All products

Essential 8 Readiness

E8 uplift through deployed configuration, not strategy documents. Pre-canned IaC modules per control. Toggle what you need, or have us take you to a maturity level.


Options

Three ways to uplift.

Self-select the control modules you need, have us guide you to Maturity Level 2, or scope ML3 and DISP-aligned assurance to your estate.

Opinionated
Custom
Per control module
$1,500
GST exclusive · each
Starter bundle of 3 for $3,900

Self-select the controls you need, each deployed as tested Azure configuration. Maximum opinionation: our modules, toggled on.

What's included
  • PIM module
  • Conditional Access module
  • Microsoft Defender module
  • Audit logging module
  • Azure Policy baseline module
  • Each deployed and tested, toggleable
Talk to us about modules
Per module
$1,500
GST exclusive · each
Talk to us

Starter bundle of 3 for $3,900.

Fixed price
$14,000
GST exclusive
Confirmed price

Guided uplift to Maturity Level 2 across all eight controls. The anchor: a maturity level a procurement officer already understands, at a fixed price.

What's included
  • All eight controls uplifted to ML2
  • Deployed configuration plus evidence
  • Gap assessment against ML2
  • Uplift roadmap
  • Sign-off pack for internal approval
Talk to us about Guided
Fixed price
$14,000
GST exclusive
Talk to us

Confirmed price.

From
$28,000
GST exclusive · ML3 / DISP

Maturity Level 3 or DISP-aligned assurance, scoped to your estate, with the evidence to match.

What's included
  • Uplift toward ML3
  • DISP-aligned controls where required
  • Assurance evidence pack
  • Scoped to your estate
  • Dedicated engineer
Talk to us about Assured
ML3 / DISP

Priced from $28,000 plus a fixed scoping fee. Tell us your target maturity level and estate.

Talk to us
The work

Controls, deployed as configuration.

The control language is written broadly on purpose, and applying it to an environment that already exists rarely has a single right answer. The work is in choosing well among the imperfect ones, not in an out-of-the-box fix that claims to close a control outright. Each control maps to specific configuration we deploy and test in your environment, cloud or on-premises, so the scope stays knowable even where the judgement is not.

Restrict admin privileges

PIM for privileged roles, ending standing admin access.

Conditional Access

Access policies enforcing device, location, and risk conditions.

Microsoft Defender

Defender deployed and tuned across the estate.

Audit logging

Logging configured to the standard the E8 expects, and retained.

Azure Policy baseline

Application control, hardening, and patch posture enforced as policy.

Toggleable per control

Deploy the modules you need now, add the rest later.


Architecture

How we build it

Three deep dives into the real problems behind Essential 8 uplift.

Mapping each E8 control to a specific Azure configuration The control-by-control mapping from the ACSC model to real Azure config. Patch management via Azure Policy and Defender How patch levels get measured and enforced, not just reported. Why automated E8 assurance is hard, and what it actually takes Where the automation breaks down and what honest assurance requires.

E8 uplift you can deploy and test.

Tell us your target maturity level and we will confirm a fixed price.