Cyber-ready in 14 business days, without the corporate price tag

The Essential Eight is a set of eight cyber security strategies recommended by the Australian Cyber Security Centre (ACSC). It covers areas like application control, patching, multi-factor authentication, and backups. Maturity Level 1 (ML1), what we target, is the practical baseline that stops the vast majority of real-world attacks without requiring enterprise-level resources.

No. Our process is completely non-intrusive. We analyse your configurations remotely and in the background, your staff keep working as normal. There's no downtime, no software installation on your systems, and no interruption to your client operations.

Not necessarily. Many of our clients have an outsourced IT provider rather than in-house staff. We work alongside whoever manages your technology, and if you don't have anyone yet, we can help you understand what you need. Our deliverables are written so that any competent IT provider can act on them immediately.

A penetration test actively tries to break into your systems, it's a technical exercise. Our service is a policy and compliance assessment: we evaluate whether your documented controls and configuration settings align with the ACSC Essential Eight standard. Both are valuable, but for most small businesses, having solid policies in place comes first.

Small businesses are disproportionately targeted precisely because attackers assume their defences are weaker. A single ransomware incident can cost tens of thousands of dollars in downtime, recovery, and reputational damage. Cyber insurance also increasingly requires evidence of baseline controls, and our attestation letter helps you demonstrate exactly that.

You receive a set of customised policies tailored to your business (not generic templates), a Gap Report showing your current compliance score out of 8 with specific actions for your IT provider, and a signed attestation letter you can present to clients, insurers, or procurement panels.

Note: If you want to do business with the Australian Government, you are generally required to meet Essential Eight Maturity Level 2 (ML2). This is the mandatory baseline for non-corporate Commonwealth entities and federal procurement. At this stage, ML2 is out of scope of what we do — we focus on ML1 for small business.

Yes, genuinely fixed. The price you see is the price you pay, no hourly overruns, no scope creep charges. If we discover something during the process that requires additional work beyond the pack, we'll tell you upfront before doing anything, so you're always in control.