Cyber security services, watched around the clock

It depends on the size of your environment, so we quote it as a fixed price after a short scoping call. A full assessment covers Microsoft 365, every device, email, backups and the network against the Essential Eight, with a scored report written for owners. If you want a starting point first, the cyber readiness scorecard is free and takes about five minutes.

Our Austin SecureShield levels are priced per person per month excluding GST: Core is $25, Control is $60 and Command is $100, added to your IT support plan. Without a level, every managed device runs our 24/7 endpoint protection at $6 a device. The initial assessment and any uplift to a maturity level are quoted as fixed price projects, so you know the full number before you start.

Not yet. On 15 October 2026 the Australian Signals Directorate published ASD Essentials, the framework that will replace the Essential Eight, with chapters for enterprise IT, cloud and operational technology. ASD will maintain both during the transition and has not set a retirement date, so insurers, contracts and regulators that name an Essential Eight level still expect it.

We keep scoring you against the Essential Eight and map your controls to ASD Essentials as we go, so the work you do now carries across.

Not for most private businesses. It is mandatory for non corporate Commonwealth entities, and it is increasingly expected by cyber insurers, boards and government or enterprise clients. For most small and medium businesses, Maturity Level 1 is the sensible first target.

Microsoft 365 includes good security features, but many are off or only partly configured by default, and someone still has to watch the alerts. We harden your tenancy to a security baseline, add identity threat detection and email protection, and our security operations centre responds to what it finds.

Yes. Most attacks are automated and do not check how big you are. Smaller businesses are often hit because they have fewer controls in place, and a single fake invoice or ransomware attack can take weeks of cash flow. Our levels cover teams from 10 to 500 staff.

Yes. Insurers now ask detailed questions about MFA, backups, endpoint detection and patching. We complete the technical answers with you and give you the evidence to back them up, which matters for your premium and for whether a claim is paid.

Our security operations centre contains the threat, usually by isolating the affected device or account, and our engineers work through recovery with you. Control and Command include a documented incident response plan that is tested every year, so everyone knows their role before anything happens.

For most small and medium businesses it takes three to six months, depending on how many devices you have, your line of business applications and what is already in place. The quick wins, such as MFA, patching and admin rights, are usually done in the first few weeks. Reaching the level is a fixed price project; SecureShield Control then maintains it and keeps the evidence current.