Standardise client input
Clients complete the same project, control and evidence workflow before review begins.
Assessors and consultants
A cleaner way to receive evidence, review controls and keep clients moving.
Recommend SecBoost when clients need a structured assessment workspace instead of scattered spreadsheets, shared drives and disconnected policy documents.
Review inside the record
Assessment notes, findings and evidence sit beside the implementation claim instead of being handled in a separate tracker.
Scale to multiple clients
Enterprise supports multiple organisations, systems, teams and tasks when one assessor or firm manages many clients.
Why and how
Assessors need structured client information before the expensive review work begins.
SecBoost helps assessors and consultants standardise the way clients prepare scope, evidence and implementation claims.
Cleaner client preparation
Clients can provide scope, evidence and implementation notes in a consistent structure before review starts.
Less evidence chasing
Evidence sits against the relevant control, reducing back-and-forth across folders, email and spreadsheets.
Higher quality assessment records
Observations, outcomes and findings remain tied to the control and implementation claim.
A repeatable client platform
Consultants can recommend a workflow that improves delivery and creates a consistent client experience.
How it works
A workflow from source material to usable outputs.
01
Get the client into a structured project
The client defines scope, system context, contacts and control applicability in SecBoost.
02
Review implementation and evidence
Assessors inspect implementation notes and files without leaving the control record.
03
Record outcomes and findings
Assessment activity is captured in the workflow instead of a disconnected external tracker.
04
Request clarification in the workflow
If more information is needed, the assessor can return the control to the editor and keep the clarification inside SecBoost.
05
Finalise the assessment package
SecBoost produces structured assessment outputs the client can maintain after the review.
Completed CCM (Cloud Controls Matrix)
OSCAL System Security Plan and Assessment Results exports
Completed Documentation Suite
Up-to-date, living registers
Standard for one client workflow. Enterprise for a client portfolio.
A single assessor can use Enterprise to manage assessments across multiple customers. Larger firms can use Teams and tasks to coordinate analysts and auditors across active projects.
Standard and Enterprise keep evidence requests, assessor comments and control status changes inside the platform instead of pushing confidential assessment material into email threads. At finalisation, SecBoost can produce OSCAL files and a completed CCM from the same assessment record.
Starter
$7k/year + GST
Best for SMBs and small teams starting Essential Eight or ISM documentation work.
- ✓One organisation and one assessed system
- ✓Multiple projects for that assessed system
- ✓20+ plans, policies, standards and reports
- ✓Full ISM support, updated for March 2026
- ✓Wizard-based project creation
- ✓SSP Annex and Control Matrix Excel import
- ✓Essential Eight dashboard, index and report
- ✓Evidence attachments for controls
- ✓Contacts and stakeholder records
- ✓Asset library for logos, diagrams and contact lists
- ✓Passkey and TOTP MFA
- ✓Five users and 5 GB storage
- ✓Business hours email support
- ✓One hour onboarding and training
- ✓SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Standard
$12k/year + GST
Best when an assessor needs to log in and perform assessment work inside SecBoost.
- ✓Everything in Starter
- ✓Assessor-managed control workflow with assessment steps
- ✓Assessors can perform assessment work inside SecBoost
- ✓Assessors can return controls to editing when more information is needed
- ✓Customisable roles and permissions
- ✓10+ registers including hardware, training and evidence
- ✓Completed CCM and OSCAL SSP and Assessment Results exports
- ✓Up to two assessed systems, each with multiple projects
- ✓20 users and 20 GB storage
- ✓AI-generated implementation suggestions
- ✓Optional Jira integration
- ✓Business hours priority phone support
- ✓SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Enterprise
Contact us
Best for multiple organisations, multiple systems, delivery teams and portfolio assurance.
- ✓Everything in Standard
- ✓Multiple organisations, assessed systems and projects
- ✓Teams and task assignment
- ✓Task reminders, escalation and reporting
- ✓Custom workflow gates
- ✓Portfolio assessment workflow with completed CCM and OSCAL exports
- ✓SSO with just-in-time provisioning
- ✓Custom domain
- ✓On-premises deployment option
- ✓SECRET and TOP SECRET classification support
- ✓Unlimited users
- ✓Configurable storage
- ✓Extended support, custom training and quarterly reviews
FAQ
Assessor and consultant questions
Common questions from assessors and consultants using SecBoost to structure client evidence and assessment workflows.
Can assessors review evidence inside SecBoost?
Yes. Standard and Enterprise allow assessors, consultants or internal reviewers to inspect implementation notes and evidence inside the control record and record assessment activity in the workflow.
Can an assessor ask the client for more information?
Yes. Assessors can return controls to editing when evidence or implementation detail is incomplete, keeping clarification requests and responses inside SecBoost.
Is SecBoost useful before formal assessment starts?
Yes. Clients can use SecBoost to prepare scope, implementation claims, documentation and evidence before expensive review work begins, which helps reduce evidence chasing.
Which tier suits consulting firms with multiple clients?
Enterprise is the better fit for firms managing multiple customers, systems, analysts or active projects because it adds portfolio, team and task management capabilities.