Biz Secure Online — User Handbook

Your guide to monitoring and protecting your websites with Biz Secure Online.

Version: June 2026 release · Covers the Biz Secure Online portal (web app)

---

Welcome

Biz Secure Online (BSO) keeps an eye on your websites so you don't have to. You add the web addresses you care about, and BSO regularly scans them for security weaknesses, performance problems, and other issues that could hurt your business or your customers' trust. After each scan you get a clear, plain-English report — a security score, a list of what needs attention, and practical steps to fix it.

This handbook walks you through everything the portal can do, from creating your account to reading a report and inviting your team. You don't need any technical background to follow it. Where we mention a security term, we explain it in everyday language.

How this handbook is organised

1. Getting started — creating your account and securing it
2. Your dashboard — the home screen, at a glance
3. Adding and organising your websites — domains and companies
4. Running scans — automatic and on-demand
5. Understanding your report — a section-by-section walkthrough
6. Sharing reports and branding them as your own
7. Plans and billing
8. Working as a team — inviting members
9. Troubleshooting and FAQ

A note on availability: Everything in this handbook is available now, with one exception: the Essential Eight compliance feature, which is flagged "coming soon" wherever it appears. Team features (Chapter 8) are available on paid plans.

---

1. Getting started

What you'll need

• A business email address
• A website (or several) that you want to monitor
• A smartphone with an authenticator app, for secure sign-in (we explain this below)

Creating your account

Go to the Biz Secure Online sign-up page and you'll see a short three-step guide at the top: Create account → Secure with 2FA → Start scanning.

Fill in the registration form:

• First name and Last name
• Business name — this becomes the name of your first company in BSO and appears on your reports (you can change it later)
• Work email — you'll sign in with this
• Password — at least 8 characters
• Confirm password

You'll also see two checkboxes:

• Authorised Scanning & Lawful Use Consent (required) — by ticking this you confirm you're allowed to scan the websites you add. You can only submit the form once this is ticked.
• Marketing communications (optional) — tick this if you'd like product news and tips by email.

There is no "account type" to choose — every account works the same way, and you can grow from a single website to managing many companies and websites without switching plans-types or starting over.

Tip — pricing in your currency. If you arrived from the Biz Secure Online marketing site, your local currency (Australian dollars, British pounds, US dollars, or euros) is detected automatically and carried through to checkout. You don't need to set it manually.

Securing your account with two-factor authentication (2FA)

Biz Secure Online protects every account with two-factor authentication. This means that, on top of your password, signing in also requires a one-time code from an app on your phone. Even if someone learned your password, they couldn't get in without your phone.

Setting it up takes a minute and is required — your account isn't active until it's done:

1. After registering, you'll see a QR code on screen.
2. Open an authenticator app on your phone. Any of these work: Google Authenticator, Microsoft Authenticator, Authy, or 1Password. (If you don't have one, install it from your phone's app store first — they're free.)
3. In the app, choose to add a new account and scan the QR code. If you can't scan, tap "enter a setup key manually" on the BSO screen to type in a code instead.
4. Your app now shows a 6-digit code that changes every 30 seconds. Type the current code into BSO and select Verify & Activate Account.

That's it — your account is secure and active. From now on, each time you sign in you'll enter your password and then the current 6-digit code from your app.

Keep your phone handy and your app backed up. If you ever lose access to your authenticator, see "I've lost my authenticator app" in the FAQ — there's a safe recovery path.

Signing in

On the sign-in page:

1. Enter your email and password, then continue.
2. Enter the 6-digit code from your authenticator app.

You'll land on your dashboard. (If you started a paid plan during sign-up, you may be taken to the secure checkout first to finish that.)

---

2. Your dashboard

Your dashboard is the home screen and the quickest way to see how all your websites are doing. It's organised around companies (groups of websites) so that even with many sites, everything stays tidy.

What you'll see

A site-down alert (only if something's wrong). If any of your websites appear to be offline, a banner appears at the top listing them, with a link to investigate. If everything's healthy, you won't see this.

Company cards. Each company you've set up gets its own card, showing the company's name, a "Primary" badge on your main company, and how many websites it contains. Inside each card, every website has its own scan tile.

A scan tile for each website, showing:

• The website address
• A Scan button to run a fresh scan on demand (available on the Business plan)
• The date of the latest scan, the security score, a status badge, and a "View Report →" link
• Four pillar cards that summarise the site at a glance:
  • Security — how exposed the site is to attackers
  • Performance — how fast the site loads
  • Technology — what the site is built with, and whether anything's out of date
  • SEO & Visibility — how well the site is set up to be found and understood by search engines
  • Each pillar shows a simple status and a one-line plain-English summary.
• A Risks list highlighting the most important issues found
• A Scan history you can expand to see every past scan, each linking to its report (this only appears once a site has more than one scan)

An "Unassigned" bucket. If you add a website but haven't yet placed it into a company, it lands in an amber "Unassigned" group as a safety net, with a reminder to assign it (see Chapter 3).

An "Essential Eight — Coming soon" panel. Each company card includes a teaser for our upcoming compliance feature (the Australian Cyber Security Centre's Essential Eight). It's informational for now; we'll let you know when it goes live.

Live updates. When a scan is running, the dashboard refreshes itself every few seconds so you can watch the result come in without reloading the page.

---

3. Adding and organising your websites

In Biz Secure Online, each website you monitor is called a domain, and domains are grouped into companies. Most people start with one company (created automatically from your business name at sign-up) and add a few domains to it. If you manage sites for several distinct businesses or brands, you can create more companies to keep them separate.

Adding a website (domain)

Go to Domains in the menu and select Add Domain. In the pop-up:

1. Enter the website address.
2. Choose the company it belongs to (it defaults to your first company).
3. Choose how often it should be scanned — daily, weekly, or monthly. Options your plan doesn't include are shown as "Upgrade required."

Select add, and your website is now monitored. Its first scan will run according to the schedule you chose.

Why scan frequency matters. More frequent scans mean you find out about new problems sooner. Daily scanning is available on the Business plan; weekly and monthly are available on lower tiers. See Chapter 7 for what each plan includes.

The Domains page at a glance

The Domains page lists all your websites in a table (or as cards on a phone), showing for each one:

• The address
• A status badge — Online, DOWN, Scanning…, Pending…, Failed, No scans yet, or Inactive (which means the site is over your plan's limit — see below)
• The latest security score
• An uptime figure (how reliably the site has been online)
• A small "last 8 checks" strip of dots, giving you an instant read on recent availability
• The date of the next scheduled scan

Editing or removing a website

• Edit lets you change a website's company and/or its scan frequency.
• Delete removes the website and all of its scan history (you'll be asked to confirm, because this can't be undone).
• A website marked Inactive (because it's beyond your plan's limit) can still be deleted, but won't be scanned until you free up a slot or upgrade.

Organising websites into companies

Go to Settings → Companies to manage your company groups. Here you can:

• Create a new company
• Rename a company
• Delete a company (only if it has no websites in it, and never your last one)
• Move websites between companies using the dropdown next to each one (you can also send a site back to "Unassigned")

A few rules keep things tidy:

• Your Primary company is your anchor — it can be renamed but never deleted, and you'll always have at least one company.
• A company name must be 4–50 characters, include at least two letters or numbers, and avoid unusual control characters. (This keeps names looking clean on dashboards and reports.)

You'll also see a small read-only summary of your account's allowances here — your plan, the number of team member seats included, and your Essential Eight assessment slots (for the upcoming compliance feature).

---

4. Running scans

A scan is a thorough automated check of one website. Biz Secure Online runs scans two ways:

• Scheduled scans run automatically on the frequency you set for each website (daily, weekly, or monthly). You don't have to do anything — results simply appear, and you'll get an email when a scheduled scan finishes (see Chapter 9).
• On-demand scans let you run a check right now, rather than waiting for the next scheduled one. Use the Scan button on a website's tile (on the dashboard) or its row (on the Domains page). On-demand scanning is a Business plan feature.

While a scan runs, its status shows as "Scanning…" and the dashboard updates automatically. A typical scan takes a short while to complete; when it's done, the tile fills in with the new score and findings, and a fresh report is ready to view.

What gets checked. Every scan looks at your site's security exposure, performance and loading speed, the technologies it runs, its search-visibility setup, and whether it's online — all explained in the next chapter.

---

5. Understanding your report

The report is where Biz Secure Online turns a scan into something you can act on. It's written to be readable by anyone — each section has a "What does this section mean?" explainer that tells you what it is, why it matters, and how it could affect you. Open any website's latest scan from the dashboard or Domains page to see its report.

Here's what a report contains, top to bottom:

Header. The website address, when the scan ran, how long it took, and a Share Report button (covered in Chapter 6).

Executive summary. A short, plain-language overview of the most important findings, when available.

Site status. Whether your site is up or down, plus how reliably it's been online over time (its uptime percentage).

Security score and risk counts. A score out of 100 that sums up your site's security health, alongside counts of issues by seriousness — Critical, High, Medium, and Low — and the total number of issues found. Critical and High are the ones to tackle first.

Site performance. How quickly your site loads on mobile and desktop, key speed measurements (the things that affect how fast a page feels to a visitor), and the top opportunities to make it faster.

Open ports. "Ports" are the doors into the server that hosts your site. This section lists any that are open to the internet, rates the risk, and suggests what to do — closing unnecessary doors reduces the ways an attacker could get in.

SSL/TLS (your security certificate). This is what puts the padlock in the browser and encrypts traffic to your site. The report shows whether your certificate is valid, who issued it, when it expires, and an overall grade — so an expiring or weak certificate never takes you by surprise.

Detected technologies. The software your site is built with (for example, the platform, frameworks, and plugins). Knowing this helps you understand what needs keeping up to date.

Domain registration (WHOIS). Public registration details for your web address — who it's registered through, key dates, and the technical records that point your address to your site. Useful for spotting an approaching renewal or a misconfiguration.

SEO & visibility. How well your site is set up to be found and correctly displayed by search engines and social media — page titles and descriptions, social sharing previews, and common issues that can hold your visibility back.

WordPress details (if your site uses WordPress). The WordPress version, theme, and a list of plugins, with any known-vulnerable ones flagged — plus a warning if your site is leaking usernames. Keeping WordPress and its plugins updated is one of the most effective things you can do for security.

Web application firewall notice (if detected). A note if your site is sitting behind bot or attack protection.

Security issues. The full list of findings, sorted with the most serious first, each with an explanation.

AI prompts for resolving issues. Ready-to-use prompts you can copy and paste into an AI assistant (such as ChatGPT or Claude) to get step-by-step help fixing a specific finding. A convenient shortcut if you or your web person want guided remediation.

No PDF download — share a link instead. Reports are shared as a secure web link rather than a downloaded file. See Chapter 6.

---

6. Sharing reports and branding them

Sharing a report

Open a report and select Share Report. Biz Secure Online creates a public web link to that report and copies it to your clipboard automatically. Anyone you send the link to can view the report in their browser — no Biz Secure Online account needed. This is handy for sending results to a client, a colleague, or your web developer.

Making reports your own (white-label branding)

If you'd like shared reports to carry your business's name and logo rather than ours, go to Settings → White-label. Here you can:

• Upload your logo (PNG, JPG, SVG, or WebP image, up to 500 KB)
• Enter your business details — name (required), tagline, website, contact email, phone, and address

A live preview shows how your report header will look. Once set, your branding appears on every report you share, so they look like they came straight from your business.

---

7. Plans and billing

Biz Secure Online offers three plans. You can start free with no card, and upgrade whenever you're ready. Prices are shown in your local currency (Australian dollars, British pounds, US dollars, or euros) — the figures below are Australian-dollar examples, and you'll see your own currency in the app and at checkout.

The plans

Free — $0

• 1 website
• Monthly scans
• Site-down monitoring, speed test, and full web reports
• Public report sharing and white-label branding
• Email notifications
• 5 stored reports
• No credit card required

Individuals — $29.99 / month

• 3 websites
• Weekly and monthly scans
• 10 stored reports

Business — $13.99 per website / month (minimum 4 websites)

• Up to 50 websites
• All scan frequencies (daily, weekly, and monthly)
• On-demand scanning (the Scan button)
• 15 stored reports
• Adjust your website count up or down at any time

How pricing works. Your cost is driven by how many websites you monitor and how often they're scanned — not by any "account type." A small site portfolio on weekly checks costs less; a larger portfolio on daily checks is priced higher. "Stored reports" is how many past reports we keep per website before older ones roll off.

Managing your subscription

Go to Settings → Subscription to:

• See your current plan — websites used and allowed, scan frequencies, report retention, and renewal status
• Upgrade to a higher plan (you'll be taken to our secure checkout)
• Downgrade (you'll be asked to confirm)
• Manage billing — opens the secure billing portal where you can update your card, view invoices, or cancel
• On Business, adjust your website count with a simple stepper (4–50); pricing updates live and is prorated

Payments are handled by our payment provider's secure checkout — Biz Secure Online never sees or stores your card details.

---

8. Working as a team

Availability: Team features are available now, on paid plans only (not on the Free plan).

As your needs grow, you can invite other people to help monitor your websites. Biz Secure Online uses two simple roles:

• Owner — that's you, the account holder. The Owner manages companies, websites, billing, branding, and the team. There is exactly one Owner per account.
• Member — someone you invite to help. Members can view the websites and reports for the companies you assign them to, and (on the Business plan) run on-demand scans. Members cannot add or remove websites, change scan frequency, or touch billing — those stay with the Owner. Members also receive scan-complete and site-down/recovery email alerts for the companies they're assigned to, just as the Owner does.

Inviting a member

Go to Settings → Team (visible to the Owner). Then:

1. Enter the person's email address.
2. If you have more than one company, choose which company they should join.
3. Send the invite. They'll receive an email with a link that's valid for 14 days.

If you're on the Free plan, you'll see a prompt to upgrade instead of the invite form — team members are a paid-plan feature.

What your team sees

The member list shows everyone on your account with their role (Owner or Member), their status (Active, Invited, or Expired), and the companies they're assigned to. For each member you can:

• Resend an invitation that hasn't been accepted yet
• Change which companies they can access
• Remove an active member, or cancel a pending invitation

Accepting an invitation

When someone receives an invite, what happens depends on whether they already use Biz Secure Online:

• If they already have an account, they're asked to sign in (if they aren't already) and accept — then they immediately see the company they've been added to.
• If they're new, they go through a short sign-up — just their name and a password (the email is already filled in) — followed by the same quick 2FA setup all accounts use. They don't set up their own company or billing; they simply join yours.

---

9. Troubleshooting and FAQ

My website shows as "DOWN" — what does that mean? Biz Secure Online couldn't reach your site at the last check. You'll also get an email alert. It could be a genuine outage, maintenance, or a temporary network blip. The dashboard's "last 8 checks" dots and the uptime figure help you see whether it's a one-off or ongoing. When the site comes back, you'll get a "back online" email.

What emails will I receive? Biz Secure Online emails you when a site goes down, when it recovers, and when a scheduled scan finishes (with a link to the new report). If you're part of a team, members assigned to a company receive these same alerts for that company's websites. You'll also get standard emails for password resets, team invitations, and two-factor reset requests. Note that the scan-complete email is sent for scheduled scans; an on-demand scan you run yourself won't email you, since you're already watching it.

I've lost my authenticator app / got a new phone — how do I sign in? On the sign-in screen, after entering your password, use the "Lost access to your authenticator?" link. You'll get an email to safely set up a new authenticator. (If you still have access to your old phone and just want to switch devices, you can also re-set your authenticator from Settings → Profile without losing access in between.)

How do I change my password? Go to Settings → Profile, enter your current password and a new one. For your security, changing it signs out your other sessions.

A website is marked "Inactive" — why? It's beyond your current plan's website limit. Upgrade your plan or remove another website to bring it back into active monitoring. Inactive websites aren't scanned, but you can still delete them.

Can I download a report as a PDF? Reports are shared as a secure web link rather than a PDF download. Use Share Report to generate a link you can send to anyone.

Why does a scan take a little while? Each scan runs a thorough series of checks across security, performance, technology, and visibility. The dashboard updates automatically when it's finished, so you can carry on with other things in the meantime.

What is the "Essential Eight / Compliance" feature? It's an upcoming Biz Secure Online capability based on the Australian Cyber Security Centre's Essential Eight security guidance. You'll see a "coming soon" teaser today; we'll announce when it's available.

Who can I contact for help? Use the Help & FAQ links in the menu and footer to reach our support and frequently-asked-questions pages on the Biz Secure Online website.

---

This handbook describes the Biz Secure Online portal. The Essential Eight compliance feature, marked "coming soon," will be available soon; everything else is available today. We keep the product improving, so some details may change — your in-app screens are always the final word.