ASSESS • IMPLEMENT • OPERATE • GROW

Turn cyber findings into practical improvements.

Start with the Cyber Risk Health Check, choose the level of implementation support you need, then add ongoing technology leadership, automation or care as your business grows.

Start with the Health CheckCompare implementation options

A CLEAR SERVICE PATH

Begin with evidence. Implement what matters. Keep improving.

Each engagement has a defined outcome, written scope and agreed commercial model. You can stop after any stage or continue when the next step creates value.

1

ASSESS

Cyber Risk Health Check

$495

Identify priority risks across Microsoft 365, access, devices, backups and incident readiness.

View the Health Check →
2

IMPLEMENT

Remediation projects

Fixed quote

Choose a focused sprint, a secure-foundations project or staged delivery of the complete roadmap.

Compare implementation options →
3

OPERATE & GROW

Ongoing technology partnership

Monthly proposal

Add a Virtual IT Manager, cyber and automation care, or a joined-up Growth Technology Partner.

Compare ongoing options →

THE STARTING POINT

Cyber Risk Health Check

A practical assessment for Australian SMEs that need a clearer view of their cyber risks and a prioritised plan for improvement.

FIXED-SCOPE ASSESSMENT

Cyber Risk Health Check

$495

Understand what needs attention, why it matters and what should happen first.

  • Microsoft 365, identity and access review
  • Device, backup and incident-readiness review
  • Prioritised business risk register
  • Practical remediation roadmap
  • Findings walkthrough and next-step options

Eligibility: the $495 offer applies to straightforward small-business environments within the published scope.

Check Health Check eligibility

IMPLEMENT THE FINDINGS

Choose the level of remediation support that fits.

Use your Health Check roadmap to address urgent items, establish stronger foundations or complete a broader program in controlled stages.

FOCUSED

Priority Remediation Sprint

Fixed quote

Resolve a defined set of the highest-priority Health Check findings without committing to a large program.

  • Confirm selected findings and dependencies
  • Implement agreed configuration or process changes
  • Record before-and-after evidence
  • Test the result and document residual risks
  • Provide practical handover notes

Best for: businesses that want urgent, bounded improvements completed first.

Request a sprint quote

FOUNDATIONAL

Secure Foundations Implementation

Fixed quote

Implement the core controls most SMEs need across identity, Microsoft 365, backups, policies and staff practices.

  • Identity, MFA and administrator protections
  • Email and Microsoft 365 security configuration
  • Backup and recovery foundations
  • Core security policies and staff guidance
  • Validation evidence and implementation report

Best for: businesses with several connected foundation gaps.

Request a foundations quote

COMPREHENSIVE

Complete Remediation Program

Staged quote

Deliver a broader Health Check roadmap through agreed milestones, dependencies and validation gates.

  • Implementation plan and delivery sequence
  • Coordination with staff and existing providers
  • Technical and procedural remediation
  • Progress reporting and evidence tracking
  • Final validation and residual-risk register

Best for: businesses wanting one accountable partner to drive the roadmap.

Discuss a remediation program

Implementation pricing depends on users, systems, existing configuration, third-party providers and the findings selected. Your proposal confirms inclusions, exclusions, timing and price before work begins.

AUTOMATE PRACTICAL WORK

AI Automation Implementation

Find a useful workflow, prove it at controlled scope and deploy it with the security, documentation and ownership needed for daily use.

DISCOVER, BUILD & HAND OVER

AI Workflow Automation

Fixed quote

Replace repetitive manual steps with a measurable workflow designed around your real systems and controls.

  • Workflow and business-value definition
  • Data, privacy and integration review
  • Controlled prototype or pilot
  • Testing, exception handling and documentation
  • Deployment, training and ownership handover

Quote basis: workflow complexity, systems, data sensitivity, integrations and support needs.

Explore AI automation

ONGOING SUPPORT

Technology oversight at the level you need.

Ongoing plans begin with an agreed baseline and clearly define the operating rhythm, included support and reporting.

MANAGE

Virtual IT Manager

Monthly proposal

Give your business a practical technology owner without hiring a full-time internal IT manager.

  • Technology roadmap and priority tracking
  • Vendor and provider coordination
  • Microsoft 365, licensing and service oversight
  • Risk, lifecycle and budget guidance
  • Regular management reporting

Best for: SMEs that need independent coordination and accountability.

Discuss a Virtual IT Manager

MAINTAIN

Cyber & Automation Care

Monthly proposal

Maintain implemented controls and live automations so they remain reliable, useful and visible.

  • Scheduled security and backup checks
  • Remediation action tracking
  • Automation monitoring and issue resolution
  • Included optimisation and change review
  • Security and automation reporting

Best for: businesses with controls and workflows that need an ongoing care rhythm.

Request a care proposal

LEAD & GROW

Growth Technology Partner

Monthly proposal

Bring cybersecurity, automation, website improvement and technology planning into one accountable relationship.

  • Virtual IT Manager oversight
  • Cybersecurity improvement program
  • Automation pipeline and optimisation
  • Website care and growth improvements
  • Quarterly roadmap and consolidated reporting

Best for: SMEs wanting joined-up technology leadership and continuous improvement.

Discuss a growth partnership

ADDITIONAL CAPABILITIES

Bring in focused help where the roadmap requires it.

01

Microsoft 365 security & optimisation

Improve identity, access, email protection, collaboration settings, licensing and administration.

02

Backup & recovery readiness

Clarify coverage, protection, responsibilities, restore testing and recovery priorities.

03

Incident readiness

Develop practical response plans, contact paths, evidence requirements and tabletop exercises.

04

Policies & awareness

Create usable policies and targeted guidance that reflect the business and its actual risks.

05

Website care & improvement

Maintain the website, address technical issues and improve security, content and conversion paths.

06

Technology projects & vendor selection

Define requirements, assess options and coordinate delivery without unnecessary complexity.

These capabilities can be quoted as standalone projects or included within an ongoing plan.

HOW ENGAGEMENTS WORK

Clear scope before commitment.

1. Choose the outcomeSelect the assessment, implementation project or ongoing role that matches the immediate need.
2. Confirm the scopeWe clarify systems, users, dependencies, existing providers, evidence and boundaries.
3. Receive the proposalYou receive written deliverables, exclusions, responsibilities, timing and commercial terms.
4. Decide with clarityProceed only when the proposed outcome, scope and price make sense for your business.

PRICING QUESTIONS

What to know before requesting a quote.

Why is the Health Check priced but implementation is quoted?

The Health Check has a standard published scope. Implementation varies according to the findings, environment, dependencies and work selected, so a fixed written quote is prepared for the agreed outcome.

Do we have to use CyberCrunch to implement the findings?

No. The Health Check gives you a prioritised roadmap that can be handled internally, by your existing provider or through a separately scoped CyberCrunch implementation.

Can we start with only the urgent findings?

Yes. A Priority Remediation Sprint is designed for a defined set of urgent actions. Broader work can be considered later.

Do ongoing services require an initial project?

An agreed baseline is required so responsibilities and priorities are clear. That baseline may come from a CyberCrunch assessment, implementation project or a review of suitable existing documentation.

Are third-party software and licences included?

Unless stated in the proposal, third-party subscriptions, hardware and provider charges are separate. Any known dependencies are identified before commitment.

Are ongoing plans locked in?

Your written proposal sets out the term, review points and cancellation arrangements. These are agreed before the service starts.

START WITH THE NEXT USEFUL OUTCOME

Not sure which level fits?

Tell us what you already know, whether you have an existing risk report and what you need to improve. We’ll recommend the smallest sensible starting point.

Discuss your next stepView all services