Chat with us, powered by LiveChat

Plan Calculator

Fortress

Best for: Small to medium businesses that want reliable IT and strong cyber protection without the complexity. You don’t have specific compliance mandates — you just want to know you’re properly looked after.

300 / 500

Otaris Raven CyberSecurity, Business Continuity and Disaster Recovery Score

$695

total per month includes 5 users

$139 per additional user, per month
Includes
  • Local Australian Support Team
    When you call for help, you speak to a real person sitting in our Adelaide office — not an overseas call centre, not an automated menu, and not a chatbot.

    Our support team already knows your business, your systems, and your people. They can see your environment, understand your setup, and start solving the problem the moment you call.

    Because we’re local, we work in the same timezone, understand Australian business regulations, and can even come to your office when needed. You’ll never be passed around between departments or left waiting on hold wondering if anyone actually understood what you asked for.
  • Government-Grade Cyber Protection [Essential 8 M1]
    The Australian Signals Directorate (ASD) — the same government agency responsible for protecting Australia’s national security — developed the Essential Eight framework as the baseline cybersecurity standard every organisation should follow.

    It covers eight critical areas: controlling which applications can run, keeping software updated, restricting administrative access, using multi-factor authentication, and more.

    Under the Fortress plan, we implement and manage all eight strategies at Maturity Level 1, which protects your business against the most common, opportunistic cyber attacks.

    You don’t need to understand what any of this means — we handle every aspect of compliance and monitoring. You simply get the peace of mind that your cybersecurity meets the standard the Australian Government trusts.
  • Microsoft 365 Business Premium license
    Every person on your team gets the complete Microsoft 365 Business Premium suite, which includes Outlook for professional email, Word for documents, Excel for spreadsheets, PowerPoint for presentations, Teams for video conferencing, chat, and collaboration, and OneDrive for secure cloud file storage.

    This isn’t the basic free version — it’s the full business-grade platform with desktop applications, mobile apps, and web access.

    We handle the entire setup: configuring accounts, setting security policies, managing licences, and providing ongoing support. Microsoft 365 is the productivity backbone of your business, and because the licence is included in your plan, you don’t need to purchase, manage, or renew it separately.

    One plan, everything included, fully supported.
  • Unlimited Emergency IT Help
    Technology problems don’t come on a schedule, and they shouldn’t come with a bill every time they happen.

    With unlimited incident support, your team can call our service desk as many times as they need without worrying about hourly charges, ticket fees, or support caps. Whether it’s a laptop that won’t turn on, an email that’s not sending, a printer that’s stopped working, or a full system outage, our Adelaide-based team responds immediately.

    We prioritise issues based on business impact — if something is stopping your team from working, it goes to the top of the queue. Many IT providers charge per incident or limit the number of support calls you can make each month. We don’t. Your plan covers everything, so you’ll never hesitate to pick up the phone when you need help.
  • Unlimited IT Requests
    Service requests cover everything that isn’t an emergency — the everyday IT tasks that keep your business running smoothly.

    Need to set up a new employee with email, a laptop, and access to your systems? That’s a service request. Want software installed on a computer, a shared drive created for a project, or a user’s permissions changed? Service request. Need help configuring a new printer, setting up a meeting room display, or moving files to a new location? All covered.

    Many IT providers either charge separately for these tasks or limit you to a fixed number per month, which means your team either pays more or puts off the work they need done.

    With Otaris, there’s no cap. Your team submits requests through our portal or calls our service desk, and we handle them promptly. It’s like having a full IT department on call, without the salary costs.
  • Your Own Account Manager
    Unlike most IT providers where you deal with whoever happens to answer the phone, Otaris assigns you a dedicated Account Manager who becomes your trusted technology advisor. They take the time to understand your business — your industry, your team, your goals, and your pain points.

    They’re not reactive; they’re proactive. Your Account Manager conducts regular reviews of your IT environment, identifies potential issues before they become problems, and recommends improvements that make sense for your specific situation. They’ll sit down with you quarterly (or more often if needed) to discuss your technology roadmap — what’s working, what could be better, and what’s coming next.

    When you have a question about anything technology-related, they’re your first call. They know your systems, they know your history, and they can get things done without you having to explain everything from scratch. It’s the difference between having a vendor and having a genuine technology partner.
  • Professional Business Email
    First impressions matter. When you email a client from sarah@yourbusiness.com.au instead of yourbusiness2019@gmail.com, it immediately signals professionalism and legitimacy.

    Every person on your team gets their own branded business email address, fully hosted on Microsoft’s enterprise-grade Exchange platform. We handle the entire setup — configuring your domain, creating mailboxes, setting up email signatures, and ensuring your emails reliably reach their destination without being caught in spam filters.

    Your email is protected by multiple layers of security including encryption in transit, anti-spam filtering, and malware scanning. If a team member leaves, we can transfer their emails to another person, set up forwarding, or archive them — so you never lose important business correspondence.

    And because it’s all managed by us, you don’t need to worry about DNS records, MX settings, or any of the technical plumbing that makes email work.
  • 50GB Email Storage Per Person
    Running out of email storage is more than an inconvenience — it can mean missed messages from clients, lost attachments, and hours wasted trying to figure out what to delete.

    With 50GB of storage per person, that problem disappears. To put it in perspective, 50GB can hold approximately 50,000 emails with attachments, or years’ worth of normal business email. Your team can keep their full email history available and searchable without ever needing to archive or delete messages to free up space.

    This is Microsoft’s Exchange Online platform — the same enterprise email system used by large corporations — which means lightning-fast search, shared calendars, contact management, and seamless integration with Outlook on every device.

    We monitor storage usage across your organisation and will proactively let you know if anyone is approaching their limit, though in practice, most users never come close.
  • Full Office Apps on Every Computer
    There’s a big difference between the free web-based versions of Office and the full desktop applications. The desktop versions of Word, Excel, PowerPoint, and Outlook give your team the complete set of features — advanced formatting, complex spreadsheet formulas, professional presentation tools, and full Outlook email management with offline access.

    Every person on your plan gets these applications installed on their computer (and they can install on up to five personal devices too). The applications work offline, so your team can write documents, update spreadsheets, and review emails even without an internet connection — everything syncs automatically when they reconnect.

    We manage the entire lifecycle: installation, configuration, updates, and troubleshooting. When Microsoft releases new features or security patches, they’re applied automatically. You never need to buy a separate Office licence, and there’s no annual renewal to remember. It’s all part of your plan.
  • Work From Anywhere Apps
    Modern businesses don’t just work from the office. Whether your team is visiting a client, working from home, travelling, or simply checking something on their phone during lunch, they need access to their work.

    The web and mobile versions of Word, Excel, PowerPoint, and Outlook let your team access everything from any device with a browser or through dedicated mobile apps on iPhone, iPad, and Android. Emails are synced in real time.

    Documents saved to the cloud are accessible from anywhere. Calendar appointments, contacts, and Teams messages are always available. If someone starts editing a spreadsheet on their desktop computer and needs to leave for a meeting, they can continue editing on their tablet without missing a beat.

    All of this is secured by the same enterprise-grade protection that covers their desktop applications — including the ability for us to remotely wipe company data from a personal device if it’s lost or stolen, without affecting their personal photos or apps.
  • Team Chat, Calls & Video Meetings
    Microsoft Teams is included in your plan and it’s a complete communication platform that can transform how your team works together. Instant messaging lets your team ask quick questions without sending formal emails.

    Voice calling means you can make and receive calls directly from your computer or phone app — potentially replacing your traditional phone system entirely. HD video conferencing supports meetings with up to 300 people, with screen sharing, virtual backgrounds, live captions, and meeting recording.

    But Teams goes beyond just communication. Your team can collaborate on documents in real time during a meeting, share files in dedicated team channels, and keep project conversations organised by topic rather than buried in endless email chains.

    For businesses with multiple locations or remote workers, Teams becomes the virtual office that keeps everyone connected. We set up your Teams environment, configure the channels, and train your team on how to get the most out of it — because the tool is only valuable if people actually use it effectively.
  • 1TB Cloud Storage Per Person
    Every person on your team gets 1TB (one terabyte) of personal cloud storage through Microsoft OneDrive. To put that in perspective, 1TB can hold approximately 500,000 documents, 250,000 photos, or a combination of files that most people would never exhaust in their entire career.

    Files saved to OneDrive are automatically synced across all their devices — save something on your desktop and it appears on your laptop and phone instantly. It also means your files are protected: if a computer is lost, stolen, or damaged, every file is safely stored in the cloud and accessible from any replacement device within minutes.

    OneDrive integrates seamlessly with all your Microsoft 365 apps. Share a file with a colleague by sending a link instead of emailing large attachments. Collaborate on the same document simultaneously without creating confusing version conflicts.

    Set permissions so external clients can view files without being able to edit or download them. We configure OneDrive for your team, set sharing policies that align with your security requirements, and include it in your backup strategy.
  • Automatic Email Threat Blocking
    Email is the number one way cyber criminals attack businesses. Over 90% of successful cyber attacks start with a malicious email. That’s why every email sent to your organisation passes through Microsoft’s enterprise-grade filtering system before it reaches anyone’s inbox.

    This system analyses each message in real time, checking the sender’s reputation, scanning attachments for malware, testing links for malicious destinations, and evaluating the content for phishing characteristics. Spam and marketing junk is diverted to quarantine.

    Emails containing viruses, ransomware, or dangerous attachments are blocked entirely. Sophisticated phishing attempts that try to trick your staff into revealing passwords or making fraudulent payments are flagged and intercepted. The system learns continuously — as new threats emerge globally, the filters adapt within minutes.

    We monitor the filtering system to ensure it’s catching threats without blocking legitimate emails, and we can adjust sensitivity settings for your organisation. Your team simply sees a cleaner, safer inbox.
  • Advanced Virus & Scam Protection
    Basic email filtering catches obvious spam and known viruses, but modern cyber criminals are far more sophisticated. They craft emails that look exactly like messages from your bank, your suppliers, or even your own CEO.

    They embed malware in innocent-looking Word documents and Excel spreadsheets. They create fake login pages that are pixel-perfect copies of Microsoft or Google sign-in screens. This enhanced protection layer uses artificial intelligence and machine learning to detect these advanced threats.

    It analyses email behaviour patterns, detonates suspicious attachments in a virtual sandbox to see what they actually do, follows links to their true destination to check for fraud, and compares messages against global threat intelligence updated in real time.

    When an employee receives an email that claims to be from your bank asking them to “verify account details,” this system recognises the deception and blocks it. When someone sends a fake invoice that looks identical to your regular supplier’s format, the AI flags the subtle differences a human would miss.

    It’s your safety net for the attacks that are specifically designed to get past everything else.
  • Stolen Password Alerts
    Every year, billions of usernames and passwords are stolen in data breaches at companies around the world — LinkedIn, Adobe, Dropbox, and thousands of smaller organisations. These stolen credentials are traded and sold on dark web marketplaces, and criminals use them to try logging into other systems (because most people reuse passwords across multiple accounts).

    Our monitoring service continuously scans these criminal marketplaces, forums, and data dumps for any email addresses or credentials associated with your organisation. If we find that one of your team member’s passwords has appeared in a breach — even if the breach happened at a completely unrelated company — we alert you immediately.

    This gives you the critical window to change that password before a criminal can use it to access your business systems. We also help you understand the scope of the exposure: which account was compromised, where the breach originated, and what other precautions should be taken.

    It’s an early warning system that turns what could be a devastating breach into a simple password change.
  • Staff Cyber Safety Training
    Your technology can be perfectly secured, but if a team member clicks a malicious link or enters their password on a fake website, none of that matters. Human error is involved in the vast majority of successful cyber attacks, which is why training your people is just as important as protecting your systems.

    Our security awareness program includes regular interactive training modules that are short, engaging, and relevant — not boring compliance videos that people click through without watching. We cover topics like recognising phishing emails, spotting fake websites, handling suspicious phone calls, and safe password practices.

    But training alone isn’t enough. We also run simulated phishing campaigns — sending realistic fake phishing emails to your team to test their responses in a safe environment. Staff who click on simulated phishing emails receive immediate, non-punitive educational feedback explaining what they missed and how to spot it next time.

    You receive reports showing how your team’s awareness improves over time, and we adjust the training difficulty as their skills develop. The goal is to build a security-conscious culture where your people naturally question suspicious communications.
  • Secure Password Manager
    Password reuse is one of the biggest security vulnerabilities in any business. When your team uses the same password for their email, their accounting software, and their personal social media, a breach at any one of those services compromises all the others.

    But expecting people to memorise dozens of unique, complex passwords is unrealistic — which is why they resort to sticky notes, simple passwords, or the same password everywhere. A business-grade password manager solves this completely. It generates long, random, unique passwords for every website and application, stores them in an encrypted vault, and automatically fills them when your team logs in.

    Your staff only need to remember one master password — the password manager handles everything else. It works across computers, phones, and tablets, so passwords are always available. For your business, this means dramatically reduced risk of credential-based attacks, fewer “forgotten password” support requests, and faster onboarding of new staff.

    When someone leaves the company, their vault is disabled instantly, and any shared passwords can be rotated.
  • 10+ Bonus Business Apps
    Beyond the core Office applications, your Microsoft 365 licence includes a suite of powerful business tools that many organisations don’t even realise they have. Microsoft Forms lets you create professional surveys, quizzes, and feedback forms in minutes.

    Planner gives your team a visual task management board (similar to Trello) for tracking projects. Bookings creates a self-service appointment scheduling page where clients can book meetings without the back-and-forth emails. Lists provides a flexible way to track information — inventory, issues, contacts — in customisable spreadsheet-like views.

    To Do syncs personal task lists across all devices. Stream hosts and shares video content within your organisation. Power Automate lets you create simple workflows that save hours of repetitive work (like automatically saving email attachments to a specific folder).

    These tools are all included in your plan at no extra cost. Most businesses we onboard are only using a fraction of what’s available to them. Your Account Manager will help identify which tools could make the biggest difference for your specific workflows.
  • Computer Management & Updates
    Unmanaged computers are a major security risk and a productivity drain. Software that isn’t updated develops vulnerabilities that hackers exploit. Computers without proper policies can be used to install unauthorised software or access risky websites.

    And when something goes wrong on an unmanaged device, diagnosing the problem takes longer because there’s no visibility into what happened. Our device management platform changes all of this. Every company computer is enrolled and monitored, giving us real-time visibility into its health, security status, and software versions.

    We automatically push operating system updates, security patches, and application updates — scheduled during off-hours so your team isn’t interrupted. We enforce security policies like screen lock timeouts, encryption requirements, and password complexity — consistently across every device.

    We can remotely troubleshoot and fix many issues without needing the user to do anything. If a computer is lost or stolen, we can remotely wipe it to protect your data. And when a new employee starts, we can configure their computer with everything they need before they walk through the door.
  • Phone & Tablet Security
    Your team almost certainly accesses work email, documents, and Teams on their personal phones and tablets. That’s great for productivity, but it creates a security challenge: how do you protect company data on a device you don’t own?

    Our mobile device management solves this by creating a secure, encrypted container for business data on each device. Work emails, documents, and app data live inside this protected space, completely separated from personal apps, photos, and messages. We can enforce policies like requiring a PIN to access business apps, preventing company data from being copied to personal apps, and blocking access from devices that don’t meet security requirements (like phones that haven’t been updated).

    If a team member loses their phone or leaves the company, we can remotely wipe only the business data — their personal photos, messages, and apps are completely untouched. This strikes the right balance between security and privacy: your company data is protected, and your team’s personal life remains their own.
  • Trust-Nothing Security Approach
    The old approach to security was like a castle with a moat: if you were inside the walls, you were trusted. But modern businesses don’t have clear walls — your team works from home, from client sites, from their phones.

    Zero Trust flips the model entirely. Instead of trusting anyone who has a password, every access request is verified: who is this person, what device are they using, where are they connecting from, is their device secure, and do they actually need access to what they’re requesting? If any of these checks fail, access is denied or additional verification is required.

    For your business, this means that even in the worst-case scenario — a hacker steals one of your team’s passwords — they still can’t get in. The system will detect that the login is coming from an unrecognised device or unusual location and block it.

    If a device is compromised with malware, it’s automatically prevented from accessing sensitive resources until it’s cleaned. This layered approach ensures that no single point of failure can compromise your entire business.
  • Business-Grade Antivirus & Protection
    The antivirus software you can buy at a retail store is designed for home users and catches known threats by matching them against a database of signatures. Enterprise-grade endpoint protection operates on an entirely different level.

    Instead of just checking files against a list, it uses artificial intelligence and behavioural analysis to monitor everything happening on your computers in real time. If a program starts encrypting files rapidly (like ransomware), it’s blocked instantly — even if that specific ransomware has never been seen before.

    If a legitimate application suddenly starts behaving suspiciously (like your PDF reader trying to download a file from a known malicious server), it’s flagged and contained. The protection works across all attack stages: prevention, detection, and response.

    It’s centrally managed, so we have visibility across your entire fleet of devices and can respond to threats affecting any machine from our operations centre. This is the same class of security software used by banks, government agencies, and large enterprises — now protecting every computer in your business.
  • Application Control & Lockdown
    Most security software works by trying to identify and block bad programs. Application control flips this approach entirely: instead of trying to block the bad, it only allows the good. We define a list of approved applications for your business — your Office suite, your accounting software, your industry-specific tools — and only those programs are allowed to run.

    Everything else is blocked by default, regardless of what it is. This is extraordinarily effective against ransomware, because ransomware is an unauthorised program — it simply cannot execute. It’s equally effective against employees accidentally downloading malicious software, or installing unauthorised applications that could introduce vulnerabilities.

    If your team needs new software, they request it and we add it to the approved list after verifying it’s legitimate and safe. ThreatLocker also controls what approved applications can do — for example, allowing your PDF reader to open files but preventing it from connecting to the internet or modifying system files.

    This granular control creates a security environment where even if a known, trusted application is exploited by an attacker, the damage they can do is severely limited.
  • Managed Network Equipment
    Your network equipment is the plumbing of your business — when it works, nobody notices; when it fails, everything stops. Routers, switches, firewalls, and wireless access points all need regular firmware updates, security patches, and configuration management to perform reliably and securely.

    Most businesses install network equipment and forget about it until something breaks. We take a completely different approach. Every device is enrolled in our monitoring platform, giving us real-time visibility into performance, security status, and potential issues.

    We apply firmware updates during off-hours to address security vulnerabilities and performance improvements. We monitor bandwidth usage and can identify if a particular application or device is consuming excessive resources.

    We configure your firewall rules to block unauthorised access while ensuring legitimate business traffic flows smoothly. If something degrades — a switch port failing, Wi-Fi interference from a neighbouring office, an internet connection becoming unstable — we’re alerted and begin investigating before your team starts experiencing problems.

    For businesses with multiple locations, we ensure consistent network policies and performance across every site.
  • Your Own Account Manager
    Unlike most IT providers where you deal with whoever happens to answer the phone, Otaris assigns you a dedicated Account Manager who becomes your trusted technology advisor. They take the time to understand your business — your industry, your team, your goals, and your pain points.

    They’re not reactive; they’re proactive. Your Account Manager conducts regular reviews of your IT environment, identifies potential issues before they become problems, and recommends improvements that make sense for your specific situation. They’ll sit down with you quarterly (or more often if needed) to discuss your technology roadmap — what’s working, what could be better, and what’s coming next.

    When you have a question about anything technology-related, they’re your first call. They know your systems, they know your history, and they can get things done without you having to explain everything from scratch. It’s the difference between having a vendor and having a genuine technology partner.
  • 24/7 System Health Monitoring
    Imagine having a team of technicians watching your systems every second of every day, including nights, weekends, and public holidays. That’s what our Network Operations Centre (NOC) provides. Using advanced monitoring tools, we track the health and performance of your entire IT environment in real time: server CPU and memory usage, disk space, network bandwidth, internet connection quality, cloud service availability, backup status, and hundreds of other metrics.

    Every metric has defined thresholds. When something approaches a concerning level — a server running low on disk space, a network connection experiencing packet loss, a cloud service responding slowly — our team is automatically alerted and begins investigating before it escalates into a business-impacting issue. We track trends over time, so we can predict potential problems and address them proactively.

    For example, if your server’s disk space is declining at a rate that will cause issues in two weeks, we’ll resolve it now rather than waiting for a crisis. This proactive approach means fewer outages, less downtime, and more productive hours for your team.
  • 24/7 Cyber Threat Monitoring
    Cyber attacks don’t happen during business hours. Ransomware is often deployed at 2am on a Saturday specifically because attackers know nobody is watching. Our Security Operations Centre ensures someone is always watching. Specialist security analysts monitor your environment 24/7, using advanced threat detection tools that correlate data from across your systems to identify suspicious activity.

    This isn’t just automated alerting — trained human analysts review and investigate every potential threat. When something suspicious is detected, the response is immediate. If a user account starts behaving abnormally — logging in from an unusual country, accessing files they’ve never touched before, or attempting to escalate their permissions — our analysts investigate within minutes. If a device starts communicating with a server known to be controlled by criminals, it’s isolated from your network before any data can be stolen.

    If a new vulnerability is announced that affects your systems, our team assesses your exposure and applies protections, often before the first attacks exploiting it even begin. The SOC provides the continuous human intelligence layer that technology alone cannot replace.
  • Automatic Cloud Backup
    Here’s something that surprises most business owners: Microsoft’s own terms of service recommend using a third-party backup solution for your Microsoft 365 data. While Microsoft ensures their platform is available, they do not protect your data against accidental deletion, malicious insiders, or ransomware.

    If an employee accidentally deletes a critical folder, if a disgruntled team member wipes their mailbox before leaving, or if ransomware encrypts your files — Microsoft’s built-in protections may not be enough to get everything back.

    That’s why we include Veeam backup for your entire Microsoft 365 environment. Every day, all your emails, OneDrive files, SharePoint document libraries, and Teams conversations are backed up to a separate, secure location that is completely independent from your Microsoft 365 account.

    This means even in the worst-case scenario — your entire Microsoft 365 environment is compromised — we can restore your data from our independent backup. We can restore a single email, a complete mailbox, a specific version of a file, or your entire environment.

    Backups are retained for an extended period, so we can recover data that was deleted weeks or even months ago.
Add-ons
  • Microsoft CoPilot AI Assistant
    Experience unparalleled productivity with Microsoft Copilot. Our intelligent, adaptable, and empathetic AI assistant streamlines tasks, enhances efficiency, and supports your goals, making work easier and more effective. Transform your workflow with Copilot's innovative capabilities. $59 per user per month
  • PBX Phone Lines
    Unlimited local, national and mobile calls. $60 per month per line
  • Azure Virtual Servers
  • Amazon Web Services Virtual Servers

Knox

Best for: Businesses working with government, defence, or regulated industries. You have compliance requirements you need to meet, or you handle sensitive data that demands a higher level of protection.

400 / 500

Otaris Raven CyberSecurity, Business Continuity and Disaster Recovery Score

$895

total per month includes 5 users

$179 per additional user, per month
Includes all the features of Fortress, plus:
  • Enhanced Government Cyber Standards [Essential8 M2]
    While Maturity Level 1 protects against opportunistic, untargeted attacks, Maturity Level 2 is designed for organisations that face more capable and determined adversaries. At this level, the eight mitigation strategies are implemented with significantly stronger controls: application whitelisting is more strictly enforced, patching timeframes are tightened, multi-factor authentication is expanded to cover more systems, and administrative privileges are more tightly restricted.

    This is the standard the Australian Signals Directorate recommends for organisations that are likely to be specifically targeted — whether because of the industry they operate in, the data they hold, or the clients they serve. For businesses working with government or defence, Maturity Level 2 is often a mandatory requirement. We implement every control, maintain the documentation, and prepare you for any compliance audits or assessments.

    You don’t need to understand the technical differences between the maturity levels — you just need to know that Knox provides substantially stronger protection against deliberate, targeted attacks.
  • Defence Industry Compliance Ready
    If your business works with the Australian Department of Defence — whether directly or as a subcontractor in the defence supply chain — you are required to meet specific security standards under the Defence Industry Security Program (DISP).

    These requirements cover how you protect sensitive information, how you secure your IT systems, and how you manage access to defence-related data. Meeting DISP technical compliance is not optional: without it, you cannot participate in many defence contracts. Knox is specifically designed to meet these requirements.

    We implement the necessary cybersecurity controls, configure your systems according to DISP guidelines, maintain the required documentation, and help you through the assessment process. For businesses already in the defence sector, this means maintaining your eligibility without the stress of managing compliance internally.

    For businesses looking to enter the defence market, Knox provides the technical foundation you need to become DISP-compliant and start bidding on contracts.
  • 100GB Email Storage Per Person
    Knox doubles your email storage to 100GB per person, which is the maximum available on the Microsoft platform. This upgrade is particularly valuable for businesses where email is a primary tool for client communication, contract management, or project coordination.

    Teams that regularly send and receive large attachments — engineering drawings, legal documents, high-resolution images, financial reports — consume mailbox space faster than average. With 100GB, even heavy email users won’t need to worry about storage limits. This expanded storage is also important for compliance-driven businesses.

    Many industries require email retention for specific periods, and having ample storage means you can maintain complete email archives without constantly archiving or deleting messages. For defence and government work specifically, maintaining a complete record of communications is often a contractual requirement.
  • Automatic Sensitive Data Protection
    Data loss often happens not through sophisticated hacking but through simple human error — an employee emails a spreadsheet of client financial details to the wrong person, or shares a folder containing contracts with an external party who shouldn’t have access.

    Microsoft Information Protection automatically scans your entire Microsoft 365 environment to identify sensitive data wherever it lives: in emails, documents, spreadsheets, presentations, and chat messages. It recognises patterns like credit card numbers, tax file numbers, Medicare numbers, passport numbers, and other sensitive data types relevant to Australian businesses.

    Once identified, the system can automatically apply sensitivity labels that control what can be done with that content — preventing it from being forwarded externally, shared with unauthorised users, downloaded to unmanaged devices, or printed. Labels follow the document wherever it goes, even if someone copies it outside your organisation.

    For compliance-driven businesses, this provides demonstrable evidence that you have controls in place to protect sensitive information, which is essential for frameworks like DISP, ISO 27001, and the Privacy Act.
  • Cloud Application Monitoring
    Cloud App Security acts as a security broker between your users and the cloud services they access. It gives you comprehensive visibility into which cloud applications are being used in your organisation — including ones you didn’t authorise (known as “shadow IT”).

    It monitors user activity patterns and flags anomalies: if someone who normally downloads two or three files a day suddenly downloads 500, that could indicate a compromised account or a departing employee taking company data. If a user logs in from Australia and then thirty minutes later appears to log in from another country, it’s flagged as an impossible travel scenario.

    The system can automatically respond to threats by suspending user sessions, requiring re-authentication, or blocking specific activities. For compliance purposes, it provides detailed activity logs showing who accessed what data, when, and from where.

    It also helps you govern cloud app usage by categorising applications by risk level and allowing you to block access to high-risk services.
  • Microsoft Defender Suite (Was E5 Security)
    Modern cyber attacks rarely target just one system. An attacker might compromise a user’s credentials through a phishing email, then use those credentials to access files, escalate their privileges, and move laterally through your network.

    If your security tools operate in silos — one watching email, another watching devices, another watching identities — nobody sees the full picture. The Microsoft Defender suite solves this by unifying all security signals into a single platform.

    When Defender for Office 365 detects a suspicious email, Defender for Endpoint monitors whether any payload was executed on a device, Defender for Identity checks whether credentials were compromised, and Cloud App Security watches for unusual data access patterns.

    These signals are correlated automatically, giving our security team a complete, chronological story of any attack. This unified view means faster detection, faster investigation, and faster response. Instead of spending hours piecing together information from different tools, our analysts can see the entire attack chain in one dashboard and take coordinated action across all affected systems simultaneously.
  • Advanced Device Threat Response
    Defender for Endpoint Plan 2 goes well beyond traditional endpoint protection. While Plan 1 (included in Fortress) focuses on prevention and detection, Plan 2 adds automated investigation and remediation, threat hunting, and advanced attack analytics.

    When a threat is detected on a device, the system doesn’t just alert us — it automatically begins a detailed investigation: what process triggered the alert, how did it get there, what other devices might be affected, and what actions need to be taken to remediate the threat. It can automatically isolate a compromised device from the network within seconds — fast enough to prevent ransomware from spreading to other machines.

    It provides vulnerability management, showing us which devices have unpatched software or misconfigurations that could be exploited. Threat analytics gives us intelligence about emerging threats targeting organisations like yours, allowing us to proactively strengthen your defences.

    For compliance-driven businesses, the detailed forensic data and investigation logs are invaluable for incident reporting and demonstrating due diligence.
  • Advanced Email Attack Protection
    Defender for Office 365 Plan 2 represents Microsoft’s most advanced email security capability. Beyond real-time threat filtering, it includes automated investigation and response (AIR) — when a malicious email is identified, the system automatically investigates whether similar messages were sent to other people in your organisation, removes them from all inboxes retroactively, and implements protections against future variants of the same attack.

    It includes Safe Attachments, which opens every attachment in a virtual sandbox to test whether it’s malicious before delivering it to the recipient. Safe Links rewrites URLs so they’re checked for safety at the moment the user clicks — not just when the email was received — catching threats that activate after delivery. The system also provides detailed attack simulation capabilities, allowing us to run sophisticated phishing tests against your team with reporting that tracks improvement over time.

    For compliance-driven businesses, the threat investigation tools provide detailed forensic data about any attempted attacks, which can be essential for incident reporting and regulatory requirements.
  • Identity Theft Protection
    Once an attacker gets inside your network — whether through a phishing email, a weak password, or a compromised device — their next goal is almost always to steal more credentials and escalate their access.

    Defender for Identity monitors your authentication systems to detect these lateral movement and privilege escalation attempts in real time. It analyses login patterns, authentication protocols, and directory service queries to identify attack techniques that other security tools miss. For example, if an attacker compromises a regular user account and then attempts to access administrative tools or query your directory for sensitive information, Defender for Identity recognises this abnormal behaviour pattern and alerts our security team.

    It maintains a timeline of each user’s normal behaviour, making it highly effective at spotting when an account is being used by someone other than its legitimate owner. For businesses handling sensitive data or operating under compliance requirements, this identity-focused protection layer is critical because credential compromise is the primary technique attackers use to access high-value data.
  • Shadow IT Detection
    Your team members are resourceful. When they need a tool that isn’t officially provided, they’ll find one themselves — signing up for free cloud storage, using personal messaging apps for work conversations, or uploading files to online conversion tools.

    This “shadow IT” is well-intentioned but creates significant security blind spots: company data ends up on platforms you don’t control, can’t monitor, and may not meet your security requirements. Defender for Cloud Apps discovers every cloud service your team is using by analysing network traffic and authentication patterns.

    Each discovered app is assessed against a database of over 26,000 cloud applications rated on more than 80 risk factors. You get a clear picture of your shadow IT landscape: which apps are being used, by whom, how much data is flowing through them, and how risky they are.

    We can then take action: approving apps that meet your security standards, blocking high-risk services, or replacing shadow IT with approved alternatives that give your team the functionality they need with the security you require.
  • Intelligent Login Security
    Entra ID P2 (formerly Azure AD Premium P2) represents the highest level of identity and access management available in the Microsoft ecosystem. Its risk-based conditional access engine evaluates every single login attempt against multiple factors in real time: the user’s normal behaviour patterns, the device being used, the network location, current threat intelligence, and whether the credentials have appeared in any known breach databases.

    Each login receives a risk score. Low-risk logins proceed normally. Medium-risk logins may be challenged with additional verification. High-risk logins are blocked entirely. This happens in real time, transparently, without disrupting legitimate users. P2 also includes Privileged Identity Management (PIM), which provides just-in-time administrative access — instead of IT administrators having permanent elevated access (which is a major risk if their account is compromised), they request temporary elevation only when needed, with approval workflows and audit trails.

    For compliance-driven businesses, the detailed sign-in logs, risk reports, and access reviews provide the documentation needed for frameworks like DISP, ISO 27001, and the Privacy Act.
Add-ons
  • Microsoft CoPilot AI Assistant
    Experience unparalleled productivity with Microsoft Copilot. Our intelligent, adaptable, and empathetic AI assistant streamlines tasks, enhances efficiency, and supports your goals, making work easier and more effective. Transform your workflow with Copilot's innovative capabilities. $59 per user per month
  • Microsoft Teams Phone SIP Phone Lines
  • Azure Virtual Servers
  • Amazon Web Services Virtual Servers

Titan

Best for: Businesses handling highly sensitive data or operating in sectors where a breach could be catastrophic — legal, healthcare, finance, or defence primes. When the stakes are highest, Titan delivers the strongest protection available.

500 / 500

Otaris Raven CyberSecurity, Business Continuity and Disaster Recovery Score

$995

total per month includes 5 users

$199 per additional user, per month
Includes all the features of Knox, plus:
  • Maximum Government Cyber Standards [Essential8 M3]
    Maturity Level 3 represents the pinnacle of the Essential Eight framework — designed to protect against the most sophisticated threat actors, including well-resourced, state-sponsored attackers.

    At this level, every one of the eight mitigation strategies is implemented at its maximum strength. Application control policies are the most restrictive, blocking not just unauthorised executables but also scripts, libraries, and drivers.

    Patching timescales are the most aggressive, with critical vulnerabilities addressed within 48 hours. Multi-factor authentication uses phishing-resistant methods. Administrative privileges are locked down to the greatest extent possible, with detailed logging and monitoring of every privileged action.

    Achieving and maintaining Level 3 requires ongoing discipline and investment, which is why it’s typically adopted by organisations handling the most sensitive data: classified government information, critical infrastructure systems, healthcare records, financial data at scale, or intellectual property of significant national or commercial value.

    We implement, maintain, and continuously validate every control, ensuring your organisation meets this standard day in, day out.
Add-ons
  • Microsoft CoPilot AI Assistant
    Experience unparalleled productivity with Microsoft Copilot. Our intelligent, adaptable, and empathetic AI assistant streamlines tasks, enhances efficiency, and supports your goals, making work easier and more effective. Transform your workflow with Copilot's innovative capabilities. $59 per user per month
  • Microsoft Teams Phone SIP Phone Lines
  • Azure Virtual Servers
  • Amazon Web Services Virtual Servers

Fortress

Best for: Small to medium businesses that want reliable IT and strong cyber protection without the complexity. You don’t have specific compliance mandates — you just want to know you’re properly looked after.

300 / 500

Otaris Raven CyberSecurity, Business Continuity and Disaster Recovery Score

$695

total per month includes 5 users

$139 per additional user, per month
Includes
  • Local Australian Support Team
    When you call for help, you speak to a real person sitting in our Adelaide office — not an overseas call centre, not an automated menu, and not a chatbot.

    Our support team already knows your business, your systems, and your people. They can see your environment, understand your setup, and start solving the problem the moment you call.

    Because we’re local, we work in the same timezone, understand Australian business regulations, and can even come to your office when needed. You’ll never be passed around between departments or left waiting on hold wondering if anyone actually understood what you asked for.
  • Government-Grade Cyber Protection [Essential 8 M1]
    The Australian Signals Directorate (ASD) — the same government agency responsible for protecting Australia’s national security — developed the Essential Eight framework as the baseline cybersecurity standard every organisation should follow.

    It covers eight critical areas: controlling which applications can run, keeping software updated, restricting administrative access, using multi-factor authentication, and more.

    Under the Fortress plan, we implement and manage all eight strategies at Maturity Level 1, which protects your business against the most common, opportunistic cyber attacks.

    You don’t need to understand what any of this means — we handle every aspect of compliance and monitoring. You simply get the peace of mind that your cybersecurity meets the standard the Australian Government trusts.
  • Microsoft 365 Business Premium license
    Every person on your team gets the complete Microsoft 365 Business Premium suite, which includes Outlook for professional email, Word for documents, Excel for spreadsheets, PowerPoint for presentations, Teams for video conferencing, chat, and collaboration, and OneDrive for secure cloud file storage.

    This isn’t the basic free version — it’s the full business-grade platform with desktop applications, mobile apps, and web access.

    We handle the entire setup: configuring accounts, setting security policies, managing licences, and providing ongoing support. Microsoft 365 is the productivity backbone of your business, and because the licence is included in your plan, you don’t need to purchase, manage, or renew it separately.

    One plan, everything included, fully supported.
  • Unlimited Emergency IT Help
    Technology problems don’t come on a schedule, and they shouldn’t come with a bill every time they happen.

    With unlimited incident support, your team can call our service desk as many times as they need without worrying about hourly charges, ticket fees, or support caps. Whether it’s a laptop that won’t turn on, an email that’s not sending, a printer that’s stopped working, or a full system outage, our Adelaide-based team responds immediately.

    We prioritise issues based on business impact — if something is stopping your team from working, it goes to the top of the queue. Many IT providers charge per incident or limit the number of support calls you can make each month. We don’t. Your plan covers everything, so you’ll never hesitate to pick up the phone when you need help.
  • Unlimited IT Requests
    Service requests cover everything that isn’t an emergency — the everyday IT tasks that keep your business running smoothly.

    Need to set up a new employee with email, a laptop, and access to your systems? That’s a service request. Want software installed on a computer, a shared drive created for a project, or a user’s permissions changed? Service request. Need help configuring a new printer, setting up a meeting room display, or moving files to a new location? All covered.

    Many IT providers either charge separately for these tasks or limit you to a fixed number per month, which means your team either pays more or puts off the work they need done.

    With Otaris, there’s no cap. Your team submits requests through our portal or calls our service desk, and we handle them promptly. It’s like having a full IT department on call, without the salary costs.
  • Your Own Account Manager
    Unlike most IT providers where you deal with whoever happens to answer the phone, Otaris assigns you a dedicated Account Manager who becomes your trusted technology advisor. They take the time to understand your business — your industry, your team, your goals, and your pain points.

    They’re not reactive; they’re proactive. Your Account Manager conducts regular reviews of your IT environment, identifies potential issues before they become problems, and recommends improvements that make sense for your specific situation. They’ll sit down with you quarterly (or more often if needed) to discuss your technology roadmap — what’s working, what could be better, and what’s coming next.

    When you have a question about anything technology-related, they’re your first call. They know your systems, they know your history, and they can get things done without you having to explain everything from scratch. It’s the difference between having a vendor and having a genuine technology partner.
  • Professional Business Email
    First impressions matter. When you email a client from sarah@yourbusiness.com.au instead of yourbusiness2019@gmail.com, it immediately signals professionalism and legitimacy.

    Every person on your team gets their own branded business email address, fully hosted on Microsoft’s enterprise-grade Exchange platform. We handle the entire setup — configuring your domain, creating mailboxes, setting up email signatures, and ensuring your emails reliably reach their destination without being caught in spam filters.

    Your email is protected by multiple layers of security including encryption in transit, anti-spam filtering, and malware scanning. If a team member leaves, we can transfer their emails to another person, set up forwarding, or archive them — so you never lose important business correspondence.

    And because it’s all managed by us, you don’t need to worry about DNS records, MX settings, or any of the technical plumbing that makes email work.
  • 50GB Email Storage Per Person
    Running out of email storage is more than an inconvenience — it can mean missed messages from clients, lost attachments, and hours wasted trying to figure out what to delete.

    With 50GB of storage per person, that problem disappears. To put it in perspective, 50GB can hold approximately 50,000 emails with attachments, or years’ worth of normal business email. Your team can keep their full email history available and searchable without ever needing to archive or delete messages to free up space.

    This is Microsoft’s Exchange Online platform — the same enterprise email system used by large corporations — which means lightning-fast search, shared calendars, contact management, and seamless integration with Outlook on every device.

    We monitor storage usage across your organisation and will proactively let you know if anyone is approaching their limit, though in practice, most users never come close.
  • Full Office Apps on Every Computer
    There’s a big difference between the free web-based versions of Office and the full desktop applications. The desktop versions of Word, Excel, PowerPoint, and Outlook give your team the complete set of features — advanced formatting, complex spreadsheet formulas, professional presentation tools, and full Outlook email management with offline access.

    Every person on your plan gets these applications installed on their computer (and they can install on up to five personal devices too). The applications work offline, so your team can write documents, update spreadsheets, and review emails even without an internet connection — everything syncs automatically when they reconnect.

    We manage the entire lifecycle: installation, configuration, updates, and troubleshooting. When Microsoft releases new features or security patches, they’re applied automatically. You never need to buy a separate Office licence, and there’s no annual renewal to remember. It’s all part of your plan.
  • Work From Anywhere Apps
    Modern businesses don’t just work from the office. Whether your team is visiting a client, working from home, travelling, or simply checking something on their phone during lunch, they need access to their work.

    The web and mobile versions of Word, Excel, PowerPoint, and Outlook let your team access everything from any device with a browser or through dedicated mobile apps on iPhone, iPad, and Android. Emails are synced in real time.

    Documents saved to the cloud are accessible from anywhere. Calendar appointments, contacts, and Teams messages are always available. If someone starts editing a spreadsheet on their desktop computer and needs to leave for a meeting, they can continue editing on their tablet without missing a beat.

    All of this is secured by the same enterprise-grade protection that covers their desktop applications — including the ability for us to remotely wipe company data from a personal device if it’s lost or stolen, without affecting their personal photos or apps.
  • Team Chat, Calls & Video Meetings
    Microsoft Teams is included in your plan and it’s a complete communication platform that can transform how your team works together. Instant messaging lets your team ask quick questions without sending formal emails.

    Voice calling means you can make and receive calls directly from your computer or phone app — potentially replacing your traditional phone system entirely. HD video conferencing supports meetings with up to 300 people, with screen sharing, virtual backgrounds, live captions, and meeting recording.

    But Teams goes beyond just communication. Your team can collaborate on documents in real time during a meeting, share files in dedicated team channels, and keep project conversations organised by topic rather than buried in endless email chains.

    For businesses with multiple locations or remote workers, Teams becomes the virtual office that keeps everyone connected. We set up your Teams environment, configure the channels, and train your team on how to get the most out of it — because the tool is only valuable if people actually use it effectively.
  • 1TB Cloud Storage Per Person
    Every person on your team gets 1TB (one terabyte) of personal cloud storage through Microsoft OneDrive. To put that in perspective, 1TB can hold approximately 500,000 documents, 250,000 photos, or a combination of files that most people would never exhaust in their entire career.

    Files saved to OneDrive are automatically synced across all their devices — save something on your desktop and it appears on your laptop and phone instantly. It also means your files are protected: if a computer is lost, stolen, or damaged, every file is safely stored in the cloud and accessible from any replacement device within minutes.

    OneDrive integrates seamlessly with all your Microsoft 365 apps. Share a file with a colleague by sending a link instead of emailing large attachments. Collaborate on the same document simultaneously without creating confusing version conflicts.

    Set permissions so external clients can view files without being able to edit or download them. We configure OneDrive for your team, set sharing policies that align with your security requirements, and include it in your backup strategy.
  • Automatic Email Threat Blocking
    Email is the number one way cyber criminals attack businesses. Over 90% of successful cyber attacks start with a malicious email. That’s why every email sent to your organisation passes through Microsoft’s enterprise-grade filtering system before it reaches anyone’s inbox.

    This system analyses each message in real time, checking the sender’s reputation, scanning attachments for malware, testing links for malicious destinations, and evaluating the content for phishing characteristics. Spam and marketing junk is diverted to quarantine.

    Emails containing viruses, ransomware, or dangerous attachments are blocked entirely. Sophisticated phishing attempts that try to trick your staff into revealing passwords or making fraudulent payments are flagged and intercepted. The system learns continuously — as new threats emerge globally, the filters adapt within minutes.

    We monitor the filtering system to ensure it’s catching threats without blocking legitimate emails, and we can adjust sensitivity settings for your organisation. Your team simply sees a cleaner, safer inbox.
  • Advanced Virus & Scam Protection
    Basic email filtering catches obvious spam and known viruses, but modern cyber criminals are far more sophisticated. They craft emails that look exactly like messages from your bank, your suppliers, or even your own CEO.

    They embed malware in innocent-looking Word documents and Excel spreadsheets. They create fake login pages that are pixel-perfect copies of Microsoft or Google sign-in screens. This enhanced protection layer uses artificial intelligence and machine learning to detect these advanced threats.

    It analyses email behaviour patterns, detonates suspicious attachments in a virtual sandbox to see what they actually do, follows links to their true destination to check for fraud, and compares messages against global threat intelligence updated in real time.

    When an employee receives an email that claims to be from your bank asking them to “verify account details,” this system recognises the deception and blocks it. When someone sends a fake invoice that looks identical to your regular supplier’s format, the AI flags the subtle differences a human would miss.

    It’s your safety net for the attacks that are specifically designed to get past everything else.
  • Stolen Password Alerts
    Every year, billions of usernames and passwords are stolen in data breaches at companies around the world — LinkedIn, Adobe, Dropbox, and thousands of smaller organisations. These stolen credentials are traded and sold on dark web marketplaces, and criminals use them to try logging into other systems (because most people reuse passwords across multiple accounts).

    Our monitoring service continuously scans these criminal marketplaces, forums, and data dumps for any email addresses or credentials associated with your organisation. If we find that one of your team member’s passwords has appeared in a breach — even if the breach happened at a completely unrelated company — we alert you immediately.

    This gives you the critical window to change that password before a criminal can use it to access your business systems. We also help you understand the scope of the exposure: which account was compromised, where the breach originated, and what other precautions should be taken.

    It’s an early warning system that turns what could be a devastating breach into a simple password change.
  • Staff Cyber Safety Training
    Your technology can be perfectly secured, but if a team member clicks a malicious link or enters their password on a fake website, none of that matters. Human error is involved in the vast majority of successful cyber attacks, which is why training your people is just as important as protecting your systems.

    Our security awareness program includes regular interactive training modules that are short, engaging, and relevant — not boring compliance videos that people click through without watching. We cover topics like recognising phishing emails, spotting fake websites, handling suspicious phone calls, and safe password practices.

    But training alone isn’t enough. We also run simulated phishing campaigns — sending realistic fake phishing emails to your team to test their responses in a safe environment. Staff who click on simulated phishing emails receive immediate, non-punitive educational feedback explaining what they missed and how to spot it next time.

    You receive reports showing how your team’s awareness improves over time, and we adjust the training difficulty as their skills develop. The goal is to build a security-conscious culture where your people naturally question suspicious communications.
  • Secure Password Manager
    Password reuse is one of the biggest security vulnerabilities in any business. When your team uses the same password for their email, their accounting software, and their personal social media, a breach at any one of those services compromises all the others.

    But expecting people to memorise dozens of unique, complex passwords is unrealistic — which is why they resort to sticky notes, simple passwords, or the same password everywhere. A business-grade password manager solves this completely. It generates long, random, unique passwords for every website and application, stores them in an encrypted vault, and automatically fills them when your team logs in.

    Your staff only need to remember one master password — the password manager handles everything else. It works across computers, phones, and tablets, so passwords are always available. For your business, this means dramatically reduced risk of credential-based attacks, fewer “forgotten password” support requests, and faster onboarding of new staff.

    When someone leaves the company, their vault is disabled instantly, and any shared passwords can be rotated.
  • 10+ Bonus Business Apps
    Beyond the core Office applications, your Microsoft 365 licence includes a suite of powerful business tools that many organisations don’t even realise they have. Microsoft Forms lets you create professional surveys, quizzes, and feedback forms in minutes.

    Planner gives your team a visual task management board (similar to Trello) for tracking projects. Bookings creates a self-service appointment scheduling page where clients can book meetings without the back-and-forth emails. Lists provides a flexible way to track information — inventory, issues, contacts — in customisable spreadsheet-like views.

    To Do syncs personal task lists across all devices. Stream hosts and shares video content within your organisation. Power Automate lets you create simple workflows that save hours of repetitive work (like automatically saving email attachments to a specific folder).

    These tools are all included in your plan at no extra cost. Most businesses we onboard are only using a fraction of what’s available to them. Your Account Manager will help identify which tools could make the biggest difference for your specific workflows.
  • Computer Management & Updates
    Unmanaged computers are a major security risk and a productivity drain. Software that isn’t updated develops vulnerabilities that hackers exploit. Computers without proper policies can be used to install unauthorised software or access risky websites.

    And when something goes wrong on an unmanaged device, diagnosing the problem takes longer because there’s no visibility into what happened. Our device management platform changes all of this. Every company computer is enrolled and monitored, giving us real-time visibility into its health, security status, and software versions.

    We automatically push operating system updates, security patches, and application updates — scheduled during off-hours so your team isn’t interrupted. We enforce security policies like screen lock timeouts, encryption requirements, and password complexity — consistently across every device.

    We can remotely troubleshoot and fix many issues without needing the user to do anything. If a computer is lost or stolen, we can remotely wipe it to protect your data. And when a new employee starts, we can configure their computer with everything they need before they walk through the door.
  • Phone & Tablet Security
    Your team almost certainly accesses work email, documents, and Teams on their personal phones and tablets. That’s great for productivity, but it creates a security challenge: how do you protect company data on a device you don’t own?

    Our mobile device management solves this by creating a secure, encrypted container for business data on each device. Work emails, documents, and app data live inside this protected space, completely separated from personal apps, photos, and messages. We can enforce policies like requiring a PIN to access business apps, preventing company data from being copied to personal apps, and blocking access from devices that don’t meet security requirements (like phones that haven’t been updated).

    If a team member loses their phone or leaves the company, we can remotely wipe only the business data — their personal photos, messages, and apps are completely untouched. This strikes the right balance between security and privacy: your company data is protected, and your team’s personal life remains their own.
  • Trust-Nothing Security Approach
    The old approach to security was like a castle with a moat: if you were inside the walls, you were trusted. But modern businesses don’t have clear walls — your team works from home, from client sites, from their phones.

    Zero Trust flips the model entirely. Instead of trusting anyone who has a password, every access request is verified: who is this person, what device are they using, where are they connecting from, is their device secure, and do they actually need access to what they’re requesting? If any of these checks fail, access is denied or additional verification is required.

    For your business, this means that even in the worst-case scenario — a hacker steals one of your team’s passwords — they still can’t get in. The system will detect that the login is coming from an unrecognised device or unusual location and block it.

    If a device is compromised with malware, it’s automatically prevented from accessing sensitive resources until it’s cleaned. This layered approach ensures that no single point of failure can compromise your entire business.
  • Business-Grade Antivirus & Protection
    The antivirus software you can buy at a retail store is designed for home users and catches known threats by matching them against a database of signatures. Enterprise-grade endpoint protection operates on an entirely different level.

    Instead of just checking files against a list, it uses artificial intelligence and behavioural analysis to monitor everything happening on your computers in real time. If a program starts encrypting files rapidly (like ransomware), it’s blocked instantly — even if that specific ransomware has never been seen before.

    If a legitimate application suddenly starts behaving suspiciously (like your PDF reader trying to download a file from a known malicious server), it’s flagged and contained. The protection works across all attack stages: prevention, detection, and response.

    It’s centrally managed, so we have visibility across your entire fleet of devices and can respond to threats affecting any machine from our operations centre. This is the same class of security software used by banks, government agencies, and large enterprises — now protecting every computer in your business.
  • Application Control & Lockdown
    Most security software works by trying to identify and block bad programs. Application control flips this approach entirely: instead of trying to block the bad, it only allows the good. We define a list of approved applications for your business — your Office suite, your accounting software, your industry-specific tools — and only those programs are allowed to run.

    Everything else is blocked by default, regardless of what it is. This is extraordinarily effective against ransomware, because ransomware is an unauthorised program — it simply cannot execute. It’s equally effective against employees accidentally downloading malicious software, or installing unauthorised applications that could introduce vulnerabilities.

    If your team needs new software, they request it and we add it to the approved list after verifying it’s legitimate and safe. ThreatLocker also controls what approved applications can do — for example, allowing your PDF reader to open files but preventing it from connecting to the internet or modifying system files.

    This granular control creates a security environment where even if a known, trusted application is exploited by an attacker, the damage they can do is severely limited.
  • Managed Network Equipment
    Your network equipment is the plumbing of your business — when it works, nobody notices; when it fails, everything stops. Routers, switches, firewalls, and wireless access points all need regular firmware updates, security patches, and configuration management to perform reliably and securely.

    Most businesses install network equipment and forget about it until something breaks. We take a completely different approach. Every device is enrolled in our monitoring platform, giving us real-time visibility into performance, security status, and potential issues.

    We apply firmware updates during off-hours to address security vulnerabilities and performance improvements. We monitor bandwidth usage and can identify if a particular application or device is consuming excessive resources.

    We configure your firewall rules to block unauthorised access while ensuring legitimate business traffic flows smoothly. If something degrades — a switch port failing, Wi-Fi interference from a neighbouring office, an internet connection becoming unstable — we’re alerted and begin investigating before your team starts experiencing problems.

    For businesses with multiple locations, we ensure consistent network policies and performance across every site.
  • Your Own Account Manager
    Unlike most IT providers where you deal with whoever happens to answer the phone, Otaris assigns you a dedicated Account Manager who becomes your trusted technology advisor. They take the time to understand your business — your industry, your team, your goals, and your pain points.

    They’re not reactive; they’re proactive. Your Account Manager conducts regular reviews of your IT environment, identifies potential issues before they become problems, and recommends improvements that make sense for your specific situation. They’ll sit down with you quarterly (or more often if needed) to discuss your technology roadmap — what’s working, what could be better, and what’s coming next.

    When you have a question about anything technology-related, they’re your first call. They know your systems, they know your history, and they can get things done without you having to explain everything from scratch. It’s the difference between having a vendor and having a genuine technology partner.
  • 24/7 System Health Monitoring
    Imagine having a team of technicians watching your systems every second of every day, including nights, weekends, and public holidays. That’s what our Network Operations Centre (NOC) provides. Using advanced monitoring tools, we track the health and performance of your entire IT environment in real time: server CPU and memory usage, disk space, network bandwidth, internet connection quality, cloud service availability, backup status, and hundreds of other metrics.

    Every metric has defined thresholds. When something approaches a concerning level — a server running low on disk space, a network connection experiencing packet loss, a cloud service responding slowly — our team is automatically alerted and begins investigating before it escalates into a business-impacting issue. We track trends over time, so we can predict potential problems and address them proactively.

    For example, if your server’s disk space is declining at a rate that will cause issues in two weeks, we’ll resolve it now rather than waiting for a crisis. This proactive approach means fewer outages, less downtime, and more productive hours for your team.
  • 24/7 Cyber Threat Monitoring
    Cyber attacks don’t happen during business hours. Ransomware is often deployed at 2am on a Saturday specifically because attackers know nobody is watching. Our Security Operations Centre ensures someone is always watching. Specialist security analysts monitor your environment 24/7, using advanced threat detection tools that correlate data from across your systems to identify suspicious activity.

    This isn’t just automated alerting — trained human analysts review and investigate every potential threat. When something suspicious is detected, the response is immediate. If a user account starts behaving abnormally — logging in from an unusual country, accessing files they’ve never touched before, or attempting to escalate their permissions — our analysts investigate within minutes. If a device starts communicating with a server known to be controlled by criminals, it’s isolated from your network before any data can be stolen.

    If a new vulnerability is announced that affects your systems, our team assesses your exposure and applies protections, often before the first attacks exploiting it even begin. The SOC provides the continuous human intelligence layer that technology alone cannot replace.
  • Automatic Cloud Backup
    Here’s something that surprises most business owners: Microsoft’s own terms of service recommend using a third-party backup solution for your Microsoft 365 data. While Microsoft ensures their platform is available, they do not protect your data against accidental deletion, malicious insiders, or ransomware.

    If an employee accidentally deletes a critical folder, if a disgruntled team member wipes their mailbox before leaving, or if ransomware encrypts your files — Microsoft’s built-in protections may not be enough to get everything back.

    That’s why we include Veeam backup for your entire Microsoft 365 environment. Every day, all your emails, OneDrive files, SharePoint document libraries, and Teams conversations are backed up to a separate, secure location that is completely independent from your Microsoft 365 account.

    This means even in the worst-case scenario — your entire Microsoft 365 environment is compromised — we can restore your data from our independent backup. We can restore a single email, a complete mailbox, a specific version of a file, or your entire environment.

    Backups are retained for an extended period, so we can recover data that was deleted weeks or even months ago.
Add-ons
  • Microsoft CoPilot AI Assistant
    Experience unparalleled productivity with Microsoft Copilot. Our intelligent, adaptable, and empathetic AI assistant streamlines tasks, enhances efficiency, and supports your goals, making work easier and more effective. Transform your workflow with Copilot's innovative capabilities. $59 per user per month
  • PBX Phone Lines
    Unlimited local, national and mobile calls. $60 per month per line
  • Azure Virtual Servers
  • Amazon Web Services Virtual Servers

Knox

Best for: Businesses working with government, defence, or regulated industries. You have compliance requirements you need to meet, or you handle sensitive data that demands a higher level of protection.

400 / 500

Otaris Raven CyberSecurity, Business Continuity and Disaster Recovery Score

$895

total per month includes 5 users

$179 per additional user, per month
Includes all the features of Fortress, plus:
  • Enhanced Government Cyber Standards [Essential8 M2]
    While Maturity Level 1 protects against opportunistic, untargeted attacks, Maturity Level 2 is designed for organisations that face more capable and determined adversaries. At this level, the eight mitigation strategies are implemented with significantly stronger controls: application whitelisting is more strictly enforced, patching timeframes are tightened, multi-factor authentication is expanded to cover more systems, and administrative privileges are more tightly restricted.

    This is the standard the Australian Signals Directorate recommends for organisations that are likely to be specifically targeted — whether because of the industry they operate in, the data they hold, or the clients they serve. For businesses working with government or defence, Maturity Level 2 is often a mandatory requirement. We implement every control, maintain the documentation, and prepare you for any compliance audits or assessments.

    You don’t need to understand the technical differences between the maturity levels — you just need to know that Knox provides substantially stronger protection against deliberate, targeted attacks.
  • Defence Industry Compliance Ready
    If your business works with the Australian Department of Defence — whether directly or as a subcontractor in the defence supply chain — you are required to meet specific security standards under the Defence Industry Security Program (DISP).

    These requirements cover how you protect sensitive information, how you secure your IT systems, and how you manage access to defence-related data. Meeting DISP technical compliance is not optional: without it, you cannot participate in many defence contracts. Knox is specifically designed to meet these requirements.

    We implement the necessary cybersecurity controls, configure your systems according to DISP guidelines, maintain the required documentation, and help you through the assessment process. For businesses already in the defence sector, this means maintaining your eligibility without the stress of managing compliance internally.

    For businesses looking to enter the defence market, Knox provides the technical foundation you need to become DISP-compliant and start bidding on contracts.
  • 100GB Email Storage Per Person
    Knox doubles your email storage to 100GB per person, which is the maximum available on the Microsoft platform. This upgrade is particularly valuable for businesses where email is a primary tool for client communication, contract management, or project coordination.

    Teams that regularly send and receive large attachments — engineering drawings, legal documents, high-resolution images, financial reports — consume mailbox space faster than average. With 100GB, even heavy email users won’t need to worry about storage limits. This expanded storage is also important for compliance-driven businesses.

    Many industries require email retention for specific periods, and having ample storage means you can maintain complete email archives without constantly archiving or deleting messages. For defence and government work specifically, maintaining a complete record of communications is often a contractual requirement.
  • Automatic Sensitive Data Protection
    Data loss often happens not through sophisticated hacking but through simple human error — an employee emails a spreadsheet of client financial details to the wrong person, or shares a folder containing contracts with an external party who shouldn’t have access.

    Microsoft Information Protection automatically scans your entire Microsoft 365 environment to identify sensitive data wherever it lives: in emails, documents, spreadsheets, presentations, and chat messages. It recognises patterns like credit card numbers, tax file numbers, Medicare numbers, passport numbers, and other sensitive data types relevant to Australian businesses.

    Once identified, the system can automatically apply sensitivity labels that control what can be done with that content — preventing it from being forwarded externally, shared with unauthorised users, downloaded to unmanaged devices, or printed. Labels follow the document wherever it goes, even if someone copies it outside your organisation.

    For compliance-driven businesses, this provides demonstrable evidence that you have controls in place to protect sensitive information, which is essential for frameworks like DISP, ISO 27001, and the Privacy Act.
  • Cloud Application Monitoring
    Cloud App Security acts as a security broker between your users and the cloud services they access. It gives you comprehensive visibility into which cloud applications are being used in your organisation — including ones you didn’t authorise (known as “shadow IT”).

    It monitors user activity patterns and flags anomalies: if someone who normally downloads two or three files a day suddenly downloads 500, that could indicate a compromised account or a departing employee taking company data. If a user logs in from Australia and then thirty minutes later appears to log in from another country, it’s flagged as an impossible travel scenario.

    The system can automatically respond to threats by suspending user sessions, requiring re-authentication, or blocking specific activities. For compliance purposes, it provides detailed activity logs showing who accessed what data, when, and from where.

    It also helps you govern cloud app usage by categorising applications by risk level and allowing you to block access to high-risk services.
  • Microsoft Defender Suite (Was E5 Security)
    Modern cyber attacks rarely target just one system. An attacker might compromise a user’s credentials through a phishing email, then use those credentials to access files, escalate their privileges, and move laterally through your network.

    If your security tools operate in silos — one watching email, another watching devices, another watching identities — nobody sees the full picture. The Microsoft Defender suite solves this by unifying all security signals into a single platform.

    When Defender for Office 365 detects a suspicious email, Defender for Endpoint monitors whether any payload was executed on a device, Defender for Identity checks whether credentials were compromised, and Cloud App Security watches for unusual data access patterns.

    These signals are correlated automatically, giving our security team a complete, chronological story of any attack. This unified view means faster detection, faster investigation, and faster response. Instead of spending hours piecing together information from different tools, our analysts can see the entire attack chain in one dashboard and take coordinated action across all affected systems simultaneously.
  • Advanced Device Threat Response
    Defender for Endpoint Plan 2 goes well beyond traditional endpoint protection. While Plan 1 (included in Fortress) focuses on prevention and detection, Plan 2 adds automated investigation and remediation, threat hunting, and advanced attack analytics.

    When a threat is detected on a device, the system doesn’t just alert us — it automatically begins a detailed investigation: what process triggered the alert, how did it get there, what other devices might be affected, and what actions need to be taken to remediate the threat. It can automatically isolate a compromised device from the network within seconds — fast enough to prevent ransomware from spreading to other machines.

    It provides vulnerability management, showing us which devices have unpatched software or misconfigurations that could be exploited. Threat analytics gives us intelligence about emerging threats targeting organisations like yours, allowing us to proactively strengthen your defences.

    For compliance-driven businesses, the detailed forensic data and investigation logs are invaluable for incident reporting and demonstrating due diligence.
  • Advanced Email Attack Protection
    Defender for Office 365 Plan 2 represents Microsoft’s most advanced email security capability. Beyond real-time threat filtering, it includes automated investigation and response (AIR) — when a malicious email is identified, the system automatically investigates whether similar messages were sent to other people in your organisation, removes them from all inboxes retroactively, and implements protections against future variants of the same attack.

    It includes Safe Attachments, which opens every attachment in a virtual sandbox to test whether it’s malicious before delivering it to the recipient. Safe Links rewrites URLs so they’re checked for safety at the moment the user clicks — not just when the email was received — catching threats that activate after delivery. The system also provides detailed attack simulation capabilities, allowing us to run sophisticated phishing tests against your team with reporting that tracks improvement over time.

    For compliance-driven businesses, the threat investigation tools provide detailed forensic data about any attempted attacks, which can be essential for incident reporting and regulatory requirements.
  • Identity Theft Protection
    Once an attacker gets inside your network — whether through a phishing email, a weak password, or a compromised device — their next goal is almost always to steal more credentials and escalate their access.

    Defender for Identity monitors your authentication systems to detect these lateral movement and privilege escalation attempts in real time. It analyses login patterns, authentication protocols, and directory service queries to identify attack techniques that other security tools miss. For example, if an attacker compromises a regular user account and then attempts to access administrative tools or query your directory for sensitive information, Defender for Identity recognises this abnormal behaviour pattern and alerts our security team.

    It maintains a timeline of each user’s normal behaviour, making it highly effective at spotting when an account is being used by someone other than its legitimate owner. For businesses handling sensitive data or operating under compliance requirements, this identity-focused protection layer is critical because credential compromise is the primary technique attackers use to access high-value data.
  • Shadow IT Detection
    Your team members are resourceful. When they need a tool that isn’t officially provided, they’ll find one themselves — signing up for free cloud storage, using personal messaging apps for work conversations, or uploading files to online conversion tools.

    This “shadow IT” is well-intentioned but creates significant security blind spots: company data ends up on platforms you don’t control, can’t monitor, and may not meet your security requirements. Defender for Cloud Apps discovers every cloud service your team is using by analysing network traffic and authentication patterns.

    Each discovered app is assessed against a database of over 26,000 cloud applications rated on more than 80 risk factors. You get a clear picture of your shadow IT landscape: which apps are being used, by whom, how much data is flowing through them, and how risky they are.

    We can then take action: approving apps that meet your security standards, blocking high-risk services, or replacing shadow IT with approved alternatives that give your team the functionality they need with the security you require.
  • Intelligent Login Security
    Entra ID P2 (formerly Azure AD Premium P2) represents the highest level of identity and access management available in the Microsoft ecosystem. Its risk-based conditional access engine evaluates every single login attempt against multiple factors in real time: the user’s normal behaviour patterns, the device being used, the network location, current threat intelligence, and whether the credentials have appeared in any known breach databases.

    Each login receives a risk score. Low-risk logins proceed normally. Medium-risk logins may be challenged with additional verification. High-risk logins are blocked entirely. This happens in real time, transparently, without disrupting legitimate users. P2 also includes Privileged Identity Management (PIM), which provides just-in-time administrative access — instead of IT administrators having permanent elevated access (which is a major risk if their account is compromised), they request temporary elevation only when needed, with approval workflows and audit trails.

    For compliance-driven businesses, the detailed sign-in logs, risk reports, and access reviews provide the documentation needed for frameworks like DISP, ISO 27001, and the Privacy Act.
Add-ons
  • Microsoft CoPilot AI Assistant
    Experience unparalleled productivity with Microsoft Copilot. Our intelligent, adaptable, and empathetic AI assistant streamlines tasks, enhances efficiency, and supports your goals, making work easier and more effective. Transform your workflow with Copilot's innovative capabilities. $59 per user per month
  • Microsoft Teams Phone SIP Phone Lines
  • Azure Virtual Servers
  • Amazon Web Services Virtual Servers

Titan

Best for: Businesses handling highly sensitive data or operating in sectors where a breach could be catastrophic — legal, healthcare, finance, or defence primes. When the stakes are highest, Titan delivers the strongest protection available.

500 / 500

Otaris Raven CyberSecurity, Business Continuity and Disaster Recovery Score

$995

total per month includes 5 users

$199 per additional user, per month
Includes all the features of Knox, plus:
  • Maximum Government Cyber Standards [Essential8 M3]
    Maturity Level 3 represents the pinnacle of the Essential Eight framework — designed to protect against the most sophisticated threat actors, including well-resourced, state-sponsored attackers.

    At this level, every one of the eight mitigation strategies is implemented at its maximum strength. Application control policies are the most restrictive, blocking not just unauthorised executables but also scripts, libraries, and drivers.

    Patching timescales are the most aggressive, with critical vulnerabilities addressed within 48 hours. Multi-factor authentication uses phishing-resistant methods. Administrative privileges are locked down to the greatest extent possible, with detailed logging and monitoring of every privileged action.

    Achieving and maintaining Level 3 requires ongoing discipline and investment, which is why it’s typically adopted by organisations handling the most sensitive data: classified government information, critical infrastructure systems, healthcare records, financial data at scale, or intellectual property of significant national or commercial value.

    We implement, maintain, and continuously validate every control, ensuring your organisation meets this standard day in, day out.
Add-ons
  • Microsoft CoPilot AI Assistant
    Experience unparalleled productivity with Microsoft Copilot. Our intelligent, adaptable, and empathetic AI assistant streamlines tasks, enhances efficiency, and supports your goals, making work easier and more effective. Transform your workflow with Copilot's innovative capabilities. $59 per user per month
  • Microsoft Teams Phone SIP Phone Lines
  • Azure Virtual Servers
  • Amazon Web Services Virtual Servers

Understanding
Raven Score

The Raven Score is a comprehensive measure of your organisation’s cybersecurity and business continuity readiness. Each of our support plans is designed to deliver a tailored level of protection, with the Raven Score reflecting the depth of that security.

A higher Raven Score means a higher level of protection and preparedness for your business. The score takes into account a range of factors, including threat detection, proactive monitoring, and business continuity measures. The score reflects how effectively your IT environment is protected, how resilient your business is to disruptions, and how well it is positioned to recover in the event of an incident.

By understanding the Raven Score, you can choose the level of security that aligns with your organisation’s needs, ensuring you receive the right balance of protection without overpaying for services you don’t require.

Our Seamless Transition Process: Moving to Otaris Made Simple

We know switching IT providers feels risky. You worry about downtime, lost data, confused staff, and that awkward period where nothing quite works. We’ve helped hundreds of businesses make this move — and not one has regretted it.

1. Free Discovery Call

Tell us what’s not working

A relaxed 30-minute conversation where you share your frustrations, goals, and what good IT looks like for your business. No jargon. No pressure. Just honest answers about whether we’re the right fit.

Your outcome: You’ll leave knowing exactly what your business needs — even if you don’t choose us.

2. Your IT Health Check

We look under the hood (so you don’t have to)

Our team reviews your current setup — security gaps, outdated systems, compliance risks, and hidden issues your current provider may have missed. We do all the heavy lifting while your team keeps working as normal.

Your outcome: You get a clear picture of where you stand and what needs to change, in plain English.

3. Your Custom Plan

A plan built around your business, not ours

We present a clear, jargon-free plan tailored to your specific needs, budget, and goals. You’ll see exactly what changes, when it happens, and what it costs. No surprises. No hidden fees.

Your outcome: You’ll feel confident you’re making the right decision for your team.

4. Behind-the-Scenes Setup

We do the hard work before anything changes

Before we touch a single system, we prepare everything in the background — accounts, security settings, backups, and access controls. Your team won’t notice a thing until it’s ready.

Your outcome: Zero disruption to your business while we get everything in place.

5. The Seamless Switchover

The moment everything gets better

We handle the full transition — moving your data, email, files, and systems over securely. Most businesses are up and running on their new setup within hours, not weeks. And if anything needs attention, we’re right there.

Your outcome: Your business keeps running. Your data stays safe. Your team barely notices the change.

6. Your Team Gets Comfortable

Your people are supported from day one

We introduce your team to their new support process — how to get help, what’s changed, and what’s improved. We keep things simple so everyone feels confident, not overwhelmed.

Your outcome: Your team knows exactly who to call and how to get help instantly.

7. Ongoing Partnership

This is where the real value begins

The transition is just the start. From here, we proactively monitor, maintain, and improve your IT environment. You get regular check-ins, security updates, and a dedicated team that knows your business inside out.

Your outcome: You stop worrying about IT and start focusing on growing your business.

Why Choose Otaris

Plain-English Communication: No jargon. No confusing reports. Just clear updates you actually understand.

Proactive, Not Reactive: We fix problems before they affect your business, not after.

Essential Eight Certified: Your cybersecurity is built on the Australian Government’s gold standard framework.

Raven Score Transparency: Your live security score so you always know exactly where you stand.


Ready to Make the Switch?

Book a free 30-minute discovery call. No commitment. No pressure. Just a conversation about what better IT could look like for your business.

Enquire now

Ready to get started? Enquire now for a quote tailored for your business.