Small Business Cyber Security Health Check
1 in 5 small businesses don't survive a cyber attack. Find your gaps before attackers do.
Why You Need This
Small businesses are increasingly targeted — and most don't have the resources to recover. The Privacy Act requires you to take "reasonable steps" to protect personal information, with penalties up to $50 million for serious breaches. Customers and suppliers expect security too. This health check shows you exactly where you're vulnerable and what to fix first—in plain English, without technical jargon.
What You Get
What You Receive
Every assessment generates a comprehensive report. Download a sample below.
Summary Report
Plain-English findings with scores, prioritised improvement plan, risk associations, and resources
Download SampleHow It Works
Open the HTML file in your browser, answer the questions, download your report. About 60 minutes. No technical knowledge required—the questions are written in plain English for business owners, not IT professionals. Progress saves automatically.
Your Data Stays Private
Everything runs locally in your browser. Nothing is sent to us or anyone else.
Who Is This For?
Any small business owner, operator, or manager who wants to understand their cyber security posture. Retailers, trades, professional services, hospitality, manufacturing—if your industry isn't covered by one of our specialised health checks, this general assessment covers the security fundamentals that matter for every business. No IT background needed.
Looking for your industry?
Accounting · Bookkeeping · Legal · Financial Planning · Mortgage Broking · GP Clinics · Allied Health · Real Estate · Childcare · NDIS Providers
Your Assessment Includes a Personal AI Security Advisor
Two AI assistants are built into the tool — one to help you during the assessment, one to help you make sense of your results. Like having a security professional on call.
Not sure what a question is asking? Just ask.
Every question in the assessment has an AI helper built in. Tap it and ask anything — "What does this question actually mean?", "Can you give me an example?", "Why does this matter for my business?" — and you'll get a plain-English explanation instantly.
- ✓ Explains technical concepts in everyday language
- ✓ Gives real-world examples relevant to your industry
- ✓ Never suggests how to answer — just helps you understand
- ✓ No technical background required to complete the assessment
Your Personal Security Advisor — available the moment you see your results.
Once your results are in, an AI security advisor has your full assessment in front of it and is ready to answer any question about what it means — in plain English, as if you're talking to a security professional.
- ✓ "Explain my highest risk gap in simple terms"
- ✓ "Walk me through how to fix action #3"
- ✓ "Which gaps are easiest to fix myself?"
- ✓ Ask anything — your advisor knows your specific results
No consultants. No jargon. No guesswork.
For the first time, small businesses get the same quality of guidance that used to cost hundreds of dollars an hour — built directly into the assessment.
Get the Small Business Cyber Health Check
Common Questions
Why do small businesses need a cyber security health check?
Small businesses are now the most common target of cyber attacks in Australia. Criminals target them specifically because they hold valuable customer data but typically have fewer security controls than large organisations. The Privacy Act applies to many small businesses — particularly those handling health information, running on government contracts, or turning over more than $3 million annually. A health check gives you a clear picture of where you stand.
What does the Small Business Health Check cover?
The health check covers password and access management, multi-factor authentication, email security, software and device updates, data backup and recovery, staff security awareness, remote access controls, and your obligations under the Privacy Act 1988. Questions are written in plain English — no technical background required.
How long does it take and what do I need?
Most small businesses complete the health check in 45–90 minutes. You need a computer or tablet and a browser — no app, no account, no installation. Your answers are saved automatically so you can pause and return. The assessment runs entirely in your browser and your data never leaves your device.
What do I receive at the end?
You receive a professional Word report with an overall security score, a domain-by-domain breakdown, and a prioritised action list — critical gaps first, lower-risk items last. The report is suitable for sharing with your IT provider, cyber insurer, accountant, or keeping on file as evidence of due diligence under the Privacy Act.
Further Reading
Resource
What Actually Happens When a Small Business Gets Hacked
The real costs, downtime, legal obligations, and recovery timeline of a cyber incident — and why 1 in 5 small businesses don't survive one.
Read the guide