About Biz Secure Online
Biz Secure Online is a small Australian cyber security firm. We build the platform ourselves, and the person who assesses your business is the person you meet on the call. There is no offshore delivery team and no junior consultant you have not been introduced to.
// Why we exist
Most small businesses have someone who looks after their IT, and most of them are good at it. But the person who configured your systems is not well placed to give you an independent read on whether that configuration is sound, and increasingly somebody outside your business is asking for exactly that.
An insurer at renewal. An enterprise client during procurement. A government tender. They are not asking whether you feel secure; they are asking you to evidence it. Until recently the only ways to answer were a consultancy priced for enterprises, or a spreadsheet and some optimism.
We built the thing in between: tooling an owner can run without a security background and, in Australia, the option of having someone credentialed come and do it with you.
// How we work
Most of our clients have one and should keep them. We bring the independent read and the specialist knowledge; they keep the relationship and the day-to-day. We are not trying to win their contract.
Sophisticated buyers ask a fair question: if you both fix things and assess them, how independent is the assessment? Our answer is that every report states plainly who assessed, what they declare holding, and their relationship to the business being assessed, including when that relationship is "we did the remediation" or "you assessed yourself". We do not decide how much that matters to your reader. We make sure they can see it.
Where your evidence is thin, the report says so, and an unsigned report is watermarked as informal. A document that overstates your position is worth nothing to the person you hand it to, and worse than nothing to you when they check.
Our Microsoft 365 connector went live this month, and we published its limits on the same day: it tells you nothing about your backups, it is weak on application control, and its multi-factor coverage figures need an Entra ID P1 licence that Business Standard does not include. Where a capability depends on your Microsoft licensing, we tell you before you connect rather than after.
// Who you would be dealing with
Managing Director
Andrew is a technology leader and entrepreneur with more than 15 years' experience building and running software consultancy businesses. He founded and grew multiple testing and engineering companies beginning in 2009.
At spriteCloud, Andrew served as Founder and Director of the Performance & Security Group, leading teams across performance testing, penetration testing, QA, DevOps-aligned testing, and real-time monitoring.
He holds the Essential Eight Assessment Course credential described below, and conducts the assessment engagements himself. He is passionate about demystifying cyber security and making risk clear and actionable, a philosophy embedded in Biz Secure Online.
Executive Advisor
Martin brings decades of QA, digital delivery, and operational leadership experience. He has held senior roles at MRM Worldwide, MRM Partners, Zentropy Partners, Blast Radius, Compaq Computer EMEA, and the Computer Corporation of America.
His expertise spans software quality assurance, agile testing, complex digital delivery, and operational leadership. Martin contributes strategic guidance on operational excellence and delivery frameworks.
// Credentials
Completing that course does not make anyone an ASD-endorsed or accredited assessor. ASD does not accredit or certify individual Essential Eight assessors, and we do not claim otherwise. What it means is that the person assessing your business has been trained against the framework by the body that wrote it, and you can check the certificate yourself rather than take our word for it. Assessments are informed by the ASD Essential Eight Assessment Process Guide.
A Diploma of Applied Technologies (Artificial Intelligence) is in progress. We mention it because it is true, not because it is for sale. There is no AI governance service, and there will not be one until the qualification is finished.
// Verify it yourself
Essential Eight Assessment Course
Designed by ASD’s ACSC and delivered by TAFE Queensland. Completed and passed 10 July 2026.
View credential →// Ownership and data
Biz Secure Online is owned and run by Gallivanter Australia Pty Ltd, an Australian company. Every part of the platform runs in Australian data centres: the scanning engine, the compliance database, your reports and the evidence attached to them.
That is a deliberate design decision rather than an accident of where we happen to live. Security evidence is a record of your weaknesses. Where it is stored, and whose laws reach it, is a reasonable thing for you to care about.
// Working together
We are an independent Australian service, deliberately outside the US SaaS mainstream. We do not resell anyone’s software and we have no incentive to find a problem that needs a product we happen to sell.
All hosting and data storage remains in Australia, and billing is in US dollars. If your obligations run to NIST or CMMC rather than the Essential Eight, start with the website testing and talk to us about the rest.
Biz Secure Online™ is operated by Gallivanter Australia Pty Ltd (ABN 45 687 023 365), based on the Gold Coast, Australia. “Biz Secure Online” is a registered trade mark of Gallivanter Australia Pty Ltd, registered with IP Australia (trade mark No. 2600926) in classes 9 and 42.
