Free tools we built for Australian businesses
Every assessment, generator, reference and incident playbook we publish in one place. No sign-up wall, no discovery call. Use them with your team, your auditor or your insurer.
29
Free tools across five categories
180+
Glossary terms with Australian context
60+
Long-form operational guides
$0
Cost. No gate, no email required to use.
Assess your business
Interactive checks that score your current posture in minutes.
8 tools
Security Gaps Tracker
Twelve controls from SMB1001 and the Essential Eight, answered No, Partly or Verified. Shows the SMB1001 tier you could evidence and the gaps to close first. Answers stay in your browser.
Domain Security Scan
Live DMARC, SPF, DKIM, MX, DNS and TLS posture check for any Australian domain. Returns a graded scorecard with remediation steps.
AI Maturity Assessment
Eight-dimension diagnostic mapped to data, governance, identity, copilot readiness and security guardrails. Designed for Australian SMBs.
Client Success Checklist
The same onboarding checklist we hand to clients on day one. 50+ items across identity, endpoints, backup, network and licensing.
IT Cost Benchmark
What businesses your size and sector actually spend on managed IT in 2026. Built from ABS, ASD, Gartner and Deloitte data.
Business Continuity Checklist
Seven-step plain-English checklist to keep your business running through an IT outage or cyber incident. Aligned to ACSC guidance and built for Australian SMBs. PDF download.
Microsoft 365 Copilot Readiness Questionnaire
Microsoft's official self-scoring questionnaire covering organisational profile, productivity tools, data security and governance, and Copilot-eligible users. Know exactly where your tenant stands before you buy a single Copilot licence.
Remote Work Cybersecurity Checklist
15-item checklist covering device security, Wi-Fi, passwords, MFA, VPN, phishing awareness and remote work policies. Print it, share it with staff, or include it in your BYOD or onboarding pack.
Generators
Produce real, downloadable artefacts. No discovery call required.
5 tools
Password Policy Generator
Produce an Essential Eight aligned password policy in your business name. Outputs a copy-ready policy document you can lodge with HR or your insurer.
Network Diagram Generator
Map your sites, links, firewalls and core services into a tidy network diagram. Useful for insurance, compliance and onboarding new staff.
Shadow AI Acceptable Use Policy
Generate a plain-English AI acceptable use policy in your business name. Aligned to the Voluntary AI Safety Standard, OAIC AI privacy guidance and the Privacy Act ADM transparency rule landing December 2026.
IT Policy Library
Plain-English starter policies covering acceptable use, BYOD, offboarding, M365 governance and incident reporting. Editable.
10 Ways to Stay Secure When Using AI
Practical checklist for safe AI practices with Microsoft Copilot: permissions, sensitivity labels, MFA, prompt monitoring, and the difference between private and public AI tools.
Reference & benchmarks
Australian data, glossaries and frameworks you can cite.
8 tools
Security & IT Glossary
180+ Australian-context cybersecurity and IT terms with plain-English definitions, why-it-matters callouts and links to the right Real Bytes service.
Live Threat Landscape
Australian-relevant threat intel: active CVEs, vendor patches, ASD alerts and breach activity. Updated continuously.
Framework Comparison
ISO 27001 vs SMB1001 vs Essential Eight. What overlaps, what does not, and what auditors actually accept in Australia.
Copilot vs ChatGPT vs Gemini
Decision-frame guide for Australian leadership teams choosing between Microsoft 365 Copilot, ChatGPT and Google Gemini. Data boundary, identity, licensing and where each one actually earns its keep.
AI Threats for Australian SMBs
Deepfake CEO fraud, AI-assisted business email compromise, voice cloning, prompt injection and AI-accelerated exploitation. Patterns, indicators and the controls that actually help.
Conditional Access Library
16 ready-to-deploy Microsoft Entra conditional access policies with tested logic, exclusions and rollout notes.
Anatomy of a Cyberattack
A two-page visual explainer of how modern cyberattacks unfold across five stages: reconnaissance, weaponisation, delivery, installation and attack. Shows exactly where EDR, MDR and a human SOC intercept each stage.
Standard EDR vs Managed EDR
One-page comparison of what standard EDR detects versus what Managed EDR stops. Covers AI-powered triage, 24/7 SOC coverage, the 15-minute response SLA, and why the gap between detecting and containing a threat is where the damage happens.
Incident & response
What to do when something has already gone wrong.
3 tools
We Just Got Hacked : Now What
Honest, step-by-step response for the first 60 minutes after a suspected breach. Written for Australian business owners, not analysts.
Incident Simulation
Walk through a real ransomware or BEC scenario decision-by-decision. Designed for leadership tabletop exercises.
First Hour Playbook
What an engineer actually does in the first hour of a cyber incident. Cited against ASD ACSC and the Notifiable Data Breach scheme.
Tools we recommend
Independent third-party tools we use ourselves. No affiliation, no kickback. Open in a new tab.
8 tools
Email Header Analyser
Paste any raw email header. Get the full delivery path, SPF, DKIM and DMARC verdicts, and whether the sender is who they claim to be. Useful for investigating suspicious emails before they cause damage.
Phishing Link Checker
Paste a suspicious URL. Get an instant safety verdict powered by NordVPN's threat intelligence. A simple sanity check for dodgy links in emails, SMS messages and chat apps before anyone clicks.
Email Security Check (DMARC/SPF/DKIM)
Analyse your domain's SPF, DKIM and DMARC records in seconds. Find misconfigurations that let attackers impersonate your business. A misconfigured email domain is one of the most common preventable attack vectors for Australian SMBs.
Have You Been Breached?
Check whether your email address or domain has appeared in known data breaches. Searches hundreds of databases including ones already circulating on the dark web. Most businesses find out months after the fact. Check now.
Tech Stack Assessment
30-minute independent diagnosis of your entire technology function. Surfaces risks, priorities and benchmarks without needing integrations. Built for leaders who need clarity, confidence and control over technology.
SMB Cyber Gap Assessment
Score your business against the SMB1001 cybersecurity framework. Identify gaps across the five certification levels with a prioritised roadmap. Increasingly required by enterprise and government contracts.
Advanced Security Assessment
Diamond-level SMB1001 benchmark for businesses that need higher assurance. Ideal for organisations handling sensitive data, operating in regulated industries, or supplying enterprise and government.
Passphrase Generator
Generate long, random passphrases that are easy to remember but nearly impossible to crack. A four-word passphrase is stronger than a complex 10-character password and far easier for your team to remember.
Why we publish these
A reference asset is worth more than a sales pitch
We would rather you find the right answer for your business in 10 minutes from a free tool than sit through a discovery call to find out the same thing. The tools here are what we use internally when we onboard, audit and respond. Use them with your team. If you would like Australian engineers behind them, we are here.

Remote Support