Free · Under 10 seconds

How exposed is your business right now?

Enter your website. We check six things attackers look for and score your cyber health out of 100 — in under 10 seconds. Free, no account needed.

Under 10 seconds · No sales call · Australian businesses

What you get

A score out of 100, and what's pulling it down.

Your grade, every finding we turned up, and the specific fix for each one — ranked so you know what to do first.

1

External scan

Under 10 seconds
2

7 questions

About 90 seconds
3

Cyber quote

At 65+ on the scan

Example output

Not your score

Risk score

62 /100

Grade

External scan

60%

Self-assessment

40%

The two blend into one score. The external scan carries more because it's independently verified — nothing to self-report.

What we check

Six things an attacker would look for first.

These are the same signals a cyber insurer checks before they decide whether to cover you — and on what terms.

pts

Exposed services

Open ports and remote access left visible to the internet. The most common way ransomware gets in.

pts

Leaked passwords

Staff email addresses that appear in public breach databases, meaning their credentials are already circulating.

pts

Email spoofing

Whether someone can send email that looks like it came from your business — the basis of most invoice fraud.

pts

Domain reputation

Whether your domain has been flagged by security vendors for malware or phishing associations.

pts

Certificate health

Expired or weak encryption on your website, which affects both security and customer trust.

pts

Forgotten systems

Subdomains, mail servers and old sites still attached to your domain. Attackers go looking for the one nobody has patched.

How it works

From unknown to insured in four steps.

Enter your domain

Type your website address. No login. No forms. No credit card. CertIQ scans your domain automatically — you don't need to do anything technical.

Answer 7 quick questions

While the scan runs, we ask seven plain-English questions about how your business manages its technology. No right or wrong answers — just honest ones.

Takes about 90 seconds

Get your score and action plan

You'll see a grade from A to F, what's pulling it down, and exactly what to fix. Each fix has a point value — so you know which ones matter most.

Hit CertIQ Ready — request a cyber quote

Clear 65 on the external scan, finish your self-assessment, and resolve any critical issues — then you're CertIQ Ready. We help you get a pre-filled cyber insurance quote from a panel of insurers. Better score, better terms.

CertIQ Ready = 65+ / 100

See the full scoring methodology

The Australian standard

Scored against the Essential Eight.

The Australian Signals Directorate publishes the Essential Eight: eight mitigation strategies it recommends as a baseline. CertIQ asks you seven plain-English questions mapped to those controls, then combines your answers with what we found on your domain. The result is one score out of 100 — and a clear list of what to fix first.

Who's behind CertIQ

Built by a person you can actually talk to.

CertIQ is a small Australian team. We're launching now, which means you're one of our first users. If your report surprises you, or you think we got something wrong, tell us and we'll fix it.

More about us

Ben Webster

Founder, CertIQ

I read every message that comes in. If you're not sure what your score means, get in touch. I'm happy to explain it.

Call 0402 378 954 Book a 15-minute chat hello@certiq.au

Stay in touch

Cyber threats move fast.
Stay a step ahead.

Occasional, practical cyber tips for Australian businesses — no spam. (Your free scan is ready now, above.)