Begin with the scope
Use guided project setup to capture the system profile, classification, ISM version and applicable controls.
Small business and Essential Eight
For teams that need a credible Essential Eight report and a proper document pack.
Starter is designed for organisations beginning their compliance journey, or managing stakeholder contacts, evidence, an Essential Eight report and an ISM document pack without needing the assessor to work inside SecBoost.
Build the evidence record
Attach implementation evidence directly to controls and keep key contacts with the project so report statements are traceable.
Generate useful outputs
Produce Essential Eight reports and the ISM-aligned policies, plans and standards most teams do not have yet.
Why and how
Small teams need fast structure, not another compliance spreadsheet.
SecBoost helps small teams organise maturity work, evidence and documents before the process becomes expensive or hard to explain.
A credible first report
Show Essential Eight maturity, gaps and evidence without building your own tracking system.
Documents you can use
Generate policies, plans, standards and reports from the same information used for control tracking.
Less consultant dependency
Prepare better source material before engaging external security or compliance help.
A path to assessment
Begin with Starter, then move to Standard if an assessor later needs to work inside SecBoost.
How it works
A workflow from source material to usable outputs.
01
Set up the organisation and system
Capture the basic organisation, system, classification and assessment context.
02
Use the wizard to define scope
Answer guided questions to initialise the project and establish the control baseline.
03
Record implementation and evidence
Add notes, files and status against the controls that matter for your target maturity level.
04
Generate reports and documents
Produce Essential Eight reports and the supporting ISM-aligned documentation suite.
Most small teams begin with Starter.
The decision point is simple: if the assessor only needs exported material, Starter is usually the right fit. If the assessor needs to log in, perform assessment work and finalise OSCAL or CCM outputs, look at Standard.
Starter
$7k/year + GST
Best for SMBs and small teams starting Essential Eight or ISM documentation work.
- ✓One organisation and one assessed system
- ✓Multiple projects for that assessed system
- ✓20+ plans, policies, standards and reports
- ✓Full ISM support, updated for March 2026
- ✓Wizard-based project creation
- ✓SSP Annex and Control Matrix Excel import
- ✓Essential Eight dashboard, index and report
- ✓Evidence attachments for controls
- ✓Contacts and stakeholder records
- ✓Asset library for logos, diagrams and contact lists
- ✓Passkey and TOTP MFA
- ✓Five users and 5 GB storage
- ✓Business hours email support
- ✓One hour onboarding and training
- ✓SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Standard
$12k/year + GST
Best when an assessor needs to log in and perform assessment work inside SecBoost.
- ✓Everything in Starter
- ✓Assessor-managed control workflow with assessment steps
- ✓Assessors can perform assessment work inside SecBoost
- ✓Assessors can return controls to editing when more information is needed
- ✓Customisable roles and permissions
- ✓10+ registers including hardware, training and evidence
- ✓Completed CCM and OSCAL SSP and Assessment Results exports
- ✓Up to two assessed systems, each with multiple projects
- ✓20 users and 20 GB storage
- ✓AI-generated implementation suggestions
- ✓Optional Jira integration
- ✓Business hours priority phone support
- ✓SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Enterprise
Contact us
Best for multiple organisations, multiple systems, delivery teams and portfolio assurance.
- ✓Everything in Standard
- ✓Multiple organisations, assessed systems and projects
- ✓Teams and task assignment
- ✓Task reminders, escalation and reporting
- ✓Custom workflow gates
- ✓Portfolio assessment workflow with completed CCM and OSCAL exports
- ✓SSO with just-in-time provisioning
- ✓Custom domain
- ✓On-premises deployment option
- ✓SECRET and TOP SECRET classification support
- ✓Unlimited users
- ✓Configurable storage
- ✓Extended support, custom training and quarterly reviews