Red Bridge CyberRed Bridge Cyber
Customer Login
What We CheckHow It WorksFree CheckPricingResearchAboutBlogCustomer Login
Automated Website Intelligence

Scan.
Report.
Improve.

— Know Before They Do.

Whether customers find you through Google, an AI answer, or an email — we keep watch over how your business looks from the outside, across Email, Speed, Domain, Visibility, and Security — and show you, in plain language, exactly what needs fixing. No jargon. No consultant fees. No surprises.

See What They SeeSee What Is Included
EmailSpeedDomainVisibilitySecurity
scan in progress
RBC-2410-3F
email · spf:pass dkim:pass dmarc:none
email · deliverability score 4.2/10
5 categories · 47 checks● live
100%Automated
No waiting for a consultant
PlainLanguage
Written for business owners, not IT teams
24 hrFirst Cycle
Initial findings live within minutes; every enabled category scanned within 24 hours
RefundGuarantee
Full refund if no High or Critical findings — see Terms
Process

How It Works

Four steps from subscription to a live view in your account. Your portal lights up with findings as each category’s scan completes, then refreshes continuously — with a rolling four-week history and a PDF report you can generate any time.

01STEP

Start Your Subscription

Pick the plan that suits you — Monthly or Annual. During checkout you add your first domain (e.g. yourdomain.com.au) and choose which categories to run on it — Domain is always on; Email, Speed, Visibility, and Security toggle on or off to match what your business actually has. The moment you submit, your scans queue immediately and a welcome email arrives containing a one-time magic link to set up your account. No technical knowledge required.

02STEP

Send Your Test Email

If you enabled the Email category at signup, we generate a unique test address for your account on the spot and show it to you on the post-signup confirmation. Send one email to it from any mailbox on the same domain we are scanning (any address ending in yourdomain.com.au will do) and we capture the headers — the same way a spam filter sees your outbound mail — to feed live deliverability data into the Email category. The test address belongs to your subscription for life; send a fresh email any time you change a DNS or DKIM setting and the next Email scan picks the new headers up automatically.

03STEP

Findings Start to Appear

Click the magic link in your welcome email to set up your account — choose a password (and add MFA if you want it) or link your Google account for sign-in via SSO — then log in. Your first scan results are already waiting — Domain, Speed, and Email (if you sent the test email) typically have findings on screen the moment you arrive; Visibility and Security fill in across their first daily cycles. Every finding is documented, explained in plain language, and prioritised by severity, so you can see what to act on first without having to interpret raw scanner output yourself.

04STEP

Continuous Monitoring

Our systems regularly re-check the status of each category, and the latest finding is always visible to you alongside the date and time it was recorded. We keep a rolling four-week (28-day) history of every scan, so you can see what has improved and what has slipped over time. Whenever you need a written record, generate a PDF report from your account — we email it to you once it is produced (usually a few minutes), ready to share with your developer, host, or IT provider, or to keep on file.

See it in action

Watch a real scan, end to end

Two walkthroughs of live Red Bridge Cyber scans — one polished and one typical small-business site — each with a sample PDF report you can download. The fastest way to see exactly what you get.

See the Examples
Coverage

What We Check

Five plain-language categories — live in your account, with a PDF report you can generate any time. Findings are explained in plain language and prioritised by severity so you know exactly what to fix first.

CATEGORY 01

Email

Everything to do with whether your business emails are being sent and received correctly — including authentication records, live header analysis of a real email from your account, spam filter scoring, and inbox deliverability.

CATEGORY 02

Speed

How quickly your website responds and renders. Page load time, server response time, image handling, and the underlying signals that determine whether visitors stay or leave.

CATEGORY 03

Domain

Domain configuration, DNS propagation, domain-level record health, and the configuration issues that quietly break trust or stop email from delivering correctly.

CATEGORY 04

Visibility

How findable your website is to search engines and the new generation of AI search tools — ChatGPT, Perplexity, Google AI Overviews, Microsoft Copilot. Crawlability, indexing, sitemap, structured data, knowledge graph presence, and content authority signals.

CATEGORY 05

Security

The protections that sit between your website and the people probing it. SSL certificate trust and expiry, security headers, common misconfiguration patterns, publicly exposed sensitive paths, and the early indicators an attacker would look for before you do.

Red Bridge Cyber · PDF report
RBC-2410-3F
domainyourdomain.com.au
scanned17 May 2026
1CRIT2HIGH2MED1LOW19PASS
CRITICAL

Security: SSL certificate expires in 9 days — immediate renewal required.

HIGH

Email: DMARC record not configured — your domain can be spoofed.

HIGH

Security: Content-Security-Policy header not present on any page.

MEDIUM

Visibility: No structured data found — AI search tools cannot read your content.

MEDIUM

Email: Test email scored 4.2/10 for deliverability — likely landing in spam.

LOW

Speed: Largest image is 3.4 MB — slow on mobile connections.

PASS

19 additional checks passed — no action required.

page 1 / 14 · PDFgenerated by Red Bridge Cyber

Sample illustration only. Your view shows real findings against your actual domains.

The Stakes

Your Public Presence Is Already Speaking.
Do You Know What It Is Saying?

Every business has a public face — the website people land on, the emails that hit their inbox, the search results that surface your name, the AI answers that decide whether you’re worth citing, and the domain, DNS, certificate, and security signals everyone else picks up automatically. Search engines use it to rank you. AI search tools — ChatGPT, Perplexity, Google AI Overviews, Microsoft Copilot — use it to cite you or skip you. Spam filters use it to decide whether your emails reach the inbox. Attackers use it to find a way in. This footprint exists whether you maintain it or not.

The question is whether you see what they see before it costs you. A misconfigured DNS record silently breaks email delivery. An expiring SSL certificate triggers browser warnings for every visitor. Missing structured data means AI tools cite a competitor instead of you. An unindexed page means a search you should have won goes somewhere else. Emails landing in spam mean missed enquiries and lost sales. None of these issues announce themselves — they just quietly cost you customers, ranking, and trust.

testing ...
yourdomain.com.au
public signals only · no login required● outside view
43%
of cyber attacks target small businesses specifically
Verizon Data Breach Investigations Report, 2019
$120K+
average cost of a small business data breach
IBM Cost of a Data Breach Report, 2024
60%
of small businesses close within 6 months of a cyber attack
National Cyber Security Alliance (NCSA)
17%
of legitimate business emails never reach the recipient’s inbox
Validity, 2025 Email Deliverability Benchmark Report
54%
of Google search clicks go to the top 3 results
Backlinko, 4-million-result organic CTR study, 2024
47%
drop in click-throughs to underlying sites when Google shows an AI Overview
Pew Research Center, AI Overviews click study, 2025
Pricing

Simple, Transparent Pricing

Monthly

Easiest to start, easiest to stop.
$100 / month

Month-to-month — pay as you go, cancel anytime, no contract.

  • Live view in your account — see the latest scan of every domain anytime
  • On-demand PDF reports + a rolling 4-week scan history
  • Cancel anytime — no lock-in
  • Feature request voting
  • Up to 4 domains — up to 4 subdomains or hosts each (20 scans)
Start Monthly Subscription
Most Popular

Annual

Save $200/year vs paying monthly (17% off)
$1,000 / year

A full year prepaid at a discounted rate. Same coverage as Monthly across all five categories.

  • Live view in your account — see the latest scan of every domain anytime
  • On-demand PDF reports + a rolling 4-week scan history
  • Cancel anytime — no lock-in
  • Feature request voting
  • Up to 4 domains — up to 4 subdomains or hosts each (20 scans)
Get the Annual Plan
MSPs, agencies & larger businesses

Custom Engagement

Running an MSP or agency, managing security and SEO posture across many client sites, or a larger business with a complex environment? Anything beyond the standard Monthly and Annual plans — more domains, custom GEO/SEO strategy, branded or white-labelled reports, or direct programmatic API access into your own platform — we handle as a scoped engagement, quoted individually and never priced from a card.

  • Custom GEO/SEO strategy — competitive landscape, AI-citation positioning, content roadmap
  • Industry-specific, custom or non-standard checks, or proprietary application checks
  • Custom PDF report formats, delivery pipelines, or special training / onboarding needs
  • Direct programmatic API access, or full white-label integration into your own platform
  • Working with your IT team / provider to plan and implement fixes to issues identified during our scans
  • Agencies and MSPs monitoring many client sites, or any business needing more than four domains
Contact Us About a Custom Engagement

All listed prices in AUD including GST. No setup fees. Please see Terms of Service for details.

Improve · The Blog

From Improve

Practical guides across Email, Speed, Domain, Visibility, and Security for Australian business owners. The latest from our blog.

Security

The Essential Eight Is Being Retired: What ASD’s New “Essentials” Means for Small Business

ASD will retire the Essential Eight within two years and replace it with the “Essentials” series. What the change means for Australian small business — and why the basics still matter.

2026-06-29Read ↗
Security

ASD Is Retiring the Essential Eight. Don’t Wait Two Years to Fix the Basics.

ASD is retiring the Essential Eight, quietly admitting it was built for a world we have left. A founder’s take: do not wait for the replacement — and do not assume it fits small business.

2026-07-02Read ↗
Visibility

Small business SEO in Australia: a plain-English checklist

A no-jargon SEO checklist for Australian small business owners. What to check yourself, what to ask your developer, and what to ignore from SEO agencies pitching you.

2026-06-10Read ↗
View All Articles on Improve ↗
Help

Common Questions

Answers to common questions Australian business owners ask about what we scan, how it works, and what you get.

Absolutely. We do not check that the domains you add are ones you own — and that is deliberate. It is one of the reasons even our smallest plan covers up to four domains: watching how a competitor performs across Email, Speed, Domain, Visibility, and Security is one of the most practical ways to set realistic targets for your own business. If a competitor is loading faster, ranking better, or being cited by AI tools while you are not, that is useful information.

  • Email — read their public email-authentication posture (SPF, DKIM discoverability, DMARC policy, MX routing, BIMI, MTA-STS, DNSSEC) the same way a receiving mail server would. See the note below for the one piece we cannot do without a test email from the domain itself.
  • Speed — compare Core Web Vitals and load timings side-by-side.
  • Domain — see how their DNS, certificate, and configuration posture stack up against yours.
  • Visibility — look at their crawlability, structured data, and AI-search presence.
  • Security — observe their public security headers and the early indicators an attacker would also see.

Note: the Email category combines two passes — a public-DNS pass that runs on any domain (you get this for competitors) and a live header-analysis pass that needs a real email sent from that domain to our unique test address. Competitors are unlikely to send you one to help you out-perform them, so the live header pass will sit at Not Applicable for their domain. Everything else in Email — and everything in Speed, Domain, Visibility, and Security — runs at 100%.

Yes, on application. The default product is self-service scanning and live-view delivery, but we do offer Custom Engagements for customers whose needs sit outside the standard plans:

  • Custom GEO/SEO strategy.
  • More than four domains.
  • Custom PDF report formats.
  • Scoped advisory tied to scan findings.
  • Industry-specific or proprietary-application checks.
  • Direct programmatic API access or white-label integration.

Every Custom Engagement is quoted individually after a conversation about your specific needs.

Contact Us About a Custom Engagement
No. We only use methods that are openly available from the Internet. We look at the same public signals a search engine, scanner, or basic reconnaissance tool can see. If we find an issue that could be used to gain access to your site, we do not try to use it to access your data. That line matters. But if we can see the weakness from the outside, other people probably can too.
No. The product works for any website. We focus on Australian small businesses because that is who we know best, and pricing is in AUD. Some email-deliverability context is tuned for Australian business mail patterns. If you are outside Australia, the scan still works.
Immediately. The moment you submit your subscription, scans queue for the categories you enabled and a welcome email arrives containing a one-time magic link to set up your account. Click the magic link, set a password (and add MFA if you want it) or link your Google account for sign-in via SSO, then log in — your portal is already populating, with Domain, Email (if you sent the test email), and the first Speed reading typically on screen within minutes; Visibility and Security fill in across their first daily cycles. There is no queue and no overnight batch. If something looks off or your account has not lit up the way it should, contact us — something has gone wrong and we need to know.
We write it down clearly and give it the priority it deserves. Serious findings are not buried in technical language or hidden in a long appendix. Each finding explains what we found, why it matters, and what needs to happen next. If it is something your web developer, host, DNS provider, or IT support needs to fix, they should be able to read the finding and understand the job in front of them.

The scan starts the moment you submit your subscription — Domain, Speed, Visibility, and Security all queue immediately for the categories you enabled at signup. The test email is the input that powers the live header analysis inside the Email category — it is not what starts the scan. Three short steps:

  • During checkout you tick the Email category and we generate a unique test address for your account on the spot.
  • You send one normal email to that address from any mailbox on the same domain we are scanning (any address ending in yourdomain.com.au will do).
  • We capture the headers — the routing, authentication, and server-handling metadata a normal email reader hides — and use them to verify message characteristics and identify deliverability issues alongside SPF, DKIM, DMARC, and the rest of the Email category.

Results from a test email are typically in your live view within minutes of the message arriving (processing time is load-dependent). Your test address belongs to your subscription for life — send a fresh email any time you change a DNS, SPF, DKIM, or DMARC setting and the next Email-category scan picks the new headers up automatically. To protect our infrastructure we process at most one test email per customer-domain combination per hour — you can send as many as you like, but only the first one in any hour is acted on. If your business does not send email from its own domain, leave the Email category off at signup (or turn it off later from your account) and the other categories still run normally.

Your public-facing services change all the time:

  • DNS records get edited.
  • Certificates expire.
  • Plugins update.
  • Search engines re-index.
  • AI tools update what they cite.

A clean scan today does not mean nothing changes next month. We keep your data up to date continuously, so the live view in your account always reflects the latest state — log in any time and see where things stand. We retain a rolling four-week (28-day) history of every scan, so you can see corrections and regressions over time, and you can generate a PDF report of the live view any time you want a written record — we email it to you once it is produced. The Monthly plan is month-to-month with no contract, so you can step away anytime.

No. That is the point. Each finding explains what we found, why it matters, and what needs to happen next. The report does carry some technical detail — the underlying issues are technical, and pretending otherwise would shortchange you — but every finding is paired with plain-English guidance, so you can grasp the basics and make a sensible decision about the way forward for your business. If you have a developer or IT provider, send them the PDF report. They will have enough detail to act without needing three meetings to decode it. If something in the report does not make sense, the support tools in your customer area let you ask for further guidance. Our normal approach is to write up the answer as a public article on our site so you — and anyone else asking the same question — have a common reference point.

Up to five areas that affect whether customers can find you, trust you, and contact you. Domain always runs; the other four are toggled on or off per domain at signup so you only pay attention to what your business actually has.

  • Domain — whether the basic records behind your website are healthy (always on).
  • Email — whether messages from your business are likely to arrive or disappear into spam.
  • Speed — whether your site feels slow.
  • Visibility — whether search engines and AI tools can understand your business.
  • Security — common public-facing mistakes that should not be left sitting there.

You can change which categories are active on a domain from your account at any time.

Not as the term is normally used — we do not map your entire attack surface, attempt internal access, or chain exploits to demonstrate a breach. What we do offer, as a Custom Engagement, is a deeper, more invasive web scan than the standard service. This includes things like sustained contact-form submission to test rate-limiting and spoofing resistance, parameter-injection testing on public endpoints, and other techniques that may temporarily affect your services. Because of that impact, the deeper scan requires a signed customer agreement and liability waiver, is scheduled with you in advance, and is not bookable from the standard checkout. If you need full penetration testing of your entire estate (internal + external), that is outside our scope and we can introduce you to a qualified provider.
If your initial scan results have no High or Critical findings AND your Visibility category scores 60/100 or above, you can ask for a full refund of the first billing period. The guarantee exists because the first scan should find something worth fixing — and a failing Visibility score is itself a Critical-equivalent finding, even when nothing else is flagged. Your Australian Consumer Law rights still apply. The full conditions are in the Terms of Service.
Yes. Every subscriber gets access to the product roadmap, can suggest new features, and can vote on what matters. We use that signal when deciding what to build next.

Yes. Each domain on your plan also covers up to 4 subdomains or hosts — so you can watch more than just the main website behind a domain:

  • Your website (e.g. yourdomain.com.au).
  • Your mail server or sending host.
  • A separate app, shop, or portal subdomain (e.g. app.yourdomain.com.au).

That means the Monthly and Annual plans cover up to 4 domains with 4 hosts each — up to 20 scans. Need more? A Custom Engagement scopes it — for agencies, MSPs, and larger businesses monitoring more domains.

Yes — as a Custom Engagement. The standard Monthly and Annual plans cover up to 4 domains each; anyone managing more than one public-facing surface (digital agencies, MSPs, consultants, web developers, and larger businesses with complex environments) is scoped individually. A Custom Engagement can include:

  • More domains under a single account — each covering up to 4 subdomains or hosts.
  • On-demand PDF reports branded with your logo and colours.
  • A structured JSON export of all findings, so the data flows into your own reporting tools.
  • Direct programmatic API access or white-label integration into your own platform.

Every Custom Engagement is quoted individually after a conversation about your specific needs.

Contact Us About a Custom Engagement
No — we do not perform compliance assessments against the ASD Essential Eight, ISO 27001, NIST CSF, SMB1001, or the ISM. Each of those frameworks needs internal access (configuration, logs, policy documents, interviews with staff), and Red Bridge Cyber is by design a public-facing-only service. That said, our findings can be useful inputs into compliance work: the Email, Domain, Visibility, and Security findings cover the externally visible portion of several control areas across those frameworks, and security auditors can use that data to guide their recommendations. We also partner with organisations that do framework-aligned assessments — get in touch and we will introduce you.
Because people are already asking AI tools questions they used to ask Google. That is not hype. It is just a change in where answers are being found. Traditional SEO still matters, but so do structured data, crawlability, authority signals, and whether AI tools can understand what your business actually does.

Ready to See What We Find?

Most first scans turn up at least one finding that surprises the business owner. Some turn up several. A subscription pays for itself the first time it catches something before it becomes a real problem.

See What They See