copied from a spreadsheet works: each cell becomes a question. If you copy whole rows, the cell that looks like the question is kept. Numbers such as “1.”, “Q3:” or “A.1.2” are removed, and a question pasted twice is kept once. A questionnaire holds 400 questions at most.

Where each answer comes from

Each question shows where its proposed answer comes from:

Source	What it means
From your library	An answer you kept from a past questionnaire, for this question or a close one. The question it came from is shown when it differs.
Proved by Perimetry	What the latest audits of your domains show, with the date. Read it before you send it.
To answer	Nothing to propose: write the answer yourself.

Perimetry can prove what it sees from the outside:

HTTPS and TLS: a valid certificate, HTTP redirected to HTTPS, HSTS, TLS 1.0 and 1.1 refused;
e-mail: a strict SPF record, DMARC enforced;
vulnerability disclosure: a valid security.txt file;
security headers: anti-sniffing and anti-framing headers;
external monitoring: that your domains are checked every week, with your latest grade and the serious findings open.

When something is not yet in place, the answer says so: for example “Partly. In place: strict SPF record; not yet in place: DMARC enforced”. Nothing is claimed that was not seen. Questions about MFA, backups, training or your policies cannot be seen from outside: they come from your library or from you.

If a past answer from your library says one thing and Perimetry sees another today, for example DMARC enforced in your answer but not on your domain, the question is flagged: check it before you send it.

Correct and keep your answers

Change any answer in its box. Keep in my library is ticked for the answers you write and the ones from your library, and not for those proved by Perimetry, which are dated and proposed again, up to date, next time. Press Save the answers: the answers ticked go to your library, and a library answer you corrected is updated.

Send your answers

Copy the answers column copies the answers, one per line, in the order of the questions: paste it next to the questions in the questionnaire’s spreadsheet.
Download (.csv) gives a file with the number, the question, the answer and its source.

Perimetry never sends anything to whoever asked. When you are done, press Mark as done. Deleting a questionnaire keeps the answers you saved to your library.

Your answer library

Your answer library, at the top of the page, lists the answers you kept, with how many times each one was used. Correct an answer there and it changes for the next questionnaires; add one by hand; remove the ones that no longer hold. The library keeps 1,000 answers.

Who can do what

Owners, admins and members paste questionnaires, answer them and change the library. Viewers read everything and change nothing. Questions and answers are encrypted, and the activity log records what was done, never what was written.

The proposed answers are help to prepare yours, not a statement by Perimetry: only what Perimetry observed from outside is proved, on the date shown.