Business security
Security audits, IT support and penetration testing for small businesses
HoneyPot runs cyber security audits for Australian small businesses from $490, graded against the Australian Cyber Security Centre's Essential Eight. After the audit, IT & security care starts from $99 a month, and website penetration tests start from $990, delivered with a qualified, insured testing partner. Everything is explained in plain English.
What does the $490 security audit check?
Most attacks on small businesses don't need clever hacking. They use a reused password, an email account without two-step login, a fake invoice or a backup that was never tested. The audit looks for exactly those gaps.
- Accounts and access: two-step login (MFA) on email, banking, accounting, your domain and website, shared logins and old staff accounts.
- Email and domain: SPF, DKIM and DMARC so nobody can send email as you, and who controls your domain.
- Devices: automatic updates, unsupported software, disk encryption, screen locks and lost-phone plans.
- Backups: whether a backup exists, whether a copy is kept offline and whether a restore has ever been tested.
- Website: HTTPS, security headers, out-of-date plugins and admin logins.
- Payments and scams: how bank-detail changes are checked, so a fake invoice can't redirect a payment.
- Network: router and Wi-Fi settings, guest Wi-Fi and anything open to the internet that shouldn't be.
- A one-page incident plan: who to call and what to lock first if something goes wrong.
What do I get at the end of the audit?
A plain-English report with a grade from A to F for each area, and a short list of the fixes that matter most, in order. Each fix shows who does it, roughly how long it takes and what it costs. Most of the top fixes cost nothing.
We walk you through the report on a call, and the audit includes a re-check of your top fixes once they're done. The audit uses safe, read-only checks with your written permission. It is not a penetration test, and it never touches anything that could stop you trading.
What is IT & security care from $99 a month?
Ongoing support so the fixes stay fixed. It suits small teams without an IT person, and you can cancel with 30 days' notice.
- Help setting up and keeping two-step login, a password manager and staff access tidy when people join or leave.
- Monthly checks that updates, backups and email security are still working, with a test restore each quarter.
- Website, domain and certificate monitoring, so an expiring domain or a broken site doesn't catch you out.
- Help with suspicious emails and invoices before anyone clicks or pays.
- Email support for everyday IT questions, and help straight away if something does go wrong.
- A short quarterly security report, so you can see what's improved.
What does a penetration test from $990 include?
A penetration test goes further than an audit: a tester actively tries to break in, the way an attacker would, then shows you how they did it and how to close it. Website and external tests start from $990. Internal network tests are quoted after a scoping call.
We deliver penetration tests with a qualified, insured testing partner. HoneyPot scopes the job with you, manages it and turns the results into a plan you can act on. Nothing is tested without a signed scope and written permission, testing is timed to avoid disrupting your business, and the price includes a re-test of the issues you fix.
How does it work?
It starts with a free 15-minute call to agree what's in scope. You sign a short authorisation, we run the checks, and you get the report and a walkthrough. From there you can fix things yourself, have us fix them, or move onto monthly care.
We follow the Australian Cyber Security Centre's guidance for small business. An audit lowers your risk; no one can honestly promise you'll never be attacked, and we won't.
Questions people ask
How much does a small business security audit cost?
A HoneyPot security audit is $490 for a small business. It includes the checks, a plain-English report graded A to F, a walkthrough call and a re-check of your top fixes.
Is a security audit the same as a penetration test?
No. The audit uses safe, read-only checks against the Essential Eight and good practice. A penetration test actively tries to break in. Website and external penetration tests start from $990 and are delivered with a qualified, insured testing partner.
Do you offer ongoing IT support?
Yes. IT & security care starts from $99 a month for small teams. It covers account and access help, monthly checks of updates, backups and email security, website and domain monitoring, and email support. Cancel with 30 days' notice.
We've been scammed or hacked. What should we do first?
Call your bank straight away if money was sent. Report it at cyber.gov.au (ReportCyber) or call the Australian Cyber Security Hotline on 1300 292 371. Then change passwords and turn on two-step login for email first. Contact us and we'll help lock things down.
Will you test anything without permission?
Never. Every audit and penetration test starts with a signed scope that lists exactly what we may check and when.
Get a clear quote
Tell us what the business does and where. We reply with what is included and what it costs. You own the site.