Where does your business stand on the Essential Eight?
A free, plain-English self-assessment for Australian small businesses. Answer questions for about 20 minutes and get an indicative maturity snapshot across all eight ASD controls — the same framework insurers and big customers ask about.
Built for Australian
Progress saves automatically · Plain English, no jargon
08.
Controls assessed
~50.
Plain-English questions
~20.
Minutes to a snapshot
L0–3.
Maturity scale per control
Twenty minutes to clarity
- Step 1 / 3
Answer plain-English questions
About 50 questions across the eight controls — MFA, backups, patching, macros, admin rights and more. "Unsure" is a valid answer.
- Step 2 / 3
See your maturity snapshot
An indicative Level 0–3 for each control and overall, assessed against the ASD Essential Eight Maturity Model (November 2023).
- Step 3 / 3
Know what to fix first
Your snapshot highlights the gaps holding your overall level down, so you can focus effort where it counts most.
Veritas Cyber · Diagnostics
Maturity snapshot
- 01Multi-factor authenticationL2
- 02Regular backupsL2
- 03Patch applicationsL1
- 04Patch operating systemsL1
- 05Restrict admin privilegesL1
- 06Office macro settingsL1
- 07User application hardeningL0
- 08Application controlL0
Sample values for illustration only — your snapshot reflects your own answers. Overall maturity follows your lowest control.
Four maturity levels, based on the ASD model
0.
Not implemented
Not implemented, or only in an ad-hoc way.
1.
The baseline
Basic and partial implementation of the control.
2.
The common target
Systematically implemented and monitored — the common small-business target.
3.
Advanced
Optimised and continually improved over time.
All eight controls, in plain English
Every card links to a short guide: what the control means, why brokers and insurers commonly ask about it, and what each maturity level involves.
Free to see where you stand
The self-assessment and maturity snapshot are free. Subscribe when you want the documents that go with them.
Free
$0
The full self-assessment and your indicative maturity snapshot.
- Guided ~50-question self-assessment
- Indicative Level 0–3 for each control and overall
- Highlights the gaps holding your level down
- Email yourself the results — progress saves as you go
StarterThe subscription
$99AUD / month
or $990/year — 2 months free
Your snapshot, turned into the documents brokers and insurers commonly ask for.
- Everything in Free
- Evidence Pack — maturity summary plus the cyber-insurance readiness checklist, for your broker
- Incident Response Plan — a document insurers commonly ask about
- Remediation Roadmap — prioritised, plain-English actions
- Five further security policies, Information Security to Acceptable Use
- Documents regenerate whenever your answers change
- Shareable read-only status link for your broker
- Cancel any time from your billing page
Already assessed? Sign in
Pro
$199AUD / month
or $1,990/year — 2 months free
Everything in Starter, plus the Privacy Act and AI modules.
- Everything in Starter
- Privacy & Data Security Statement — the APP 11 "reasonable steps" story, written down
- Data Breach Response Plan — aligned to the Notifiable Data Breaches scheme
- Personal Information Inventory starter
- AI Use Policy — the rules customers increasingly expect
Compliance Pack — $399 AUD, once
Prefer no subscription? Generate the same document pack from your current assessment as a one-time purchase.
Prices in AUD. All documents are generated from your own self-assessment answers — Veritas Cyber is not a certification, audit, or guarantee of security or insurance outcomes, and is not legal or insurance advice. You remain responsible for verifying and implementing the controls described.
Built for Australian small businesses
If you run a 5–50 person business — a trade, clinic, professional practice or online store — and your insurer, broker or a big customer has asked about your cyber security, this is for you. No consultants, no jargon, no sales calls.
- Facing a cyber insurance application or renewal questionnaire
- Asked by a customer or partner about your security posture
- Getting ahead of Privacy Act obligations for small businesses
- Just want to know your gaps before someone else finds them
Not ready to assess? Grab the free checklist
A one-page, plain-English Essential Eight checklist for Australian small businesses — the same eight controls insurers ask about. Print it, tick what you already do, and see where to focus next.
Frequently asked questions
No. Veritas Cyber is a self-assessment tool: you answer questions about your own business, and we turn your answers into an indicative maturity snapshot. It is not a certification, audit, or guarantee — and it is not legal or insurance advice.
The Essential Eight is a set of eight baseline mitigation strategies published by the Australian Signals Directorate (ASD). Each is assessed at a maturity level from 0 to 3. Many Australian insurers and larger customers ask small businesses to demonstrate their maturity against it.
Australian insurers increasingly ask applicants about controls like multi-factor authentication, backups and patching before offering or renewing cyber cover. A documented self-assessment can help you understand and discuss your posture with your broker — though insurers make their own decisions.
No. Questions are written in plain English for business owners and office managers. Every question has a "why we ask" note showing the underlying ASD criterion, and you can answer "unsure" — we treat it conservatively and flag it for follow-up.
Your answers stay in your browser while you complete the assessment. If you choose to email yourself the results, we store your email and the level summary only — never your detailed answers, and never any credentials or system data.
Know where you stand in about twenty minutes
Free, plain English, and your answers stay in your browser until you choose otherwise.
Check your maturity now — free