Free, no gate29 tools · always free

Free tools we built for Australian businesses

Every assessment, generator, reference and incident playbook we publish in one place. No sign-up wall, no discovery call. Use them with your team, your auditor or your insurer.

29

Free tools across five categories

180+

Glossary terms with Australian context

60+

Long-form operational guides

$0

Cost. No gate, no email required to use.

Assess your business

Interactive checks that score your current posture in minutes.

8 tools

5 minutes

Security Gaps Tracker

Twelve controls from SMB1001 and the Essential Eight, answered No, Partly or Verified. Shows the SMB1001 tier you could evidence and the gaps to close first. Answers stay in your browser.

Tier readout + gap listTrack your gaps
60 seconds

Domain Security Scan

Live DMARC, SPF, DKIM, MX, DNS and TLS posture check for any Australian domain. Returns a graded scorecard with remediation steps.

Scorecard + fix listRun a scan
8 to 12 minutes

AI Maturity Assessment

Eight-dimension diagnostic mapped to data, governance, identity, copilot readiness and security guardrails. Designed for Australian SMBs.

Maturity level + roadmapStart assessment
10 minutes to scan

Client Success Checklist

The same onboarding checklist we hand to clients on day one. 50+ items across identity, endpoints, backup, network and licensing.

Working checklistOpen checklist
12 minute read

IT Cost Benchmark

What businesses your size and sector actually spend on managed IT in 2026. Built from ABS, ASD, Gartner and Deloitte data.

Cited benchmarkOpen the dashboard
PDF

Business Continuity Checklist

Seven-step plain-English checklist to keep your business running through an IT outage or cyber incident. Aligned to ACSC guidance and built for Australian SMBs. PDF download.

Downloadable checklistDownload free
Third partyExcel · 24 questions

Microsoft 365 Copilot Readiness Questionnaire

Microsoft's official self-scoring questionnaire covering organisational profile, productivity tools, data security and governance, and Copilot-eligible users. Know exactly where your tenant stands before you buy a single Copilot licence.

Self-scored workbookDownload workbook
Third party1-page PDF

Remote Work Cybersecurity Checklist

15-item checklist covering device security, Wi-Fi, passwords, MFA, VPN, phishing awareness and remote work policies. Print it, share it with staff, or include it in your BYOD or onboarding pack.

Printable checklistDownload PDF

Generators

Produce real, downloadable artefacts. No discovery call required.

5 tools

3 minutes

Password Policy Generator

Produce an Essential Eight aligned password policy in your business name. Outputs a copy-ready policy document you can lodge with HR or your insurer.

Downloadable policyGenerate policy
5 to 10 minutes

Network Diagram Generator

Map your sites, links, firewalls and core services into a tidy network diagram. Useful for insurance, compliance and onboarding new staff.

Exportable diagramBuild a diagram
2 minutes

Shadow AI Acceptable Use Policy

Generate a plain-English AI acceptable use policy in your business name. Aligned to the Voluntary AI Safety Standard, OAIC AI privacy guidance and the Privacy Act ADM transparency rule landing December 2026.

Downloadable policyGenerate policy
Use as needed

IT Policy Library

Plain-English starter policies covering acceptable use, BYOD, offboarding, M365 governance and incident reporting. Editable.

Editable templatesOpen the library
Third party4-page PDF

10 Ways to Stay Secure When Using AI

Practical checklist for safe AI practices with Microsoft Copilot: permissions, sensitivity labels, MFA, prompt monitoring, and the difference between private and public AI tools.

Downloadable checklistDownload PDF

Reference & benchmarks

Australian data, glossaries and frameworks you can cite.

8 tools

Searchable

Security & IT Glossary

180+ Australian-context cybersecurity and IT terms with plain-English definitions, why-it-matters callouts and links to the right Real Bytes service.

Updated daily

Live Threat Landscape

Australian-relevant threat intel: active CVEs, vendor patches, ASD alerts and breach activity. Updated continuously.

Live dashboardView live feed
8 minute read

Framework Comparison

ISO 27001 vs SMB1001 vs Essential Eight. What overlaps, what does not, and what auditors actually accept in Australia.

Decision guideCompare frameworks
10 minute read

Copilot vs ChatGPT vs Gemini

Decision-frame guide for Australian leadership teams choosing between Microsoft 365 Copilot, ChatGPT and Google Gemini. Data boundary, identity, licensing and where each one actually earns its keep.

Decision guideOpen guide
12 minute read

AI Threats for Australian SMBs

Deepfake CEO fraud, AI-assisted business email compromise, voice cloning, prompt injection and AI-accelerated exploitation. Patterns, indicators and the controls that actually help.

Threat briefOpen brief
Reference

Conditional Access Library

16 ready-to-deploy Microsoft Entra conditional access policies with tested logic, exclusions and rollout notes.

Policy libraryOpen library
Third party2-page PDF

Anatomy of a Cyberattack

A two-page visual explainer of how modern cyberattacks unfold across five stages: reconnaissance, weaponisation, delivery, installation and attack. Shows exactly where EDR, MDR and a human SOC intercept each stage.

Reference guideDownload PDF
Third party2-page PDF

Standard EDR vs Managed EDR

One-page comparison of what standard EDR detects versus what Managed EDR stops. Covers AI-powered triage, 24/7 SOC coverage, the 15-minute response SLA, and why the gap between detecting and containing a threat is where the damage happens.

Comparison guideDownload PDF

Incident & response

What to do when something has already gone wrong.

3 tools

Read in 4 minutes

We Just Got Hacked : Now What

Honest, step-by-step response for the first 60 minutes after a suspected breach. Written for Australian business owners, not analysts.

Live playbookOpen playbook
15 to 25 minutes

Incident Simulation

Walk through a real ransomware or BEC scenario decision-by-decision. Designed for leadership tabletop exercises.

Tabletop exerciseStart simulation
10 minute read

First Hour Playbook

What an engineer actually does in the first hour of a cyber incident. Cited against ASD ACSC and the Notifiable Data Breach scheme.

Field-tested playbookOpen playbook

Tools we recommend

Independent third-party tools we use ourselves. No affiliation, no kickback. Open in a new tab.

8 tools

Third partyInstant

Email Header Analyser

Paste any raw email header. Get the full delivery path, SPF, DKIM and DMARC verdicts, and whether the sender is who they claim to be. Useful for investigating suspicious emails before they cause damage.

Third partyInstant

Phishing Link Checker

Paste a suspicious URL. Get an instant safety verdict powered by NordVPN's threat intelligence. A simple sanity check for dodgy links in emails, SMS messages and chat apps before anyone clicks.

Third partyInstant

Email Security Check (DMARC/SPF/DKIM)

Analyse your domain's SPF, DKIM and DMARC records in seconds. Find misconfigurations that let attackers impersonate your business. A misconfigured email domain is one of the most common preventable attack vectors for Australian SMBs.

Third partyInstant

Have You Been Breached?

Check whether your email address or domain has appeared in known data breaches. Searches hundreds of databases including ones already circulating on the dark web. Most businesses find out months after the fact. Check now.

Have I Been PwnedOpen Have I Been Pwned
Third party30 minutes

Tech Stack Assessment

30-minute independent diagnosis of your entire technology function. Surfaces risks, priorities and benchmarks without needing integrations. Built for leaders who need clarity, confidence and control over technology.

Third party10 to 15 minutes

SMB Cyber Gap Assessment

Score your business against the SMB1001 cybersecurity framework. Identify gaps across the five certification levels with a prioritised roadmap. Increasingly required by enterprise and government contracts.

Third party15 to 20 minutes

Advanced Security Assessment

Diamond-level SMB1001 benchmark for businesses that need higher assurance. Ideal for organisations handling sensitive data, operating in regulated industries, or supplying enterprise and government.

Third partyInstant

Passphrase Generator

Generate long, random passphrases that are easy to remember but nearly impossible to crack. A four-word passphrase is stronger than a complex 10-character password and far easier for your team to remember.

Why we publish these

A reference asset is worth more than a sales pitch

We would rather you find the right answer for your business in 10 minutes from a free tool than sit through a discovery call to find out the same thing. The tools here are what we use internally when we onboard, audit and respond. Use them with your team. If you would like Australian engineers behind them, we are here.