Cyber Health Check
Find out how well your firm is protected against hackers, measured against the Australian Government's Essential Eight, with a clear plan to fix what matters.
- Checked against ASD Essential Eight
- Australian-owned and operated
- Personally signed reports
A fixed-price check of your firm's cyber security against the Essential Eight, the Australian Government's 8 security basics. We look at what hackers can see from the internet, weak spots inside your network and your Microsoft 365 or Google Workspace settings, then give you a plain-English report and fix-it plan in 1 to 2 weeks.
What we do
- A check of what hackers can see about your business from the internet
- A review of your Microsoft 365 or Google Workspace security settings
- A search for weak spots inside your office network (Standard option and above)
- A check of your website or client portal for common weaknesses (where you have one)
- A score from 0 to 3 for each of the 8 security basics
- A 30 / 60 / 90 day fix-it plan, most important first
- A plain-English report, personally signed by the person who did the work
- A 60-minute call to walk you through every finding
What you get out of it
- A score you can show your insurer, your clients and your partners, with the evidence behind it
- Clear next steps with rough effort for each, so you know where to spend first
- Findings based on what we saw on your systems rather than on a questionnaire
- A report an auditor or your next IT provider can check and build on
How it works
The Health Check follows the Australian Government’s published assessment process. It takes 1 to 2 weeks and ends with a written report and a walkthrough call.
1. We agree what’s covered. A 60-minute kickoff call confirms exactly what we’ll check, who the report is for and when it’s convenient to run checks. You sign a short letter giving us permission before anything technical starts.
2. We do the checking. We look at what’s visible from the internet, scan for weak spots, and export your Microsoft 365 or Google Workspace settings. We only use read-only access, so we can look but can’t change anything.
3. We make sense of it. We remove duplicates and false alarms, match every finding to one of the 8 basics, and put them in order of what matters most for your firm. Every finding is re-checked by hand before it goes in the report.
4. You get your report. A 15 to 25 page report: a plain-English summary, your score for each area, every finding with how to fix it, your 30 / 60 / 90 day plan, and the evidence behind it all. Then a 60-minute call to walk you and your team through it. The report is yours to keep and share.
What you’re left with
A signed report you can give your insurer, clients who send you security questionnaires, or partners who ask. It scores you against the standard Australian regulators and auditors use, with the evidence behind each score.
We don't have an IT security person. Will the report make sense to us?
Yes. The summary is written for a firm owner or practice manager: your score, your biggest risks and what to do in the next 30, 60 and 90 days. The technical detail sits at the back for whoever does the fixing.
Will it disrupt my team?
Hardly at all. Checks from the internet happen on our side with no effect on your network. Anything inside your network is scheduled for a time that suits you. The Microsoft 365 or Google check uses read-only access, so nothing gets changed.
Is this a penetration test?
No. A penetration test pays someone to try to break in. The Health Check measures which protections you actually have, against a government standard. Most small firms need that answer first: you need to know what locks you have before paying someone to pick them.
Who signs the report?
The person who did the work signs it personally, so a real, named person stands behind every finding.
Want to know if this is right for your business?
In a short call we'll ask how your business runs, tell you whether this is the right next step, and give you a fixed price.
Free and no obligation. We reply within one business day.