Active assessments
0
One platform for modern compliance
Assess frameworks, collect evidence, track remediation and report posture.
Designed, owned and operated onshore for Australian organisations.
See Constant in action
Watch how teams run assessments, link evidence to controls, and stay ready for assessor review without spreadsheet chaos.
From assessment to audit-ready
Constant replaces scattered tools with one workflow for compliance teams, security leaders, and assessors.
Assess
Run structured assessments against your chosen frameworks with clear control guidance and versioning.
Evidence
Collect artefacts automatically or upload manually. Every control links to the proof that demonstrates it.
Remediate
Assign owners, track gaps, and monitor remediation progress across frameworks and business units.
Review
AI accelerates triage while certified assessors validate critical controls and findings.
Report
Dashboards and exports give executives, boards, and auditors a consistent view of posture.
Frameworks supported
Run compliance and risk programs on one platform. Each framework has dedicated guidance, evidence workflows, and reporting.
View
CPS 234 Information Security
Track APRA CPS 234 capability requirements, evidence, and board reporting for regulated entities.
View
Essential Eight
Track ACSC Essential Eight maturity across all eight strategies with evidence and assessor review.
View
ISO 27001
Prepare for ISO/IEC 27001 certification with structured controls, evidence, and gap tracking.
View
NIST CSF 2.0
Assess and improve cybersecurity posture using the NIST Cybersecurity Framework 2.0 functions.
View
SOC 2 Readiness
Prepare for SOC 2 Type I and Type II audits with Trust Services Criteria evidence tracking.
Risk assessments (1 framework)
Compliance that pays for itself
The cost of cyber risk is rising. Visibility is the first step to reducing it.
Up to 70%
Cut the time spent on audits and evidence collection so your team can focus on what matters most.
3x faster
Move from manual spreadsheets to automated workflows and real-time progress tracking.
100% Australian
Your data stays in Australia, protected by Australian owned infrastructure and Australian security experts.
Real-time visibility
Always know your compliance status with live dashboards, automated alerts, and audit-ready evidence on demand.
Platform FAQs
What frameworks does Constant support?
Constant supports CPS 234 Information Security, Essential Eight, ISO 27001 readiness, NIST CSF 2.0, SOC 2 readiness, and structured Risk Matrix assessments. You can run multiple frameworks within one tenant.
Is Constant only for Essential Eight?
Essential Eight is our most mature framework with deep ACSC maturity mapping, but the platform is built for multiple compliance and risk frameworks used by Australian organisations.
How does Constant differ from a GRC tool?
Constant combines framework-specific assessments, evidence collection, assessor-led review, and Australian onshore hosting in one product - rather than generic policy libraries that require heavy customisation.
Can MSPs use Constant for multiple clients?
Yes. MSP partners use Constant to deliver consistent assessments, evidence collection, and reporting across client portfolios with scalable methodology.
Where is data hosted?
Constant is designed, owned, and operated in Australia with onshore data residency. See our Security page for detail on our security practices.
Start your compliance journey today
Choose the right plan for your organisation. Scale seamlessly as your compliance needs evolve.
Ready to simplify your compliance process?
Book a demo and see constant in action.
All Paid Plans Include
-
Unlimited human assessor reviews
-
Evidence collection
-
AI-assisted pre-reviews
-
Compliance dashboards
-
Australian business-hours support
-
On-demand reporting
-
Control owners and tasks
-
Evidence uploads
-
Maturity and gap tracking
-
Role-based access controls
-
Framework guidance
-
5×5 Risk Matrix
-
Australian data residency