Need advice?

cyber
Which organisations can provide me with good services?
While we can’t recommend individual companies or organisations, you can find the list of domain name registrars that are accredited by auDA here. These registrars have passed a range of technical and information security benchmarks. If you need to know who is the current registrar for your website domain, you can look up the details on WHOIS. Should you be looking for a cybersecurity provider, then have a scroll around AUCyberscape. It offers a database of registered Australian cybersecurity companies.
Read more >
shield
How do I know what I need to know?
It’s not always easy to know what questions to ask yourself or your providers. .auCheck should help you ask the right things from your domain registrar, hosting provider or managed service provider. When you want to do the same things for your cybersecurity posture, then have a look at the Cybersecurity Assessment Tool developed by the Australian Government Department of Industry, Science, Energy and Resources. It is designed for small and medium businesses, but anyone can use the tool. You could also try Exercise in a Box, a tool offered by the UK National Cyber Security Centre to test your readiness in responding to an incident.
Read more >
book
What can I do myself?
If you have some time to spare and are interested to immerse yourself in some technical settings, then there are a couple of handy guides and toolkits available. The Small Business Cybersecurity Guide from the Australian Cyber Security Centre offers you a couple of practical tips. While written for small and medium businesses, it’s a useful guide for anyone. Another one is the do-it-yourself Cybersecurity Toolkit for Small Businesses offered by the Global Cyber Alliance – an international non-for-profit organisation. The toolkit offers a range of verified third-party free and open source tools to help.
Read more >
book
How have others improved their online posture?
Making changes is never easy and often requires an external trigger. What triggered other organisations before you and what did they do? In this blog, the Guardian newspaper explains quite clearly why it moved to HTTPS. The Australian government Digital Transformation Agency implemented DNSSEC for gov.au domains to meet the Digital Service Standard (read here. And read here how Australian Parliament House was prompted to introduce DMARC to enhance email security.
Read more >
book
What are basic steps of protection I can take?
Besides the many technical solutions, cybersafety starts with our own human behaviour. This The Motherboard Guide to Not Getting Hacked gives you all the basic steps you should follow regardless of whether you own a business website or email account. Another (free) feature is the 1.1.1.1 domain name service that Cloudflare is offering in partnership with APNIC. It can be used on your smartphone devices as well as desktop computers.
Read more >
internetnl thumb

About .auCheck

.auCheck is an open-source tool that allows users to run basic tests to confirm their website and email services follow recommended internet (security) standards. The tool uses basic and publicly available data from website and email domains, and checks against public available records.

Versions of .auCheck

October 2020: beta version of .auCheck!

Dec 2020 - July 2021: demonstrations of .auCheck to stakeholder groups

second half of 2021: expected public launch