Begin with the scope
Use guided project setup to capture the system profile, classification, ISM version and applicable controls.
Small business and Essential Eight
For teams that need a credible Essential Eight report and a proper document pack.
Starter gives small teams control records, evidence attachments, stakeholder contacts and generated Essential Eight reports and ISM documents.
Build the evidence record
Attach implementation evidence directly to controls and keep key contacts with the project so report statements are traceable.
Generate useful outputs
Produce Essential Eight reports and the ISM-aligned policies, plans and standards most teams do not have yet.
Why and how
Prepare your reports, documents and evidence in one place.
Track Essential Eight progress, attach evidence and generate the documents your team needs for review.
A credible first report
Show Essential Eight maturity, gaps and evidence without building your own tracking system.
Documents you can use
Generate policies, plans, standards and reports from the same information used for control tracking.
Prepare for consultant review
Prepare better source material before engaging external security or compliance help.
A path to assessment
Begin with Starter, then move to Standard if an assessor later needs to work inside SecBoost.
How it works
A workflow from source material to usable outputs.
01
Set up the organisation and system
Capture the basic organisation, system, classification and assessment context.
02
Use the wizard to define scope
Answer guided questions to initialise the project and establish the control baseline.
03
Record implementation and evidence
Add notes, files and status against the controls that matter for your target maturity level.
04
Generate reports and documents
Produce Essential Eight reports and the supporting ISM-aligned documentation suite.
Put your existing tools to work.
Connect your own AI agent or script through the API to update control notes, attach supporting files and generate documents. Reduce manual copying as you maintain your evidence and prepare for the next review.
Starter for reporting. Standard for assessor access.
Choose Starter for documentation and reporting. Choose Standard when an assessor needs to log in, review controls and finalise OSCAL or CCM exports.
Starter
$7,000 / year
AUD, excluding GST
For small teams preparing Essential Eight reports and ISM documentation for customer or assessment requirements.
- ✓One organisation · one system
- ✓Five users · 5 GB storage
- ✓Documents, reports and evidence
All Starter inclusions
- One organisation and one assessed system
- Multiple projects for that assessed system
- 20+ plans, policies, standards and reports
- Full ISM support, updated for June 2026
- Wizard-based project creation
- SSP Annex and Control Matrix Excel import
- Essential Eight dashboard, index and report
- Evidence attachments for controls
- Contacts and stakeholder records
- 10+ registers including hardware, training and evidence
- Asset library for logos, diagrams and contact lists
- Passkey and TOTP MFA
- Five users and 5 GB storage
- Business hours email support
- One hour onboarding and training
- SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Standard
$12,000 / year
AUD, excluding GST
Best when an assessor needs to log in and perform assessment work inside SecBoost.
- ✓Up to two assessed systems
- ✓20 users · 20 GB storage
- ✓Assessor review and final exports
All Standard inclusions
- Everything in Starter
- Assessor-managed control workflow with assessment steps
- Assessors can perform assessment work inside SecBoost
- Assessors can return controls to editing when more information is needed
- Customisable roles and permissions
- Completed CCM and OSCAL SSP and Assessment Results exports
- Up to two assessed systems, each with multiple projects
- 20 users and 20 GB storage
- AI-generated implementation suggestions
- Optional Jira integration
- Business hours priority phone support
- SecBoost-hosted single-tenant AWS Australia PROTECTED deployment
Enterprise
Contact us
Best for multiple organisations, multiple systems, delivery teams and portfolio assurance.
- ✓Multiple organisations and systems
- ✓Unlimited users · configurable storage
- ✓Teams, tasks and SSO
All Enterprise inclusions
- Everything in Standard
- Multiple organisations, assessed systems and projects
- Teams and task assignment
- Task reminders, escalation and reporting
- Custom workflow gates
- Portfolio assessment workflow with completed CCM and OSCAL exports
- SSO with just-in-time provisioning
- Custom domain
- On-premises deployment option
- On-premises options for SECRET and TOP SECRET environments
- Unlimited users
- Configurable storage
- Extended support, custom training and quarterly reviews