Achieved maturity
L0
Always-on compliance
Australia's compliance platform. Designed, owned and operated onshore. Built for modern cyber compliance frameworks.
Constant replaces spreadsheets, scattered evidence and audit panic with live compliance visibility and prioritised mitigations.
Because compliance isn't a checkbox activity, it is constant.
Australian Built and Owned
Bringing Constant visibility to organisations across Australia
One Australian platform for ongoing compliance
Constant connects framework requirements, control owners, evidence, AI-assisted pre-review, human assessor review, and reporting. Start with the product or go directly to the topic you are researching.
Supported frameworks
Essential Eight, CPS 234, ISO 27001, NIST CSF 2.0, SOC 2 readiness, and risk assessments on one platform. Each framework has a dedicated page with guidance, evidence workflows, and reporting.
View
CPS 234 Information Security
Track APRA CPS 234 capability requirements, evidence, and board reporting for regulated entities.
View
Essential Eight
Track ACSC Essential Eight maturity across all eight strategies with evidence and assessor review.
View
ISO 27001
Prepare for ISO/IEC 27001 certification with structured controls, evidence, and gap tracking.
View
NIST CSF 2.0
Assess and improve cybersecurity posture using the NIST Cybersecurity Framework 2.0 functions.
View
SOC 2 Readiness
Prepare for SOC 2 Type I and Type II audits with Trust Services Criteria evidence tracking.
Risk assessments (1 framework)
From complexity to audit ready in 4 simple steps
Guidance
Clear control guidance written by certified assessors. No more interpreting the Essential Eight on your own.
Evidence
Upload evidence manually or let Constant collect it automatically. Every control linked to the artefact that proves it.
Review
AI flags gaps in seconds. Certified assessors review what matters. You see exactly where you stand.
Report
Audit-ready dashboards and exports. Show progress to your exec, your board, or your assessor with one click.
Compliance that pays for itself
The cost of cyber risk is rising. Visibility is the first step to reducing it.
Up to 70%
Cut the time spent on audits and evidence collection so your team can focus on what matters most.
3x faster
Move from manual spreadsheets to automated workflows and real-time progress tracking.
100% Australian
Your data stays in Australia, protected by Australian owned infrastructure and Australian security experts.
Real-time visibility
Always know your compliance status with live dashboards, automated alerts, and audit-ready evidence on demand.
Everything you need for modern compliance
Constant brings together control management, automation, and insights to help your team stay ahead of risk and audit with confidence
Automation Engine
Save time. Reduce risk. Stay consistent.
Automatically collect evidence from integrated systems or upload manually when needed. Standardised workflows keep your compliance on track.
Onshore by Design
Be ready, always.
Constant is hosted, owned, and operated in Australia. No offshore data transfers, no jurisdictional grey area, no awkward security conversations with your clients or partners.
Superior Reporting
One click, Complete clarity
Generate executive-ready reports anytime and view our real-time dashboards that show your compliance posture at a glance.
AI + Human Review
Intelligent insights, Human assurance.
Combine AI efficiency with human expertise. Every control is reviewed by a member of our team to ensure the final outcome is accurate, practical, and delivered quickly.
Loved by security and IT leaders
Hear what some of our clients have to say.
Mosaic Community Care adopted Constant to formally assess and track our Essential Eight maturity for the first time. The platform made what could have been an overwhelming process genuinely manageable.
The AI review feedback is specific and actionable. When evidence is missing or insufficient, it tells you exactly what to provide rather than leaving you to interpret vague guidance. That alone saved significant time across 50+ controls.
The team is easy to work with and very responsive!
Showing testimonial from Mosaic Community Care
Constant FAQs
What is Constant?
Constant is an Australian cyber compliance platform for managing frameworks, controls, evidence, remediation, assessor review, and reporting in one workflow.
Which compliance frameworks does Constant support?
Constant supports Essential Eight, CPS 234, ISO 27001 readiness, NIST CSF 2.0, SOC 2 readiness, and risk-management workflows.
Does Constant use AI instead of human assessors?
No. Constant uses AI to pre-review evidence and identify likely gaps. Human assessor review remains part of the assurance workflow.
Where is Constant operated and customer data hosted?
Constant is designed, owned, and operated in Australia by Steltek Pty Ltd and lists Australian data residency. The Security page contains the current platform details.
Start your compliance journey today
Choose the right plan for your organisation. Scale seamlessly as your compliance needs evolve.
Ready to simplify your compliance process?
Book a demo and see constant in action.
All Paid Plans Include
-
Unlimited human assessor reviews
-
Evidence collection
-
AI-assisted pre-reviews
-
Compliance dashboards
-
Australian business-hours support
-
On-demand reporting
-
Control owners and tasks
-
Evidence uploads
-
Maturity and gap tracking
-
Role-based access controls
-
Framework guidance
-
5×5 Risk Matrix
-
Australian data residency