Train employees, test phishing resilience and spot exposed staff passwords with automated cybersecurity tools for Australian businesses.
Explore our core security tools. Set up in minutes.
Trusted by 2,200+ MSPs and 16,000+ organisations






























Since 1 July 2026, Australia's AML/CTF Tranche 2 reforms have brought reporting entities within the scope of the Privacy Act for personal information handled for AML/CTF purposes. APP 11 requires reasonable steps to protect that information, and new identity checks mean more sensitive customer data to protect. SMB1001 offers a voluntary path from Bronze to Diamond, with security awareness training required from Bronze.
Understand what APP 11 means →Stolen logins used to send convincing emails from inside the business.
Spoofed invoices and bank-detail changes that look routine.
Callers posing as colleagues, suppliers or IT to gain access.
Staff passwords already circulating from third-party breaches.
Three ways usecure helps you build safer habits, tighten everyday security and see where human risk sits.

Automated training and phishing tests that help staff spot and report attacks.

Alerts when staff passwords appear in breaches, plus tracked policy sign-off.

See combined risk signals and know which actions to take first.
uHealth shows when everyday weaknesses combine into real exposure, so you know who to focus on first.
Security awareness training is required from Bronze, making it a practical place to start your SMB1001 journey.
Connect Microsoft 365 or Google Workspace to sync your employees.
Assign security awareness courses and run your first phishing simulation.
See course completion and phishing results over time, with reports you can share as you work toward your SMB1001 goals.
Australian organisations use usecure to build safer habits, with results they can measure.
From the customer story
Employees quickly became adept at spotting and reporting even the sneakiest phishing emails.
Customer contact
What customers say
Security you can verify
ISO/IEC 27001 certified
SOC 2 Type II attested





Put the human side of SMB1001 and APP 11 into practice, without adding headcount.
Your clients remain responsible for protecting their data, even when IT is outsourced.
No. usecure doesn't provide SMB1001 certification and can't guarantee it. We support selected cybersecurity practices, such as security awareness training, phishing simulations and policy management, that can help you on your SMB1001 journey.
It depends. The Privacy Act already applies to businesses with annual turnover over $3 million and to some smaller businesses. Since 1 July 2026, AML/CTF Tranche 2 reporting entities must also follow it for personal information they handle for AML/CTF purposes, even if they’d otherwise be exempt as a small business. APP 11 then requires reasonable steps to protect that information.
Read our APP 11 guide →No. No single tool can make a business compliant with APP 11. usecure supports practices such as security awareness training, phishing simulations and policy sign-off, which can form part of the reasonable steps you take to protect personal information. Reporting can help demonstrate progress, but compliance depends on your wider privacy and security practices.
Yes. MSPs can deliver training, phishing simulations and policy management across clients from one platform, and report on human risk trends for each client.
Most teams are set up in minutes. Once your account is ready, connect Microsoft 365 or Google Workspace to add your employees, then select your training and phishing campaigns.
The trial gives you access to usecure's core security awareness training, phishing simulation, policy management and breach monitoring features. Breach monitoring is limited to one domain, and some content and automation features may be restricted. uBreach Pro and uHealth aren't included. Want to see uHealth in action?
Book a demo →When your trial ends, you can choose a plan to keep going or simply let it lapse. No credit card is needed to start.
Protect your own business or help clients through SMB1001, with automated training, phishing simulations and credential exposure checks.