For small and medium businesses
Your clients trust you with their documents.
Passports, visas, tax file numbers, health records. If your business collects them, a few simple gaps can expose them. We find those gaps, explain them in plain English, and help you close them.
Where it usually goes wrong
Not hackers in hoodies. Small gaps nobody checked.
- Documents uploaded through your websiteForms that store passports or payslips where anyone with the link can open them, or in an inbox nobody cleans out.
- Email anyone can fakeWithout the right email records, a scammer can send invoices that look like they came from you.
- Shared links and old accountsFolders shared with "anyone with the link", and staff who left but can still sign in.
- A website nobody has updatedOld plugins and admin pages that are public, on a site built years ago and not looked at since.
If something leaks, the law may require you to tell people.
Under the Notifiable Data Breaches scheme, a data breach likely to cause serious harm must be reported to the people affected and to the Office of the Australian Information Commissioner.
The scheme covers businesses with an annual turnover over three million dollars, and also some smaller ones whatever their size, including health service providers and, for tax file numbers, anyone who holds them.
This is general information, not legal advice. We can point you to the right questions to ask your adviser.
How it works
Start free. Pay only once you know what needs fixing.
- 01
Free outside check
We look only at what anyone on the internet can already see: your website, its certificate and your email records. You get three findings in writing and a 20 minute call. Nothing is tested until you have signed a short authorisation.
- 02
Website and customer-data check
A closer look at your website and domain, email protection, admin accounts, sign-in security on your email, backups, document uploads and shared links. You get a plain-English report with the most important fixes first.
- 03
Fixes, done with you
A set number of hours of fixes is included, agreed before we start. We work alongside your web developer or IT provider if you have one, then re-check that the fixes worked.
Every price is fixed and agreed in writing before work starts. An enquiry is never treated as permission to test.
Common questions
Do I need to be technical?
No. The report is written for business owners, with a separate technical section for whoever makes the changes.
Will you ask for my passwords?
Never. Where we need access, you add us as a user that you can remove at any time.
What does it cost?
It depends on the size of your business and how many systems you use. After the free check we send a fixed price in writing, and nothing starts until you agree to it.
We already have an IT person or a web developer.
Good. We work with them, and the report gives them exactly what to change. We are not trying to replace them.
Do you look after Microsoft 365 or Google Workspace?
We check the basics, such as sign-in security and sharing settings. For deeper Microsoft 365 work we will tell you honestly and refer you to a specialist.
Start with the free check
See what anyone can already see.
Tell us your business name and website. We reply within two business days with a short authorisation to sign, then send three findings and book a 20 minute call.