Free
Free Trust Audit
Understand where you stand and identify your Trust Gap.
- Free
- Written for non-technical owners
- No cybersecurity background required
- Diagnostic only
- No Trust Badge is issued
- No obligation to purchase credentialing
How It Works
Earn your credential. Verify the trust.
Understand your Trust Gap, complete the credentialing pathway, and receive a Trust Badge only after Legacy Core review. The free Trust Audit does not issue a credential. Silver and Gold are earned outcomes.
Two stages
Understand first. Credential when ready.
Start with the free Trust Audit. See where your business stands before deciding whether credentialing is right for you.
Credentialing
Credentialing pathway
Turn documented readiness into a reviewed credential the business can show and others can verify.
- Structured credentialing pathway
- Required credentialing areas
- Legacy Core review before issuance
- Trust Badge only after requirements are met
- Live Public Business Trust Registry verification
- Annual credential lifecycle and renewal
You are paying for credentialing, review, the Trust Badge, public verification, and the registry lifecycle. You are not paying for a packet of cybersecurity information.
Get CredentialedAt a glance
Understand first. Credential when ready.
Trust Audit, credential pathway, live verification, and ongoing badge status.
- Trust AuditNot a credential
Free Trust Audit
Free · diagnostic only · not a credential
- Credential pathway
Bronze → Silver → Gold
Bronze is Baseline Readiness. Silver is Evidence-Verified Implementation. Gold is Ongoing Verified Readiness.
- Verification
Trust Badge + registry
Live /verify page anyone can check
- Maintenance
Ongoing trust
Stay listed on the registry ($199/year or $19/month). Silver and Gold cannot be earned through self-attestation.
Overview
The credentialing pathway in one sentence.
Understand your Trust Gap, establish readiness, earn a reviewed Trust Badge, and make it verifiable in the Public Business Trust Registry.
A pathway, not a class
Legacy Core is a credentialing authority. The pathway exists so a small business can turn cybersecurity readiness into a Trust Badge someone else can check.
Framework-informed
The pathway is aligned with recognized readiness frameworks, including NIST CSF 2.0 and CIS Controls. It is not a substitute for those frameworks, and it is not legal compliance.
Reviewed, then issued
Every credential is subject to review under the applicable Legacy Core credential standard. Bronze establishes readiness. Silver and Gold require evidence-based verification. The result is a Trust Badge clients can verify.
The pathway
The credentialing pathway, step by step
Understand the Trust Gap, establish readiness, earn a reviewed Trust Badge, make it verifiable.
Step 1
Understand your Trust Gap
Start by understanding where your business currently stands and where cybersecurity readiness may not yet be visible to customers or business partners.
Step 2
Establish readiness
Complete the applicable Legacy Core credentialing requirements designed specifically for small businesses.
Step 3
Earn the appropriate credential
Legacy Core reviews eligibility under the applicable credential standard. Businesses that meet the requirements earn the corresponding Trust Badge.
Step 4
Make trust verifiable
Credential status can be verified through the Public Business Trust Registry, giving customers and business partners a simple way to confirm current standing.
Step 5
Continue strengthening readiness
Businesses can continue improving cybersecurity maturity over time and may work with qualified Alliance Partners and other professionals to implement additional protections.
Watch the pathway
See the credentialing process unfold.
A live walkthrough of the free Trust Audit, then a badge partners can verify. The same sequence every business follows.
Playing · Step 1
Trust Audit in progress
Summit Ledger CPA Group · diagnostic only
Who can access customer data?
Owner + two staff
Do you have MFA on email?
Partially. Personal only.
Backup tested in last 90 days?
Not sure
Trust Gap signal
Access control and backups need attention before credential review.
Who does what
Legacy Core creates the trust signal. Partners implement security.
Implementation providers help businesses improve. Legacy Core determines whether the credential has been earned. Partners do not award the badge.
- 1
Business
Understands readiness, completes the credentialing pathway, implements improvements where needed, and supplies required information and evidence.
- 2
Legacy Core
Maintains the credentialing pathway and credential standard, reviews the application, determines credential status, and issues the Trust Badge when requirements are met.
- 3
Alliance Partners and qualified providers
May help implement cybersecurity improvements and submit evidence-backed attestations. Partner attestation is not independent review. They do not issue Legacy Core credentials.
- 4
Public Business Trust Registry
Lets customers and other stakeholders check the business's current Legacy Core credential status.
Implementation is separate from credentialing authority. See Alliance Partners · Governance · Become a Verification Partner
Implementation is separate from credentialing. Alliance Partners may implement security. They cannot purchase, guarantee, or self-award a Trust Badge.
Alliance Partners
Providers help implement. Legacy Core issues the credential.
Legacy Core is a credentialing authority, not an MSP. If you want help, choose an Alliance Partner or another qualified provider. Buying their work does not issue a Trust Badge.
Partners are reviewed before directory listing. They cannot purchase, guarantee, or self-award a Trust Badge. Self-attestation by businesses is never accepted.
- MSSPs & managed security providers
- Cyber insurance & commercial risk advisers
- CPAs, bookkeepers & business advisers
- Chambers & professional associations
Frequently asked questions
Do I need the Trust Audit first?
You can pursue Bronze credentialing directly, but the Trust Audit is the recommended starting point. It is diagnostic only. It does not issue a credential.
What happens after I earn Bronze?
Credentialed businesses appear in the Public Business Trust Registry. They may work with Alliance Partners and other trusted professionals as cybersecurity maturity grows. Partners may implement security. Legacy Core determines whether a higher credential has been earned.
How long does the credentialing pathway take?
Many businesses complete Bronze in a few weeks, depending on how quickly they can finish the readiness work. There is no fixed deadline.
What happens if more work is needed before a credential is issued?
Legacy Core will tell you that the credential is not ready to issue yet. You can continue the pathway and come back when the business meets the applicable credential standard.
How is this different from a class?
Legacy Core issues credentials. It does not run a class. The pathway ends in a Trust Badge and a live registry listing.
How do I earn Silver or Gold?
Silver and Gold are earned outcomes, never sold direct. Silver and Gold cannot be earned through self-attestation. Alliance Partners may help implement improvements and submit supporting evidence. Qualified external reviewers may evaluate evidence when appointed. Those relationships are being established. Buying implementation work or a security product does not issue the badge. Legacy Core determines whether the credential has been earned.
What appears in the public registry?
Credential information a customer or partner needs to verify status: business name, tier, credential status, area served, and related public dates when shown. Owner contact information, payment data, uploaded evidence, internal notes, and review history are never displayed publicly.
What if I let my credential lapse?
A lapsed credential shifts to Expired status in the registry. Verification pages continue to load, but the badge is no longer valid. You can renew to return to good standing.
See the pathway from the inside.
Start with the free Trust Audit, or begin Bronze credentialing when you are ready. Silver and Gold cannot be earned through self-attestation.