SMB1001 · APP 11 · Australia

Stronger human security for your SMB1001 journey.

Train employees, test phishing resilience and spot exposed staff passwords with automated cybersecurity tools for Australian businesses.

Start your free 14-day trial

Explore our core security tools. Set up in minutes.

No credit card
14 days free
Cancel anytime

Trusted by 2,200+ MSPs and 16,000+ organisations

Why now

New privacy obligations. Real-world human risks.

Since 1 July 2026, Australia's AML/CTF Tranche 2 reforms have brought reporting entities within the scope of the Privacy Act for personal information handled for AML/CTF purposes. APP 11 requires reasonable steps to protect that information, and new identity checks mean more sensitive customer data to protect. SMB1001 offers a voluntary path from Bronze to Diamond, with security awareness training required from Bronze.

Understand what APP 11 means →

Where the human risks appear

Compromised mailboxes

Stolen logins used to send convincing emails from inside the business.

Fake payment instructions

Spoofed invoices and bank-detail changes that look routine.

Impersonation calls

Callers posing as colleagues, suppliers or IT to gain access.

Exposed credentials

Staff passwords already circulating from third-party breaches.

How usecure helps

Practical tools to strengthen human security.

Three ways usecure helps you build safer habits, tighten everyday security and see where human risk sits.

uLearn showing 97% of courses started and 85% completed
uLearn + uPhish

Build safer habits

Automated training and phishing tests that help staff spot and report attacks.

uBreach showing breaches with exposed staff passwords, with a uPolicy card showing 82% of policies viewed
uPolicy + uBreach

Strengthen everyday security

Alerts when staff passwords appear in breaches, plus tracked policy sign-off.

uHealth top priority tasks ranked by severity
uHealth

Understand human risk

See combined risk signals and know which actions to take first.

Available on paid plans
When risks combine

Minor alone. Critical together.

uHealth shows when everyday weaknesses combine into real exposure, so you know who to focus on first.

Illustrative example. Jordan and Priya each have a gap or two. Michael's add up, so he's first on the list.
How it works

Start your trial in three steps.

Security awareness training is required from Bronze, making it a practical place to start your SMB1001 journey.

1

Connect your environment

Connect Microsoft 365 or Google Workspace to sync your employees.

2

Launch training and phishing

Assign security awareness courses and run your first phishing simulation.

3

Track progress you can show

See course completion and phishing results over time, with reports you can share as you work toward your SMB1001 goals.

Your trial includes core platform features. uHealth and uBreach Pro aren't included, and uBreach is limited to one domain.
Proven results

Results you can show.

Australian organisations use usecure to build safer habits, with results they can measure.

72%
Reduction in phishing compromise rate

From 7.6% to 2.1% in six months

1 day
Average course completion time

From the customer story

Employees quickly became adept at spotting and reporting even the sneakiest phishing emails.

Customer contact

Nick Moad, CIO at Heffron
Nick Moad
CIO, Heffron SMSF

Financial services · Australia

Read the customer story →

What customers say

Trusted by teams like yours.

Penleigh and Essendon Grammar School (PEGS)

★★★★★

“The selection of courses and phishing templates, customisation options, and automation features helped us address our unique needs. The platform’s reporting capabilities allowed us to measure risk at a glance.”

Shannon O'Brien

Shannon O'Brien

Director of ICT

Penleigh and Essendon Grammar School (PEGS)

HumanKind

★★★★★

“The selection of courses and phishing templates available was a key benefit. The automation features saved us a lot of time, and being able to understand our company’s human risk at a glance has been invaluable.”

Don Schimming

Don Schimming

IT Manager

HumanKind

Mentor Group

★★★★★

“Our ISO auditor labelled usecure as the ‘best and most comprehensive’ human risk management solution they’d seen.”

James Barton

James Barton

Chief Solutions Officer

Mentor Group

Security you can verify

ISO/IEC 27001 certified

SOC 2 Type II attested

G2 Summer 2025 Momentum Leader Medal
G2 Milestone Users Love Us MedalG2 Summer 2025 EMEA Regional Leader MedalG2 Spring 2025 Easiest Setup MedalG2 Summer 2025 Grid Leader Medal
Built for both

For businesses and the MSPs that support them.

Australian businesses

Put the human side of SMB1001 and APP 11 into practice, without adding headcount.

Train every employee automatically.
Test and track phishing resilience.
Show progress with clear reporting.
Start your free 14-day trial

MSPs

Your clients remain responsible for protecting their data, even when IT is outsourced.

Manage every client from one platform.
Track human risk and report on trends.
Add recurring security revenue.
Claim your free NFR licenceOr talk to our team →

Questions, answered

Does usecure certify my business for SMB1001?

No. usecure doesn't provide SMB1001 certification and can't guarantee it. We support selected cybersecurity practices, such as security awareness training, phishing simulations and policy management, that can help you on your SMB1001 journey.

Does the Privacy Act now apply to my business?

It depends. The Privacy Act already applies to businesses with annual turnover over $3 million and to some smaller businesses. Since 1 July 2026, AML/CTF Tranche 2 reporting entities must also follow it for personal information they handle for AML/CTF purposes, even if they’d otherwise be exempt as a small business. APP 11 then requires reasonable steps to protect that information.

Read our APP 11 guide →

Does usecure make us compliant with APP 11?

No. No single tool can make a business compliant with APP 11. usecure supports practices such as security awareness training, phishing simulations and policy sign-off, which can form part of the reasonable steps you take to protect personal information. Reporting can help demonstrate progress, but compliance depends on your wider privacy and security practices.

Can I manage multiple clients as an MSP?

Yes. MSPs can deliver training, phishing simulations and policy management across clients from one platform, and report on human risk trends for each client.

How long does setup take?

Most teams are set up in minutes. Once your account is ready, connect Microsoft 365 or Google Workspace to add your employees, then select your training and phishing campaigns.

What's included in the 14-day trial?

The trial gives you access to usecure's core security awareness training, phishing simulation, policy management and breach monitoring features. Breach monitoring is limited to one domain, and some content and automation features may be restricted. uBreach Pro and uHealth aren't included. Want to see uHealth in action?

Book a demo →

What happens after the 14-day trial?

When your trial ends, you can choose a plan to keep going or simply let it lapse. No credit card is needed to start.

Ready to strengthen human security?

Protect your own business or help clients through SMB1001, with automated training, phishing simulations and credential exposure checks.

14 days free · No credit card required · Set up in minutes