Find The Cyber Gaps In Your Business Before Criminals Do
Answer 25 plain-English questions while we run live checks on your email, website and domain. You’ll get an indicative score out of 100, your top 3 fixes and an Essential Eight snapshot, free.
- Free, no credit card
- About 3 minutes
- PDF report emailed to you
- Email spoofing protection (DMARC) High
- MFA on email and cloud apps High
- HTTPS and TLS grade (SSL Labs) Pass
- Security headers Medium
- Mail server blacklists Pass
- Domain DNSSEC Low
Sound Familiar?
Most business owners know cyber security matters. The hard part is knowing where your business actually stands, and what to fix first.
Fake Invoices & Email Spoofing
If your domain isn’t protected, criminals can send emails that look like they came from you, asking your customers to pay a “new” bank account.
Ransomware & Lost Data
One unpatched system or untested backup can stop the business for days. Recovery is much easier when backups are offline and restores have been tested.
Privacy Act & Data Breach Obligations
Do you know whether the Privacy Act applies to you, or what to do within 30 days of a suspected data breach?
Cyber Insurance Questionnaires
Insurers commonly ask about MFA, backups, patching and remote access. Guessing the answers is risky.
No IT Department
You’re running a business, not a server room. You need a clear, prioritised list in plain English, not a 60-page audit.
Find Out In About 3 Minutes
Get an indicative score, your top 3 gaps and a PDF to share with your team, IT provider or insurer.
A Clear Picture Of Your Cyber Risk
Your free Cyber Risk Score combines your answers with live, read-only checks of your domain.
- An indicative Cyber Risk Score out of 100 with a clear risk band
- Your top 3 gaps, each with a practical fix in plain English
- Scores across 8 areas: passwords and MFA, devices and patching, backups, staff and payments, monitoring, privacy, email and website, exposure and domain
- Essential Eight snapshot: an estimated Maturity Level (ML0 or ML1) for each of the eight strategies
- Privacy Act and data breach readiness summary, with key dates
- A PDF snapshot emailed to you to share with your team, IT provider or insurer
Live checks on your domain
* Only checked when you use an email address at the domain being scanned. Every result is labelled “Tested live” or “Based on your answers”.
Three Simple Steps
Tell Us Your Business Domain
Your name, work email, company and website, so we check the right domain and send your report to you.
Answer 25 Quick Questions
Multiple choice and plain English. “Not sure” is always a fair answer.
Get Your Score Straight Away
Live checks usually take under a minute. Your results appear on screen and the PDF goes to your inbox.
Get Your Free Cyber Risk Score
Free and indicative. The Deep Scan and Monthly Monitoring options appear with your results.
Indicative only. Results are based on your answers and publicly observable information about your domain. Not an Essential Eight assessment, formal audit or legal advice, and not a guarantee of security.
See What Your Results Look Like
An example only. The business, domain and results below are made up to show the layout.
yourbusiness.com.au
Based on your answers 52/100 · Tested live 62/100
Your top 3 gaps
Score by category
Essential Eight snapshot (estimated)
| Strategy | Estimate |
|---|---|
| Multi-factor authentication | ML0 |
| Regular backups | ML1 |
| Patch applications | ML0 |
| Application control | ? |
+ 4 more strategies, the full list of live checks and your Privacy Act readiness summary in the PDF.
Start Free. Go Deeper When You’re Ready.
Everyone starts with the free score. The Deep Scan and Monthly Monitoring can be bought straight from your results, so we know exactly which domain to scan.
Free Cyber Risk Score
Know where you stand in about 3 minutes.
No credit card needed
- Indicative score out of 100 and risk band
- Top 3 gaps with practical fixes
- Scores across 8 areas
- Essential Eight snapshot (ML0/ML1 estimate)
- Privacy Act and data breach readiness
- Live email, website and domain checks
- PDF snapshot emailed to you
Deep Scan
See what attackers can see from the internet.
Including GST · no subscription
- Everything in the free score, re-run fresh
- Internet exposure check (Shodan) of the public IP addresses behind your website and self-hosted mail server
- Exposed remote access (RDP, SSH, VNC, Telnet), file sharing and databases
- Known vulnerabilities (CVEs) reported against your internet-facing systems
- Open admin logins and leaked config files (read-only)
- Full PDF report with every finding and a complete fix list in priority order
- Usually ready in about 10 minutes
Starts with the free check, then takes you to secure checkout with your results.
Monthly Monitoring
Stay on top of new issues as your setup changes.
Including GST · cancel any time
- Everything in the Deep Scan, starting straight away
- A fresh Deep Scan automatically every month
- Email alert listing any new issues since last month
- A new full PDF report each month
- Catch changes early, such as a newly exposed service or an expiring domain or certificate
- Manage your card, invoices or cancel online through Stripe
Starts with the free check, then takes you to secure checkout with your results.
- Secure payment by Stripe
- Prices in AUD, including GST
- Reports only sent to an email address at your domain
Why Pansoft Technologies?
The Cyber Risk Score is built by the same team that helps businesses fix what it finds.
Local Gold Coast Team
Talk to real people at 47 Ashmore Road, Bundall QLD 4217, looking after businesses across Queensland and Australia.
Essential Eight Aligned
Questions and recommendations follow the Australian Government’s Essential Eight baseline.
Plain-English Advice
Clear explanations and practical fixes, without the jargon or scare tactics.
From Report To Fix
Security Assessments, firewalls, secure SD-WAN (C-WAN) routers and 24/7 Managed SOC monitoring when you need more than a report.
Built With Your Business In Mind
Non-Intrusive Checks
We only read public information: DNS records, certificates, public web pages and trusted security datasets. We never try to log in, exploit or overload anything.
Domain Owner Safeguards
You confirm you’re authorised to check the domain. Paid scans need an email address at that domain, and reports are only ever sent there.
Secure Stripe Payments
Pay on Stripe’s secure checkout page. Your card details are handled by Stripe, not stored on our website.
GST-Inclusive Pricing
Supplied by Pansoft Technologies Pty Ltd, ABN 41 651 234 221, 47 Ashmore Road, Bundall QLD 4217. Stripe emails your payment receipt.
Cancel Any Time
No lock-in contracts. Manage or cancel Monthly Monitoring from the secure link in your emails.
Your Details Stay Private
Reports are delivered by secure, time-limited links. We never sell your details, and marketing emails are opt-in.
Frequently Asked Questions
Is the Cyber Risk Score really free?
Yes. The score, on-screen results and PDF snapshot are free, with no credit card. The Deep Scan (A$40 one-off) and Monthly Monitoring (A$39 a month) are optional upgrades.
How long does it take?
About 3 minutes to answer the 25 questions. The live checks usually finish in under a minute. The SSL Labs test can take a few more minutes, and your score updates on screen when it’s done.
Is this a formal audit or Essential Eight assessment?
No. It’s an indicative assessment based on your answers and publicly observable information about your domain. It’s a fast way to find likely gaps. For a formal review, ask us about a Security Assessment.
Will the scan affect my website or email?
No. We read public DNS records, look at your website the way a browser does and use well-known testing services such as SSL Labs and Mozilla Observatory. Nothing is submitted, and we never try to log in.
Why do you need my work email?
So we check the right domain and send the report to someone at that business. A few extra checks (open admin logins and leaked files) only run when your email address is at the domain being checked, and paid reports are only ever sent to an address at that domain.
What does the Deep Scan add?
It re-runs every free check, then uses the Shodan database to look at the public IP addresses behind your website and any self-hosted mail server. It flags exposed remote access (such as RDP), file sharing and databases, plus known vulnerabilities (CVEs) reported against those systems. You get a full PDF report with every finding and a complete fix list in priority order, usually within about 10 minutes.
How do I buy the Deep Scan or Monthly Monitoring?
Run the free check first. The Deep Scan and Monitoring buttons appear with your results. Enter an email address at your domain, confirm you’re authorised, and pay securely through Stripe. We email you a secure link to download the report.
How does Monthly Monitoring work, and can I cancel?
Your first Deep Scan runs straight away. After that we rescan every month and email you a new report, listing any new issues since last month. You can update your card, download invoices or cancel any time from the secure link in your emails.
What’s the Essential Eight?
A set of baseline mitigation strategies published by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), covering areas such as MFA, patching, admin rights, application control and backups. Our questions follow it, and your report estimates a maturity level for each strategy.
What do you do with my details?
We use them to deliver your results and contact you about them, as described in our Privacy Policy. We never sell your details. Marketing emails are optional and you can unsubscribe any time.
I got a low score. What now?
Start with your top 3 fixes. Many can be done by your IT provider in a few hours. If you’d like a hand, book a free 15-minute chat with our team.
Know Your Cyber Risk Before Someone Else Finds It
Get your free Cyber Risk Score in about 3 minutes, or talk it through with our Gold Coast team.
Prefer to call? (07) 5646 4560 · 47 Ashmore Road, Bundall QLD 4217
- 1. Australian Signals Directorate, Annual Cyber Threat Report 2024–25 (published 14 October 2025). Figures are averages of costs self-reported in cybercrime reports.
- 2. Office of the Australian Information Commissioner, Data breach notifications increase to all-time high in 2025 (published 6 July 2026).
- The Cyber Risk Score is indicative only. It is not an Essential Eight assessment, formal audit or legal advice, and does not guarantee security.