Get secure enough. Then back to work.

01 / How it works

Four steps, in the order they matter.

The same four questions every owner asks, answered in order. This is our trip.

01

“Where am I now?”

Risk Score

Twenty-five plain questions about how the business already runs. Nothing to install, nobody poking at your systems. Out comes a score, plus a read on five areas so you can see which one is thin.

02

“Where do I need to be?”

Maturity Target

Good enough is a defined level, not a feeling. Yours is set against SMB1001, the Australian standard written for businesses your size, so the finish line is somebody else's number and not our opinion.

03

“What do I actually do?”

Action Plan

The distance between those two becomes a list, worst first. Each job says what it is, why it matters to you, and roughly how long it takes. One thing at a time, never a wall of twenty-seven.

04

“How do I get it done?”

DI(m)Y

You do most of it, because most of it is a setting you change once. Every job comes with the how-to written for a person, not a technician. The genuinely fiddly bits, we'll do, or your IT person can.

The disc starts adrift and ends on the point. That's the whole service.

02 / The point

Security isn't infinite. It just gets sold that way.

A business with eight people doesn't need what a bank needs, and paying for it wouldn't be smart. There is a level that makes you a difficult target and satisfies the clients, insurers and tenders that ask. That level is a finish line, and you can reach it.

What you don't need

Sold hard. Rarely necessary.

✕A twenty thousand dollar program of works.
✕A consultant on retainer to watch a dashboard nobody reads.
✕To learn what EDR, SIEM or zero trust stand for.
✕To feel stupid in a meeting about your own business.

What you do need

About a dozen things, done properly.

✓A read on what you've already got in place.
✓The handful of gaps that would actually hurt, in order.
✓Instructions a normal person can follow.
✓Proof it's done, for the client or insurer who asks.

03 / The promise

We can be your D. Or not.

We know what a small business needs to do to be protected. Plenty of you have already done some of it, and that counts. Our job is finding what's left, then handing it over in a form you can act on. After that it's yours to do, or ours to help with. That's the DI(mostly)Y promise.

Option one

You do it

Most jobs on your list are a setting you change once and never think about again. We write them out step by step. No charge, no catch.

Option two

Someone else does it

Already have an IT person? Give them the list. It's written plainly enough that they'll know exactly what you're asking for.

Option three

We do the fiddly bits

Anything left? Some things are worth handing over. Tell us which ones you'd rather not touch and we'll quote just that, not a program of works.

04 / Measured against something real

Not our opinion of secure. Australia's.

Your score and your target are mapped to recognised standards, so when a client or an insurer asks where you're up to, you've got an answer with a name on it.

SMB1001

Built for businesses your size

A tiered Australian standard for small and medium business, from Bronze up. Your checkup shows which tier your current practices line up with, and which controls move you to the next one. Bronze through Gold are self attested, so you can get there under your own steam.

ASD Essential Eight

The government baseline

The Australian Signals Directorate's eight priority strategies. We map your answers across for an indicative read, so you can see where you sit against the yardstick most tenders and insurers already know.

Start with the right answer.

Twelve minutes, five areas with five questions each, about how you already work, and a score on the screen the moment you finish. Then you'll know whether there's anything to worry about.

Take the free Cyber Checkup →