Remote SupportFor businesses that need to prove their security, not just have it.
Tendering for government work. Renewing cyber insurance that actually asks questions. Supplying bigger companies that audit their vendors. If your business needs to show evidence, not promises, RB Ultimate is built for you.
Everything in our all-in managed plan, plus the compliance and AI layer that gets you certified, audit-ready and answering security questionnaires with confidence.
$500 per user, per month, ex GST. Minimum 5 users. No lock-in after your first 6 months.
One flat rate per user. Plus the account management layer.
RealBytes Ultimate
For teams that need to prove their security
per user / month
- Unlimited remote IT support (business hours)*, whole team
- Onboarding and offboarding included*
- Priority response time*
- Microsoft 365 Business Premium (per user)
- Microsoft Defender for Business, managed
- Managed device care (patching, monitoring, maintenance)
- 24/7 managed security (Huntress MDR + ITDR)
- ThreatLocker application control
- Check Point email security gateway
- AI workforce enablement
- Security awareness training (phishing sims + modules)
- Managed DMARC, SPF and DKIM
- Keeper password manager
- Cloud backup (Microsoft 365, independently held)
- Compliance management (Inforcer)
- Web hosting + SSL + annual domain renewal
*Unlimited support means day-to-day help, fixes and questions for your team, delivered remotely during business hours (Mon to Fri, 8am to 5pm AEST). After-hours and 24/7 support is available when you need it. Onboarding and offboarding covers account creation, device enrolment, security configuration and access revocation for new starters and leavers. Response time is priority queue with under 15 minutes average first response during business hours. Fair use applies. See the fine print for full detail.
Talk to us about UltimateFirst year of SMB1001 Gold on us
We cover your first year of SMB1001 Gold certification through CyberCert, including the annual subscription. We run the gap assessment, build the policies, gather the evidence and get you on the register.
*From year two, there is a billable annual fee for the CyberCert subscription. SMB1001 renews every year and the controls must be maintained and re-attested to stay certified, so there is ongoing work on your side as well. If the gap assessment or a later renewal turns up controls that need extra work, that is scoped and quoted separately so you see it before we start.
The Ultimate layer
Account management layer
One flat fee, regardless of user count. Covers your dedicated account manager, quarterly business reviews and compliance program ownership. Required on every Ultimate plan.
The compliance modules below sit on top of this layer, quoted per environment.
Minimum 5 users
Built for teams, not solo operators
Ultimate starts at 5 users. If you are a one-person business, RealBytes One is built for you.
This is what separates Ultimate from every other plan we offer. The compliance, governance and insurance modules that turn a secure business into one that can prove it. Add the ones your business needs, quoted per environment and priced up front. No surprises, no recurring licence creep.
SMB1001 Gold certification
The badge that opens doors. SMB1001 Gold is Australia's cyber security certification for small and medium business, and it is fast becoming the standard procurement teams look for before they will even read your proposal. We run the gap assessment, build the policies, collect the evidence and get you certified, then keep you there year after year. Slap the badge on your tenders and watch the security questionnaires shrink.
Essential Eight alignment
The framework your insurer, your board and your biggest customer all measure you against. We assess where you actually sit across the eight mitigation strategies, give you a plain-English roadmap to lift your maturity, and back it with the evidence. The report that turns a vague security promise into something you can hand over with confidence.
Vendor management
Your supply chain is part of your attack surface, and the big players know it. We keep your vendor register current, chase down security questionnaires and insurance certificates, and track exactly who has access to your data. When a customer or auditor asks about your third-party risk, you hand them a clean register instead of a shrug.
Cyber insurance support and management
A cyber insurance renewal is not a paperwork exercise. It is the moment your controls get scrutinised by someone who can decline your claim later. We translate the broker questionnaire into the right evidence, make sure your security matches what the underwriter is asking for, and keep your policy defensible. The difference between a clean renewal and a refused payout when it matters.
The extras that round out the stack. Deeper visibility, secure access for distributed teams, managed networking, and a smarter way to price seats for people who do not need everything. Quoted per environment, priced up front, switched on only if they suit your business.
ActivTrak employee monitoring
See how your team actually works, without the guesswork. ActivTrak pulls real behaviour data: productivity trends, workload balance, application usage and early burnout signals. Useful for hybrid teams, workforce planning and the kind of compliance evidence that shows you are actively managing your people, not just hoping for the best.
Network management
Your network is the road everything else drives on. We monitor and maintain your switches, firewalls and wireless around the clock, catch bottlenecks and failures before they become outages, keep firmware current and keep your network documentation up to date. So when your network person leaves, the knowledge does not walk out the door with them.
Cloudflare SASE
One cloud platform that replaces a tangle of point products. Cloudflare SASE wraps zero trust access, web filtering, cloud security and data loss prevention into a single service delivered from the edge. Built for distributed teams that need enterprise-grade security and fast, reliable access no matter where staff are logged in from.
Tailscale SASE
Zero trust without the heavy lifting. Tailscale builds a mesh private network over WireGuard, connecting your devices, servers and cloud resources without the pain of a traditional VPN. A cleaner fit for businesses that want secure access everywhere without buying and running a stack of network appliances.
Lite user seats
Not everyone needs the full stack. If you have a field worker, a driver or a contractor who just needs a mailbox and a work mobile, do not pay $500 for them. We can add lower-tier seats built around what that person actually uses. The 5-seat minimum and the core security baseline still apply, so every device on your network stays protected, but your invoice stays honest. Quoted per seat based on actual needs.
Axcient device backups
Your Microsoft 365 data is already backed up under the base plan. Axcient takes it further with full image-level backups of your laptops, desktops and servers. If a machine dies, gets stolen or gets hit by ransomware, we can restore the entire device to bare metal, not just the cloud files. The safety net for businesses where a downed machine means a downed worker.
Enterprise-grade EDR (CrowdStrike or SentinelOne)
Your base plan already includes Microsoft Defender for Business and 24/7 managed detection and response through Huntress, which is a strong setup for most Australian businesses. This add-on is for teams that want to go further, or need to. CrowdStrike Falcon and SentinelOne bring deeper behavioural analytics, richer threat intelligence and faster response tooling to the table. We layer them on top, fully managed and tuned by our team, so you get the extra depth without running a second console. Common when a tender, a regulator or a customer names a specific vendor, or when your risk profile warrants the upgrade.
SMB1001 Diamond and Platinum
The Ultimate layer gets you to SMB1001 Gold, which is where most Australian SMBs need to be. If a tender, a regulator or a customer is pushing for Diamond or Platinum, we have you covered through our partner network. We run the gap assessment, bring in the right specialists for the deeper controls, and project manage the whole certification so you are not juggling multiple vendors. The same evidence-based approach, taken to the higher tier your deal or your sector demands.
ISO 27001 and other ISO certifications
When an international standard is on the table, we bring in certified auditors and lead implementers from our partner network to run the full ISO 27001 program: scoping, risk assessment, statement of applicability, internal audit and certification. We act as your single point of contact across the whole journey, so the ISO work lines up with your existing SMB1001 and Essential Eight evidence rather than starting from scratch. Also available for ISO 22301 (business continuity) and other relevant standards.
6-month minimum term, then month to month. Prices in AUD. Same flat rate for every seat, no intro discount.
Ultimate is the top of the standard tier ladder. But some businesses need something built to measure. If any of these sound like you, a custom agreement is usually the better fit.
- Multi-site or enterprise environments with complex infrastructure
- Regulated industries: health, finance, government, defence supply chain
- Specialised software or legacy systems outside the standard stack
- Co-managed arrangements with your internal IT team
The full managed stack, per user.
Fifteen services, one flat monthly rate per person. This is everything included in your Ultimate plan before you add a single compliance module or add-on.
Unlimited IT support
Call, email or message us as often as your team needs. Remote support during business hours, no per-ticket charges and no watching the clock.
Microsoft 365 Business Premium
The full Microsoft suite for every user: Outlook, Word, Excel, PowerPoint, Teams, OneDrive and SharePoint, plus Intune device management and Entra ID security.
Microsoft Defender for Business
Enterprise-grade endpoint protection on every device, configured and tuned by us so it actually catches things instead of nagging your team.
Managed device care
Every laptop and desktop monitored, patched and maintained. We spot problems and sort them out before they turn into helpdesk calls.
Huntress managed EDR (24/7 MDR)
A real security operations centre watching your devices around the clock. If something malicious lands, a human analyst isolates it and kicks it out, not just an alert that sits in a queue.
Huntress managed ITDR
Round-the-clock protection for your Microsoft 365 identities. Catches stolen logins, sneaky inbox rules and session hijacks before your email gets turned against you or your clients.
ThreatLocker application control
Only approved software runs on your devices, full stop. Ransomware and rogue tools are blocked by default. This is the application control evidence that auditors and insurers actually accept.
Check Point email security gateway
Enterprise-grade filtering in front of your inbox. Catches phishing, malware and scam emails before your team ever sees them, with far fewer false positives than the default.
AI workforce enablement
Microsoft Copilot rolled out properly, with data governance locked down so staff AI use cannot leak client information. Your team gets the productivity lift without the shadow AI risk.
Security awareness training
Ongoing phishing simulations and short, practical modules. Your team becomes part of your defence instead of your weakest link, and you get the training records compliance wants.
Managed DMARC, SPF and DKIM
We set up and watch your email authentication so your messages land in inboxes, not spam, and scammers cannot send email pretending to be your business.
Keeper password manager
Enterprise password management for the whole team. Secure vaults, controlled sharing, breach monitoring and dark web alerts, all managed by us.
Cloud backup
Your Microsoft 365 data backed up independently. Deleted, corrupted or encrypted by ransomware, we can bring it back cleanly.
Compliance management (Inforcer)
Automated compliance tracking, policy management and evidence collection. Your security paperwork stays audit-ready without the spreadsheet nightmare.
Web hosting and domain
Fast, Australian-hosted website hosting with SSL included, and your business domain renewed every year on us.
Showing your work, not just doing it.
Plenty of IT providers will tell you they do security. Fewer can prove it when a procurement officer, an insurer or a big customer starts asking for evidence. That is the gap Ultimate closes. It is the same managed IT and security stack our clients already rely on, with the compliance and AI governance layer bolted on so you can walk into a tender, an audit or a renewal with something real in your hand.
One provider, one monthly price, and a clear path to Essential Eight and SMB1001 Gold without hiring a security team.
Tender responses asking for Essential Eight evidence you cannot lay hands on
Cyber insurance renewals that want a real security posture, not a tick box
Big customers auditing their vendors and sending you a 200-question security spreadsheet
Shadow AI creeping through the team with no policy, no oversight and no idea what is leaking
Compliance frameworks like SMB1001 Gold feeling out of reach without a security team
A security operations centre you cannot justify building in-house
The honest fine print
We would rather you read this before you sign than be surprised after.
Minimum 5 users, flat rate, no ramp.
Ultimate starts at 5 users. Every seat is $500 + GST a month from day one, plus a flat $350 + GST a month account management fee that covers your dedicated account manager, quarterly business reviews and compliance program ownership. There is no half-price introductory period and no step-up after a set number of users. Add or remove seats and the per-seat maths stays the same.
Unlimited means unlimited support, not unlimited projects.
Day-to-day help, fixes, questions and maintenance are all included for the whole team. Bigger one-off jobs like office relocations, new website builds, data migrations or rolling out a brand new system are quoted separately, always before we start.
Business hours, remote first.
Unlimited support is delivered remotely, Monday to Friday, 8am to 5pm AEST. After-hours, on-site and 24/7 support are available when you need them, at our standard rates or as part of an agreed uplift.
Onboarding and offboarding are included.
Setting up a new starter or securing a leaver is part of the plan, not a billable extra. We handle account creation, device enrolment, security configuration and access revocation. Hardware itself is billed separately at cost plus our standard margin.
ThreatLocker, Check Point and AI are in the base plan.
Application control, enterprise email security and AI workforce enablement are included for every user from day one. You do not pay extra for the controls that underpin Essential Eight and SMB1001, and no user is on a cut-down security set while you scale.
The Ultimate layer modules are quoted per environment.
SMB1001 Gold certification, Essential Eight alignment, vendor management and cyber insurance support sit on top of the $350 a month account management layer. They are scoped to your framework targets, user count and environment, then priced up front so you only pay for the modules you actually need.
Add-ons are quoted separately.
ActivTrak employee monitoring, network management, Cloudflare SASE and Tailscale SASE are bolt-on modules. We scope them to your team size and infrastructure, quote them up front, and you switch them on only if they make sense for your business.
Backups are included and tested.
Cloud backup covers your Microsoft 365 data (email, OneDrive and SharePoint). Backups are immutable, so ransomware cannot touch them, and we run test restores so we know they work before you need them.
Security training runs all year.
Huntress security awareness training runs continuously. Short modules and simulated phishing emails keep the team sharp and give you the evidence you need for SMB1001, Essential Eight and cyber insurance applications.
Fair use applies.
If usage patterns look like the plan is being shared beyond the agreed user count, we will have a friendly chat about the right plan for you.
Standard hosting and domain.
Includes hosting for one standard business website and renewal of one standard domain (such as .com.au or .com). High-traffic sites, online stores or premium domains may need an upgraded plan.
Hardware is not included.
We will recommend, source and set up hardware for you, but the gear itself is billed at cost plus our standard margin. No mark-up surprises.
Third-party software beyond the stack.
Licences for software outside the included list (Xero, Adobe, industry-specific apps) stay on your account. We will still help your team use them day to day.
6-month minimum, then month to month.
Cancel any time after that with 30 days notice. Your data, domain and Microsoft tenancy are yours and leave with you, no lock-in.
Questions, answered
RealBytes One is built for a one-person business. Ultimate is the same flat $500 + GST per user, but structured for teams of five or more. It adds ThreatLocker application control, Check Point email security and AI workforce enablement to the base plan, plus a $350 a month account management layer with a dedicated account manager and quarterly business reviews. On top of that, you can switch on compliance modules like SMB1001 Gold, Essential Eight alignment and Managed AI.
See the other plans
Ready to put the full stack behind your team?
Book a 15-minute call. We will scope your user count, map your compliance targets, and tell you up front what Ultimate and the modules you need will cost.