Named individual carrying accountability for security and AI risk to the board.
For Organisations that need accountable risk leadership without a full-time hire.
From AUD 8,000 per month
Services
Three ways in, under a single accountable practitioner: a fractional CISO who answers to your board, the security frameworks you are measured against, and security for the AI you have deployed. Most clients start with one and add the others as the work shows what is needed.
Fractional CISO
A named security lead, without the full-time hire.
We hold the accountable seat for your security and AI risk: board and committee reporting, a quarterly posture re-assessment, policy upkeep, vendor risk reviews and AI incident response support, with a direct line to the person doing the work.
Security frameworks
Frameworks that run, not binders that sit.
We map where you stand against Essential Eight, ISO 27001, APRA CPS 234 or NIST CSF 2.0, give you a remediation roadmap in priority order, and test the controls the way an attacker would.
Two-week, fixed-price information security assessment against ISO 27001, NIST CSF 2.0 and Essential Eight.
For Organisations that need a defensible baseline before an audit or a client review.
AUD 18,000 to 30,000 fixed fee
Two-week, fixed-price posture report against the NIST AI Risk Management Framework.
For Boards and risk committees that need to know where their AI exposure actually is.
AUD 15,000 to 25,000 fixed fee
Manual penetration testing delivered by a certified offensive practitioner, with no automated scans rebranded as pen tests.
For Anyone needing adversary-grade testing of conventional applications, cloud or networks.
AUD 12,000 to 90,000 by engagement type
We do not invent frameworks. We deliver against the standards your regulators, auditors, and board already recognise.
AI security
Attack your AI before someone else does. Then contain it.
We test the AI you have deployed the way an adversary would, deploy new tools with the security controls already in place, and build the environment an agent runs inside, so that a manipulated agent is a contained event rather than an incident.
We attack your AI system the way an adversary would, then tell you what broke and how to fix it.
For Security and technology leaders with AI already in production and a board asking who tested it.
AUD 18,000 to 75,000 by scope
We design and deploy AI tools, agents and integrations with the security controls already in place.
For Organisations about to deploy, or running on vendor defaults and wanting it done properly.
From AUD 8,000 per tool
The environment an agent runs inside, so that a manipulated agent is a contained event rather than an incident.
For CTOs about to give an agent access to production systems.
Scoped per engagement
Digital CISO Agent
In pilotNarrates the security evidence you supply against a control catalogue, and red teams an AI endpoint you nominate. It does not test your network or infrastructure, and observes a domain from outside only where its owner has published a consent record.
For Organisations that have to show an insurer, an auditor or a board what was checked, and what was not.
Free while it is a pilot
Get started
Not sure which one you need?
A thirty-minute discovery call costs nothing. We confirm fit, scope and timing, then issue a fixed-fee statement of work within two business days.