Managed security services with 24/7 response
Our managed security services put a security operations centre on watch over your devices, Microsoft 365 accounts and email around the clock. When it finds an attacker it acts, and our team cleans up and closes the gap.
Your price in two minutes, no email needed. Or call 1300 787 429.
Not sure where you stand? Take the five minute scorecard, or check your email security in seconds.
★★★★★ 4.9 on Google from 60+ reviews

- 24/7Monitoring and response on every SecureShield level
- 150+Australian organisations protected by SecureShield
- ISO 27001certified, audited every year
- Top 50MSP in Australia, 2024 to 2026
Trusted by 300+ organisations, including







What we watch and who responds
Managed IT security services only work if someone is looking at the alerts and someone is ready to fix what they find. A security operations centre, or SOC, is the team of analysts who watch around the clock and contain real attacks. SOC as a service means you use that team without hiring it, and our engineers repair, follow up and report.
MDR, on every laptop, desktop and server
Managed detection and response is software on each device that spots attacker behaviour, not just known viruses. The analysts can isolate an infected device from the network.
ITDR, on Microsoft 365 sign ins
Identity threat detection and response flags stolen passwords, sign ins from unusual places and new inbox rules that forward your invoices to someone else, then shuts the session down.
Email, before it lands
Filtering stops phishing, fake invoices and malicious attachments before staff see them. Included from Control. See email security.
SIEM, logs in one place
From Control, a security information and event management system collects logs from Microsoft 365, devices and your network, so an investigation takes minutes and the evidence is there when an insurer or auditor asks. We run it for you.
Training, for your people
Short monthly training and simulated phishing emails, with results by person, so the weakest link gets stronger. See security awareness training.
Patching, for updates and weak spots
Devices and applications patched on a schedule, and the gaps that attackers look for closed before they are used.
Tell us who is asking about your security. A technical consultant replies within two business hours.

What happens at 2am
This is a typical email account takeover, one of the most common attacks on Australian businesses. Nobody in your office needs to be awake for the first three steps.



Something looks wrong
The security operations centre sees a sign in to a staff account from overseas, followed by a new rule forwarding invoice emails outside the business.
Detect
An analyst checks it
They confirm it is an attacker and not your staff member on holiday, using the sign in history and device details.
Confirm
The attacker is cut off
The session is shut down and the account locked, or an infected device is isolated from the network, before more damage is done.
Contain
Our engineer takes over
First thing in the morning we reset the account, remove the rule, check what was read or sent and warn anyone who received a fake invoice.
Fix
You get the full story
A written summary of what happened, how they got in and what we changed. If a ransom or personal information is involved, we help you with the reporting steps.
Report
Attacks do not keep business hours
- $56,600The average self reported cost of a cybercrime to an Australian small business in 2024 to 2025. For medium businesses it was $97,200, up 55%. Source: ASD Annual Cyber Threat Report.
- 1 every 6 minutesASD received more than 84,700 cybercrime reports in the year, and email compromise was the most common crime businesses reported.
- 88% after hoursSophos found that 88% of ransomware was launched outside business hours in incidents it handled worldwide between November 2024 and October 2025.
That is why round the clock cover is included on every level.
Managed security pricing, three SecureShield levels
Start at Core and step up as your risk grows. Every level includes the 24/7 security operations centre, and every managed device runs our endpoint protection as a minimum even without a level.
SecureShield Core
Recommended minimum
$25 a person a month
Every business, on any support plan. 24/7 security operations centre, detection and response on every device and Microsoft 365 account, security awareness training and vulnerability scanning.
SecureShield Control
Controls and evidence
$60 a person a month
Businesses with an insurer, client or tender asking for evidence. Everything in Core, plus email filtering, Microsoft 365 baseline, application control, logging, a password manager and policies. Maintained at Essential Eight Maturity Level One.
SecureShield Command
Security leadership
$100 a person a month
Businesses with a board, a compliance obligation or a certification target. Everything in Control, plus a virtual CISO and quarterly board reviews. Maintained at Essential Eight Maturity Level Two.
Not sure which level you need? Tell us who is asking about your security and a technical consultant will scope it with you. Or take the scorecard to see where you stand first.
Compare every control, level by level
Core is the minimum we recommend for every business. Control adds the controls and evidence insurers and clients ask for. Command adds a security lead. Every level covers every person and device, on any support plan.
| Included | Core$25 a person, detect and respond | Control$60 a person, controls and evidence | Command$100 a person, security leadership |
|---|---|---|---|
| Detect and respond | |||
| 24/7 security operations centre with analysts on shift | |||
| Managed detection and response on every device, with containment | |||
| Microsoft 365 identity threat detection and response | |||
| Centralised security logging (SIEM), 12 months retention | |||
| Prevent | |||
| Security awareness training and phishing simulations | |||
| Vulnerability scanning with a monthly report | |||
| Email filtering, with SPF, DKIM and DMARC set up and monitored | |||
| Microsoft 365 security baseline, monitored for drift | |||
| Application control | |||
| Business password manager for every user | |||
| Data protection baseline: sensitivity labels and data loss prevention | |||
| Prove and plan | |||
| Quarterly security summary | |||
| Security policy set, reviewed yearly | |||
| Incident response plan with an annual tabletop exercise | |||
| Monthly security report with Essential Eight score | |||
| Essential Eight controls maintained, with evidence | Maturity Level One | Maturity Level Two | |
| SMB1001 aligned controls | Gold | Diamond | |
| Virtual CISO, monthly | |||
| Annual risk assessment and security roadmap | |||
| Quarterly board ready security review | |||
| Cyber insurance renewal and supplier questionnaire support | |||
Swipe the table sideways to see every level.
Prices are per person per month excluding GST. SecureShield maintains the controls at the stated level and keeps the evidence current. The initial assessment, closing gaps and any uplift to a maturity level are quoted as fixed price projects. Certification audits and penetration tests are quoted separately. Without a SecureShield level, every managed device runs our 24/7 endpoint protection at $6 a device.
Your own security team or a managed security service provider
Most businesses under 500 staff cannot staff a security team around the clock. This is what each option really involves.
| Compare | In house security team | Managed security services |
|---|---|---|
| Night and weekend cover | Needs a roster of several people to cover every hour | Included, with analysts on shift around the clock |
| Tools | Detection, logging and training tools bought and run separately | Included in the monthly price per user |
| Leave and turnover | Cover gaps when someone is sick, on leave or resigns | A whole team, so cover never depends on one person |
| Who fixes the problem | Your team, when they are available | Contained by the analysts, fixed by our engineers |
| Proof for insurers and clients | Reports built by hand | Monthly reporting and evidence from Control |
| Best for | Large organisations with a security budget and specialists | Businesses of 10 to 500 staff without an in house security team |
Swipe the table sideways to see every column.
From assessment to protected in four steps
You keep working as normal. We roll protection out in stages so nothing breaks along the way.

- 01
Security assessment
We review your devices, Microsoft 365, email and backups and score you against the Essential Eight.
- 02
Plan and fixed quote
You get a recommended SecureShield level, the gaps to close as a fixed price project and the monthly price.
- 03
Staged rollout
Detection, patching and identity protection go live first, then policies and training, tested as we go.
- 04
Reporting and reviews
Every alert is handled and explained. Control adds a monthly security report, and Command adds quarterly reviews with a virtual CISO.
90daysWe prove it in 90 days, or you walk away
Changing IT provider is a big decision, so the risk should sit with us. If we haven’t earned your trust in the first 90 days, you can walk away with nothing owing on the rest of your agreement.
- Day 1
No onboarding fee
You start on your plan with nothing extra to pay.
- Any time
14 days to fix it
Tell us in writing what is not working and we put it right.
- Up to day 90
Walk away if we have not
Nothing owing on the rest of your agreement.
- If you go
A clean handover
Admin access, passwords and documentation handed over at no charge.
A top 50 MSP in Australia, three years running
Rated by our clients on Cloudtango, and audited every year on security, quality and cyber controls.

Top 50MSPs in Australia
- 2024
- 2025
- 2026
Ranked on client satisfaction and service depth.
Read our 25 client reviews on Cloudtango

ISO 27001
Information securityHow we handle your data, passwords and access, audited every year.
How we protect your data
ISO 9001
Quality managementDocumented processes, so every engineer works to the same standard.
How we workThe 27 control cyber standard we take clients through, held ourselves.
Check our certificate- Energy
InterContinental Energy
Essential Eight Maturity Level 1 across the business, on our assessment.
- Engineering
Powertech
Essential Eight Maturity Level 2 alignment and approval to start work with a new client.
- Disability care
Essential Nursing and Disability Services
Company data locked to managed devices across the head office and every care house, with each new house set up to the same standard.
- Client stories
All client stories
Sixteen stories with the numbers.
Managed security questions
What owners and IT managers ask before they choose a managed security service provider. Anything else, call 1300 787 429.
Related services and reading
What are managed security services?
Managed security services are a team that watches your systems for attackers around the clock and acts when it finds one, so you get the protection of a security team without hiring one. Ours combine a 24/7 security operations centre with the Australian engineers who already look after your IT.
How much do managed security services cost?
SecureShield is priced per person per month excluding GST: Core is $25, Control is $60 and Command is $100, and every level covers every person and device. The initial assessment and any work to close gaps are quoted as a fixed price project before the level starts. For a quick estimate, get an instant price.
How is managed security different from managed IT?
Managed IT keeps your systems running and your staff productive. Managed security looks for threats, stops them and proves your controls work. Many businesses buy them from two providers and lose time in the gap between them. We provide both, so the team that spots a problem is the team that fixes it. See our managed IT support plans.
What is SOC as a service?
A security operations centre, or SOC, is a team of analysts who watch security alerts all day and night and respond to real attacks. SOC as a service gives you that team for a monthly fee instead of building your own. It is included on every SecureShield level.
Do we need a SIEM?
A SIEM collects logs from Microsoft 365, devices and your network in one place, so an investigation takes minutes instead of days and you have evidence for auditors and insurers. It suits businesses with compliance obligations or clients who ask hard questions. Centralised security logging is included from SecureShield Control.
What happens if we are attacked at night?
The security operations centre sees it, confirms it is real and contains it, by locking the account or isolating the device where it is safe to do so. Our engineers then clean up, restore what is needed, find how the attacker got in and give you a written summary.
Can we change plans later?
Yes. Many clients start on Core and step up to Control or Command when a contract, insurer or board asks for more. Moving up is a change to your agreement rather than a new project. The controls already in place carry over.
Will this help with the Essential Eight or SMB1001?
Yes. SecureShield Control maintains your controls at Essential Eight Maturity Level One with SMB1001 Gold alignment, and Command maintains Maturity Level Two with SMB1001 Diamond alignment. Reaching each level is a fixed price project, and the monthly service keeps you there with the evidence. Maturity Level One protects against opportunistic attackers and is the right first target for most businesses. Maturity Level Two adds tighter patching, stronger authentication and more logging. Certification itself is issued by an independent body. See Essential Eight and SMB1001 certification, or download the Essential Eight checklist.
Do we have to report a cyber attack?
Sometimes. If your business turns over $3 million or more and makes a ransomware or extortion payment, it must be reported to ASD within 72 hours. If personal information may have been exposed, the Notifiable Data Breaches scheme gives you up to 30 days to assess a suspected breach, and an eligible breach must be reported to the OAIC and the people affected as soon as practicable. Our incident response plan, included from Control, sets out who does what and which clocks start, and we work through it with you. See cyber incident response.
Do we have to change IT provider?
No. SecureShield works best alongside our managed IT, because patching, devices and Microsoft 365 are then looked after by the same team that watches your security. If you have your own IT staff, we run SecureShield alongside them and agree who owns what. If you have another IT provider, talk to us about how we can work alongside them.
What our clients say
1,800+ reviews from the people who call our Perth service desk every day.
1,800+
25
60+
-
“Turns every IT problem into a non-issue”
Arthur turns every IT problem into a non-issue and does it with real patience and professionalism. He explains things in a way that makes the process easy and always leaves us feeling supported. We appreciate the way he handles every request.
Bronte J.Indian Ocean Hotel
-
“Patient, capable and a genuine listener”
The support was outstanding. Patient, capable and a genuine listener, which is rare in support calls. He took the time to understand the issue and work through it with care. You are fortunate to have him on your team and the level of service was impressive.
Peter MidgleyPowertech
-
“Steady, thoughtful and stress free”
Jamie put in a great deal of effort to resolve the problem and it showed in the result. His approach was steady and thoughtful and the support was appreciated. It made the whole experience smooth and stress free.
Jason CavallaroCallidus Process Solutions
-
“Resolved the issue within minutes”
The consultant knew exactly what to do and resolved the issue within minutes. He talked through each step so I understood what was happening and made the process simple. The clear communication and fast resolution made a real difference.
Kirk LentonPilbara Construction
-
“The extra guidance made it more valuable”
Brady tracked down an email I could not locate and took the time to show us how to search more effectively in the future. The extra guidance was helpful and made the experience more valuable. His support was straightforward and appreciated.
Tony YoungOptimus Real Estate
-
“Resolved quickly, with none of my work lost”
They resolved my issue quickly and efficiently, which meant I didn’t lose any of the work I had done today. The support was clear and straightforward, and the outcome made a real difference to my day. Thank you.
Warner PriestInterContinental Energy
-
“Calm, patient and always willing to help”
Dev Sandhu is outstanding in his knowledge and support. He has a calm and patient way of working through any IT issue and is always willing to help at short notice. His positive attitude makes the whole experience easier and more reassuring. Thank you to Dev and the team at Austin for the consistent support.
Peter AlexanderKoch Solutions
-
“Refreshing after two unreliable IT providers”
After dealing with two unreliable IT providers in recent years, it has been refreshing to place my trust in Greg and the team at Austin. They have been professional and highly competent, even under pressure. Their support has made a real difference. Thank you, and keep it up.
Mark HutchisonLifewood
Find out what an attacker
would find first.
Tell us what you run and who is asking about your security. A technical consultant will scope it with you and recommend the SecureShield level that fits.
- A reply within two business hoursA technical consultant reads every enquiry and comes back to you.
- Proven in 90No onboarding fee, 14 days to fix anything you raise and nothing owing if you leave in the first 90 days. How it works
Or call 1300 787 429 or email sales@austintechnology.com.au
