Building IRPForge, incident response plans for orgs priced out of consultants

What you're building:
IRPForge, generates branded, audit-ready incident response plans for small orgs and nonprofits, built on NIST and CIS frameworks. You answer questions, it builds the plan.

Who it's for:
Small orgs and nonprofits who have real cyber risk but get priced out of the $5K-$15K+ consultants charge for this.

Hardest part right now:
Making sure the intake actually captures enough nuance that the output isn't generic boilerplate, since half the value of a real IR plan is that it reflects your actual environment, not a template.

Live at irpforge.com. Would love feedback from anyone building in compliance or security tooling.