Secure your mission-critical systems
against an industry-tested baseline.

A team around a meeting-room table, a security briefing on the screen behind them
40
scored controls across nine domains
2
calendar weeks
1
fixed fee by identity count

Every control you need,
and none you don’t.

01

Identity & Access

MFA on every account, legacy sign-in off, admin roles separated and few.

02

Email & Domains

SPF, DKIM and DMARC, registrar and DNS hygiene for every sending domain.

03

Endpoints

Every user-facing device, whatever it runs: encryption, patching, protection.

04

Network & Remote Access

How people reach your systems from outside, and what is exposed.

05

SaaS & Leavers

What the business runs on, who still has access, and how it ends.

06

Files & Data

Sharing settings, external access, and where the sensitive material sits.

07

Backup & Recovery

What is backed up, where, and whether a restore has ever been tested.

08

Logging & Alerting

Whether anyone would know something had happened, and how quickly.

09

Policy & Insurance

The written controls you have, and whether they match what insurers ask.

A scored report,
delivered before and after.

The audit report open on an iPad: an overall score of 51 out of 80, with each of the nine domains scored
Over a developer’s shoulder, code open across a wide monitor

One fixed fee, no obligations,
credited against onboarding.

10 to 30 identities

NZ$3,000, fixed
  • Forty controls scored across nine domains
  • Two calendar weeks, about fifteen hours of work
  • A prioritised plan and a fixed quote for the baseline
  • Credited in full against onboarding within 60 days

31 to 100 identities

NZ$6,000, fixed
  • Forty controls scored across nine domains
  • Two calendar weeks, twenty-five to thirty hours of work
  • A prioritised plan and a fixed quote for the baseline
  • Credited in full against onboarding within 60 days

Fees exclude GST. Above 100 identities, we quote the audit individually.

Run on the suite
you already use.

Your productivity toolset stays the same as it always has. Our baseline adds a small set of proven tools alongside it, and they work the same way with all major suites.

Productivity Microsoft 365
Productivity Google Workspace
Messaging Slack
Files Dropbox
Accounting Xero
CRM HubSpot
Devices macOS, Windows & Linux
Identity & Devices JumpCloud
Detection, 24/7 Huntress
Access & DNS Cloudflare Zero Trust
Passwords Bitwarden

Choose from the essentials
or a fully-managed suite.

Baseline

One monthly fee per identity, quoted in your audit report
  • Identity, devices and patching
  • 24-hour detection and response
  • Zero-trust access and DNS filtering
  • Managed password vault
  • Joiners and leavers
  • Post-implementation report, quarterly reviews, annual re-audit
  • A monthly status note, not a report
The right fit for most organisations of 10 to 100 people.

Baseline+

One monthly fee per identity, quoted in your audit report
  • Everything in Baseline
  • Managed SIEM: logs kept and watched
  • Phishing simulations and awareness training, managed
  • SaaS backup for your suite, restores tested
For organisations answering enterprise questionnaires or holding regulated data.

Ready to get started?

Talk to the team today to discuss what’s right for your business.