Country-sized businesses are city-sized targets.
Ransomware doesn't check your postcode. We bring the Australian Government's Essential Eight framework down to a scale that makes sense for a clinic, a transport yard or a law firm — assessed honestly, implemented properly, and watched all year round.
The Essential Eight, in plain English.
The Australian Cyber Security Centre's eight controls are the benchmark we assess against and build to. Maturity Level One stops the commodity attacks that hit small businesses every day; Level Two is for those with more to lose.
Application control
Only approved software runs on your machines — malware can't start if it can't run.
Patch applications
Browsers, Office, PDF readers — updated fast, before known holes get used.
Office macro settings
Macros from the internet: blocked. The classic invoice-attachment trick dies here.
User app hardening
Browsers and apps configured so the risky features are off by default.
Restrict admin privileges
Day-to-day accounts can't install or break things. Admin rights are earned, logged and reviewed.
Patch operating systems
Windows and servers kept current automatically — the patches that matter, applied in days not months.
Multi-factor authentication
A stolen password alone gets an attacker nothing. MFA on email, remote access and the important systems.
Regular backups
Tested, isolated backups — the difference between a bad morning and a closed business.
Security that fits a real business.
Essential Eight assessment
We measure your business against the ACSC's eight controls — patching, MFA, admin privileges, backups, application control and friends — and give you a plain-English report: what's solid, what's exposed, what it costs to fix.
SMB1001 certification pathway
SMB1001 is the cyber certification built for Australian small business — Bronze through Diamond. We get you certified and keep you there; increasingly it's what your bigger customers and insurers want to see.
Managed protection
Bitdefender endpoint protection on every machine, email filtering, MFA and Conditional Access across Microsoft 365, and monitoring that pages us — not you — when something looks wrong.
Staff awareness training
Your people are the front line. Short, regular sessions plus simulated phishing — run by humans you know, not a compliance video. Click rates drop, reporting rates climb.
Backup you can stand on
The last line of the Essential Eight is the one that saves you: tested, isolated backups. If the worst happens, we rebuild from clean copies and you're trading again, fast.
Cyber insurance readiness
Insurers now ask hard questions before they'll write a policy. We make sure your answers are true — and documented.
SMB1001 — the ladder worth climbing.
Built specifically for Australian small business, SMB1001 turns 'we take security seriously' into a certificate your customers, suppliers and insurer can verify. We get most clients to Silver or Gold.
Bronze
The non-negotiables: MFA, patching, antivirus, secure email.
Silver
Adds access control, incident response basics and structured backup.
Gold
Adds staff training, vendor risk and monitored endpoints.
Platinum
Adds cyber insurance alignment and vulnerability scanning.
Diamond
Board-level governance — enterprise posture for serious contracts.
Find out your Essential Eight score before someone else does.
A no-judgement assessment, a plain-English report, and a prioritised fix list you could hand to any provider — though we'd rather you handed it back to us.