SMB1001 and Essential Eight ML1 in one place.
Votan Lens helps managed service providers take their clients through SMB1001 certification and Essential Eight Maturity Level 1 without living in spreadsheets. Answer a criterion once and it contributes to both frameworks wherever they overlap, with evidence capture and client-safe reporting for each. Currently in pilot with a working MSP.
Two frameworks, double the spreadsheets.
Written for MSP owners, vCISOs, and compliance leads who are being asked to track SMB1001 and Essential Eight ML1 for the same clients, faster than spreadsheets can keep up.
- 01
MSPs are being asked to demonstrate SMB1001 tiers (Bronze through Diamond) and Essential Eight Maturity Level 1 for the same clients.
- 02
The 2026 SMB1001 update adds email authentication, EDR, and awareness training on top of the existing criteria.
- 03
Tracking two frameworks in separate spreadsheets doubles the work and drifts out of sync within a week.
- 04
The same control ends up captured twice, once for SMB1001 and once for Essential Eight, with no shared source of truth.
Four things, done properly.
Kept at capability level on purpose. Product is in pilot, and screenshots or invented metrics would age badly and misrepresent where we are.
- 01 · questionnaire
Structured questionnaire for SMB1001 and Essential Eight ML1.
Every SMB1001 criterion (Bronze through Diamond) and every Essential Eight ML1 control captured as a specific question with clear evidence requirements. No more interpreting either standard for each client from scratch.
- 02 · evidence
Evidence captured once per control.
Attach documents, links, or screenshots against the control they satisfy. Evidence is attached to the control, not to a framework, so nothing is captured twice.
- 03 · coverage
Dual-framework coverage view.
Answer a criterion once and it contributes to both SMB1001 and Essential Eight ML1 wherever they overlap. See where a client stands against each framework at a glance, kept in sync automatically.
- 04 · reporting
Client-safe reporting for both frameworks.
Views the client sees, views the MSP works in, and exports ready for auditors, for SMB1001 and Essential Eight ML1 side by side. Separate concerns without duplicating spreadsheets.
Built alongside a working MSP. Not in a vacuum.
Votan Lens started because an MSP we work with kept running into the same wall: every new client meant another spreadsheet, another shared drive, and the same controls re-investigated across SMB1001 and Essential Eight.
We built the first version by sitting alongside that MSP on real client certifications. Every field, every question, and every export exists because someone in the room needed it that week. That is why the product feels opinionated, and that is why we are keeping the pilot small while we get it right.
Votan Lens is in pilot. Capabilities are evolving and the roadmap is being shaped directly by the MSPs in the program. Nothing on this page is a screenshot or a guaranteed feature. If it matters to you, ask.
Frequently asked questions
- SMB1001 is an Australian cyber security certification scheme designed for small and medium businesses. It has tiered levels (Bronze through Diamond) and is increasingly requested by insurers, supply-chain partners, and customers. The 2026 update introduces additional requirements including email authentication, endpoint detection and response, and security awareness training.
Register for Votan Lens early access.
Tell us a little about your MSP, how many clients you support, and where SMB1001 and Essential Eight ML1 tracking is hurting you. I will personally read this and reply within one business day.