CertIQ combines automated domain scanning with an Essential Eight self-assessment to produce a hybrid risk score. When that score crosses the ready threshold, a cyber insurance quote is generated automatically.
Not every check counts the same. Bar length below is the points a signal is worth — so you can see at a glance what moves your score most.
Run automatically on your domain. Nothing to install, nothing to fill in.
Seven plain-English questions, about 90 seconds.
The two layers are blended, not added — the external scan is independently verified, so it carries more of the result.
A score on its own is not enough. All three have to be true at the same time — and the 65 applies to the external scan, not your combined score.
CertIQ scans any domain from the outside — no access to the client's systems required. Six independent data sources run in parallel and return results in under 10 seconds.
Six signals share 100 points, weighted by how much each one tells us. See every weight to scale at the top of this page.
While the domain scan runs, the user answers seven plain-English questions mapped to the ASD Essential Eight framework. No IT knowledge required. Takes about 90 seconds.
When the external score reaches 65 or above, the self-assessment is complete, and no critical findings remain outstanding, the client is CertIQ Ready. A pre-filled cyber insurance quote can be sourced from a panel of insurers.