What’s your
CyberStance?
A free check of how your Microsoft 365, Google Workspace, Xero or MYOB is set up. Your risk score is on screen in about 20 minutes.
The full action plan is $159. You decide after you’ve seen your score.
- No account, card or passwords needed
- Save and come back
- “Not sure” is fine
Sample result
Acme Services
Accounting, 6 to 10 staff
- Enable MFA for all accountsCritical
- Block external email forwardingHigh
Fixes like these are in the $159 plan, reviewed by a cyber security professional.
Or start with one of your tools
Next, add any other tools and choose your plan. “Not sure” is fine.
See a sample report firstRenewing your insurance? See what your broker gets
See your score before you pay
Pick the tools you use
Made for owners who look after their own Microsoft 365 or Google Workspace. The questions match your setup.
Answer setup questions
Each one has an example, and “Not sure” is always fine. You can save and come back.
See your risk score, free
Your score, risk level and the areas putting you most at risk, on screen straight away.
Optional: get the full plan for $159
Pay securely with Stripe. A cyber security professional reviews it, and it’s in your inbox the next business day.
Eight things we check
The everyday settings small businesses most often miss. Whichever tools you pick, your check covers all eight.
Identity and access
Who has the keys
MFA, admin accounts and ex-staff who can still log in.
Email security
What comes through the letterbox
DMARC, which helps stop scammers emailing your clients as you, plus phishing protection and forwarded mail.
Data and sharing
Who you've shared files with
Open links, connected apps and who can see payroll.
Device security
The laptops and phones
Updates and antivirus, and whether a lost laptop can be read.
Backup and recovery
The spare copies
Backups kept somewhere separate, and tested.
People and awareness
Your team
Training, and what happens when someone joins or leaves.
Payment security
Money going out
Scam invoices with changed bank details, and who approves payments.
Incident readiness
If something goes wrong
A written plan with who to call first, and your cyber insurance.
Mapped to the Essential Eight
The Australian Government’s baseline, applied to your own setup. Your answers are weighted by impact, mapped to Essential Eight controls, then ranked into a plan with click-by-click steps: what to do yourself this week, and what’s worth getting a hand with.
Have a look inside first
The full 27-page report, run for a sample business: every finding ranked, all eight areas scored, mapped to the Essential Eight, and the one-page insurance summary. The detailed findings are blurred. No email needed.
Open the sample reportWe blurred the good bits. That’s what the $159 is for.
Every finding, ranked p.3
Free score. $159 plan.
Your risk score
Free
- Your overall score and risk level
- The areas putting you most at risk
- On screen when you finish, and by email
Full action plan
$159
AUD inc. GST
one-off, no subscription
- Every gap, ranked by impact and effort
- Step-by-step fixes for your platforms
- Notes written for your IT person
- One-page summary for your broker
- Essential Eight, ISM and Privacy Act mapping
- Reviewed by a cyber security professional
About the cost of an hour of IT support. You only decide about the $159 after you’ve seen your score.
A date for your calendar
From 1 February 2027, Microsoft stops sending its own sign-in codes by text message or voice call for most accounts. The free check asks how your team signs in, and the full plan shows how to move anyone still on text codes to an authenticator app or a passkey.
Before your insurer asks
Renewal forms ask yes-or-no questions about settings you may never have looked at. Every paid report checks the 16 controls insurers commonly ask about, so you know what you’re saying yes to.
- Each control marked Pass, Gap or Not assessed
- Every gap linked to its fix
- A one-page summary for your broker, without your overall score
| Multi-factor authentication enforced for all users | Gap |
| Multi-factor authentication on remote access | Pass |
| External email forwarding blocked | Gap |
| Independent backup solution in place | Pass |
| Legacy authentication blocked | Not assessed |
Fair questions
What do I get free, and what's the $159 for?
Free: your overall risk score, your risk level and the areas putting you most at risk, on screen as soon as you finish and by email. The $159 is for the full action plan: every gap ranked by priority, step-by-step fixes for your platforms, notes for your IT person if you use one, the insurance readiness summary and Essential Eight mapping.
Do I need to be technical?
If you look after your own Microsoft 365 or Google Workspace, you can do this. Every question has a plain-English version and an example. “Not sure” is always fine: those go on a list to check with your IT person, and the full plan includes notes written for them.
Is this a formal audit or certification?
No. It's a structured self-assessment and a prioritised action plan. It isn't a penetration test, audit or certification. If one of those is coming up, it shows you what to fix first.
Can I use it for my cyber insurance application?
Yes, as preparation. Every paid report ends with a one-page Insurance Readiness Summary covering 16 controls Australian cyber insurers commonly ask about. Each is marked Pass, Gap or Not assessed, and every gap links to its fix. It's built to send to your broker. It isn't an insurance certification and doesn't guarantee cover or pricing: insurers make their own assessment.
How quickly do I get the full report?
The next business day after you pay (Monday to Friday). A cyber security professional reviews every report before it goes out, which is why it isn't instant.
Can I just answer “Not sure” to everything?
You can. Your report will be very honest about it: a long list of things to check with your IT person. Most people know more than they think.
Know what to fix before it becomes a bigger problem
Start with one of your tools and see your free risk score in about 20 minutes.