Eito started with a frustration that anyone who's worked in Australian cybersecurity will recognise.
The Essential Eight is genuinely good advice. It's practical, it's well-researched, and it covers the threats that actually hit Australian businesses. But try explaining it to a small business owner who's never heard of it, and you'll hit a wall.
The Problem
The official ACSC documentation is written for security professionals. It's thorough, but it's dense. A business owner who Googles "Essential Eight" lands on a page full of technical jargon and cross-references to the Information Security Manual. Most close the tab within 30 seconds.
Many businesses work with a consultant for a formal Essential Eight assessment, and those assessments provide real expertise and independent verification. But for a 10-person business just trying to understand where to start, a self-assessment is a practical first step that helps you know what questions to ask.
And then there's the spreadsheet. Every IT provider seems to have their own homebrew Essential Eight checklist in Excel. They're usually out of date, inconsistently scored, and impossible for anyone without a security background to understand.
Understanding your security gaps should be accessible to everyone. That understanding then opens the door to getting the right professional help.
What I Set Out to Build
I wanted something that didn't exist: a tool that makes the Essential Eight accessible to the people who need it most (small business owners, office managers, IT coordinators) without requiring them to become security experts first.
I set a simple test: if a non-technical business owner with no IT background can understand the question, answer honestly, and know what to do next, the tool is doing its job. If they can't, the question gets rewritten.
Privacy as a Principle
Here's the irony of most cybersecurity tools: they ask you to hand over sensitive information about your security posture to a cloud service you know nothing about. Your gaps, your vulnerabilities, your maturity scores, sitting on someone else's server.
I decided from day one that Eito would be different. Your data never leaves your browser. There's no account, no login, no server-side processing. Everything runs locally. I can't see your answers because they never reach me. It's not just a privacy policy. It's an architectural decision.
Genuinely Free
Eito is free. Not "free trial" free. Not "free with limitations" free. Every feature, every maturity level, every report. Free for every Australian business.
I believe that understanding where your security gaps are should be accessible to every business. Fixing those gaps is where IT providers, MSPs, and security professionals add genuine value. Eito helps businesses understand the problem so they can have more productive conversations with the professionals who help them solve it.
What Eito Is, and Isn't
I'm honest about what Eito is. It's a learning tool. A gap finder. A conversation starter. It helps you understand the Essential Eight, see where you're exposed, and know what to ask your IT provider.
It's not a certification. It's not evidence for insurers. It's not a replacement for qualified assessors when complex environments are involved. I say this clearly and often, because trust is built on honesty, not on overselling.
Built in Australia, for Australia
Eito isn't a US product localised for the Australian market. It's built from the ground up for Australian businesses, aligned with Australian regulations, referencing Australian standards, and written in language that Australian people actually use.
Eito references the Privacy Act, the Notifiable Data Breaches scheme, the DISP requirements, and the ACSC's own guidance, because that's what matters to Australian organisations. Context matters, and local context matters most.
What's Next
Eito is a community project, and it keeps getting better. The assessment experience is continually improving, the guidance is expanding, and feedback from Australian businesses shapes what comes next.
If you haven't tried it yet, take 5 minutes to run a Quick Check. And if you have feedback (good or bad) I'd love to hear it at hello@eito.com.au.