Stop running Essential Eight assessments in spreadsheets
Cairn keeps every client's security posture in one place, scores it the way the ASD actually scores it, and turns it into a report with your logo on it.
No card needed. All 304 requirements, in the ASD's own words.
Six things your spreadsheet does not do
Everything an assessment has to do between opening the file and handing the client something they will pay you to act on.
Scored properly
Maturity levels are cumulative and the overall rating is your weakest control, not an average. Cairn applies those rules for you, so a rating is never flattered by averaging.
A plan, not just a score
Every gap becomes a draft action with a priority and an effort estimate, ordered so the quick wins come first. Edit it, assign it, and it goes out on the report — which is the next piece of work you quote for.
Shows the improvement
Assess the same client again and Cairn shows exactly what moved since last time. That side-by-side is the reason a client renews a quarterly review instead of treating it as a one-off job.
Send a link, not an attachment
Share a read-only report by link — no login for the client, expires when you say, revocable the moment you change your mind.
Your brand, not ours
Reports carry your logo, your colour and your footer. The client sees your work, not a tool they could have bought themselves.
Ready for what replaces it
The ASD is retiring the Essential Eight in favour of the Essentials series. Cairn holds frameworks as versioned data, so when the new chapters land your existing client history comes with you.
How it goes
Three steps, and the third one is the one you invoice for.
Add the client
Name, contact, target maturity level. Thirty seconds, and the assessment is waiting with every requirement already in it.
Work through it
One strategy at a time, with evidence attached where it matters. Questions the ASD asks twice are answered once and copied across.
Hand over the report
A PDF with your branding, the maturity rating, the gaps and the remediation plan — or a link that expires when you say.
Hosted in Sydney
The application and every assessment you record run on Australian infrastructure. It is the first question a government-adjacent customer asks. Uploaded evidence files sit with our storage provider, which has no Australian region — the privacy policy says exactly where things live.
One price
Free for a single client, so you can run a real assessment before paying anything.
- Unlimited client businesses
- All 304 Essential Eight requirements
- Branded PDF reports and share links
- Remediation plans and reassessment comparisons
- Your whole team, no per-seat charge
Cancel any time. You keep the month you paid for.
Your next Essential Eight job
Set up a client and work through a real assessment. If it is not faster than your spreadsheet, you have lost an afternoon and nothing else.