NarwhAI

Home › Services

Services

Six assessments, each against a published standard

Every engagement is quoted as a fixed price before work starts, and ends with documentation you can hand to a regulator, an insurer, a tender panel or a client who asks.

How it works

Three steps, no surprises

  1. Free check

    I run a short external diagnostic on your website or policy and send you what I find. No obligation.

  2. Fixed-price sprint

    If there’s a gap worth closing, I quote a fixed price upfront and deliver the fix, usually within a week. That might be an updated policy, documentation, or an evidence pack.

  3. Documented evidence

    You walk away with something concrete: a policy, a report or a checklist. Proof you can show a regulator, an insurer, or a client who asks.

What I assess

The six areas

Open one for the detail, or ask me about it directly.

Privacy Act compliance

Get ready for the privacy reforms taking effect from 10 December 2026.

Learn more

From 10 December 2026, Australian businesses face new disclosure requirements around automated decision-making and a new Children’s Online Privacy Code. I audit what you collect, how you use it, and where your privacy policy falls short, then close the gaps with a fixed-price sprint.

Assessed against: Privacy Act 1988 (Cth) and the Australian Privacy Principles

Read the full details → Or ask about this

Children’s Online Privacy Code

New obligations if under-18s could use your service, even if they’re not your audience.

Learn more

New obligations may apply if your service could reasonably be accessed by under-18s, even if it is not aimed at them. I assess exposure and build the specific safeguards required.

Assessed against: the Children’s Online Privacy Code (OAIC)

Read the full details → Or ask about this

Essential Eight readiness

Show insurers, panels and clients real evidence of your cyber security maturity.

Learn more

Insurers, government panels and larger clients increasingly ask small businesses to demonstrate cyber security maturity. I help you document what you actually have in place against the ASD’s Essential Eight framework: real evidence, not certification theatre.

Assessed against: ASD Essential Eight Maturity Model

Read the full details → Or ask about this

Web accessibility audits

A manual WCAG 2.2 audit of your website, with a clear list of fixes.

Learn more

Most business websites fail basic accessibility standards, and legal exposure is rising globally. I run a manual audit against WCAG 2.2. The fixes are usually simpler than expected, and they open your site to more customers, not fewer.

Assessed against: WCAG 2.2, Level AA

Read the full details → Or ask about this

AI app security review

A security check for apps and tools built with AI coding platforms.

Learn more

If your business built an app or internal tool using AI coding platforms (Lovable, Bolt, Replit, or similar), there’s a good chance it has real security gaps nobody’s checked. I review AI-built applications against known vulnerability patterns and hand back a plain-English fix list.

Assessed against: OWASP Top 10 and common AI-generated code weaknesses

Read the full details → Or ask about this

Hiring integrity verification

A practical process for spotting fake and AI-generated job candidates.

Learn more

Fake and AI-generated job candidates are a fast-growing problem in remote hiring. I help businesses build a practical verification protocol for screening and interviews: not expensive enterprise software, just a process that works.

Read the full details → Or ask about this

Not sure which one applies to you?

That is the normal starting point. Take the 60-second self-check, or just send me your website address and I’ll tell you what I can see from the outside.

Get a free check Take the self-check