Cyber risk assessments and tools for Australian organisations
Self-service gap scans that turn into board-ready reports. Essential Eight, CIS Controls, Privacy Act and cyber insurance readiness: assess yourself, get your score, download your documentation.
Built around published frameworks: ASD Essential Eight · CIS Controls v8.1 · Australian Privacy Principles (OAIC)
4
Free tools
~20 min
Per assessment
100%
Australian-focused
None
No account required
Yes
Built in Australia
Used by IT managers, business owners, and operations teams across Australian SMBs.
How it works
How the Essential Eight Assessment Works
Pick your framework
Choose the compliance or security framework most relevant to your situation, insurance renewal, privacy obligations, client requirements, or international controls.
Take the assessment
Answer plain-English questions about your current controls. No account required. Your answers stay in your browser until you ask for your results.
Get your score and act
Receive a readiness score and an indicative Essential Eight maturity level per strategy, with a prioritised gap analysis. Download a report or generate tailored policies ready to present to your board or auditor.
Reports and policy packs
Start with a free self-assessment. Upgrade to a board-ready report or policy bundle whenever you need it.
EssentialScore
Free readiness score and indicative Essential Eight maturity level per strategy. $99 unlocks 14 policies written from your answers plus the full gap report.
View EssentialScoreCISScore
Free 45-question assessment covering all 56 IG1 safeguards across the 15 controls that contain IG1 safeguards. $99 unlocks the IG1 policy bundle.
View CISScoreCyberInsureReady
Free readiness score across five underwriting domains. $99 Readiness Report with gap analysis and prioritised fixes to share with your broker.
View CyberInsureReadyPrivacyScore
Free 18-question assessment across 5 compliance domains. $49 Tailored Privacy Policy written for your business.
View PrivacyScoreThe suite
Four tools. Every angle covered.
EssentialScore
Essential Eight Compliance
Assess your cybersecurity maturity against the ACSC Essential Eight framework. Recommended for all Australian SMBs.
- 74-question assessment
- Maturity Level 1 & 2
- 14 policy templates
- PDF report
CISScore
CIS Controls v8.1 Assessment
Measure your security posture against the internationally recognised CIS Controls framework. Ideal for businesses with international clients or ISO 27001 aspirations.
- CIS IG1 controls
- Implementation Groups
- Gap analysis
- Remediation guidance
PrivacyScore
Privacy Act 1988 Compliance
Check your compliance with the Australian Privacy Act and Australian Privacy Principles. Essential for any business handling personal information.
- 13 Privacy Principles
- Notifiable data breaches
- Privacy policy generator
- Risk assessment
CyberInsureReady
Cyber Insurance Readiness
Assess how your controls compare with the questions Australian cyber insurers commonly ask and identify gaps before renewal. Identify gaps before your next renewal to avoid claim disputes.
- 24-question assessment
- Indicative insurability level
- Readiness Report, $99
- Broker-ready PDF and Word
Compare
Which tool covers what?
| Domain | EssentialScore | CISScore | PrivacyScore | CyberInsureReady |
|---|---|---|---|---|
| Patch management | ✓ | ✓ | — | ✓ |
| Multi-factor authentication | ✓ | ✓ | — | ✓ |
| Backups & recovery | ✓ | ✓ | — | ✓ |
| Endpoint & network security | ✓ | ✓ | — | ✓ |
| Email & phishing protection | — | ✓ | — | ✓ |
| Access control & identity | ✓ | ✓ | — | ✓ |
| Incident response | — | ✓ | — | ✓ |
| Application control | ✓ | ✓ | — | — |
| Privacy obligations (APPs) | — | — | ✓ | — |
| Data breach notification | — | — | ✓ | — |
| Consent & data handling | — | — | ✓ | — |
| Insurance insurability score | — | — | — | ✓ |
Why CyberPosture
Why Australian SMBs Choose CyberPosture
Privacy-first
No account is required and the questions run in your browser. To see your results you give your name, business name and email, and your answers and results are shared with our security partner Cyber83 Australia, with your consent, who may contact you about improving your score. We use privacy-friendly, aggregate website analytics to understand traffic, not to profile your answers.
Built for Australia
Frameworks and language aligned to ACSC, OAIC, and Australian insurers, not adapted from US-centric tools.
Under 30 minutes
Each assessment is designed for busy IT managers. Comprehensive coverage without wasting your afternoon.
Actionable results
Not just a score, a prioritised gap analysis and an optional policy bundle you can act on immediately.
For MSPs
Run assessments across your entire client base.
Each tool is free to use with any client, no per-seat licensing, no vendor contracts. Use them to qualify prospects, identify gaps before an engagement, or deliver a compliance snapshot as part of your onboarding. White-label options are available. Contact us to discuss.
- Instant gap analysis ready to present to the client
- White-label options available, contact us
- Works across professional services, finance, retail and more
- No account or setup required per client
Not sure where to start?
My insurer is asking about cybersecurity controls, where do I start?
Start with EssentialScore
Am I handling customer personal data correctly?
Start with PrivacyScore
Am I renewing my cyber insurance soon?
Start with CyberInsureReady
Do I want to follow international security best practices?
Start with CISScore
All four tools are free to use. Run all of them for a complete picture of your cyber posture.
All four tools in one purchase
- ✓EssentialScore, Essential Eight maturity report + 14 security policies
- ✓CISScore, CIS Controls v8.1 policy bundle + remediation guidance
- ✓PrivacyScore, Tailored Privacy Policy
- ✓CyberInsureReady, Cyber Insurance Readiness Report
One-time · Instant access
Need help?
Debra Scott
Cyber Security Advisor
Debra has spent over a decade helping Australian businesses understand and improve their security posture. She works directly with IT managers, business owners, and operations teams to make sense of assessment results and identify the right next steps. If you have questions about your score, your documentation, or which tool is right for your situation: Debra is the right person to ask.
Contact DebraQuestions? Ask Debra.
Cyber Security Advisor
For product questions, billing, or help with your assessment results, reach out directly.
Send Debra an emailGet your complete cyber posture picture.
Four frameworks. Four free assessments. One clear view of where your business stands, and what to fix first.