Siege Cyber is an Australian owned and operated cyber security company, based in Brisbane and working with clients in every state and territory. We are CREST accredited at company level, and every tester and compliance consultant on the team is based in Australia. For a growing number of our clients, particularly those supplying government or Defence, that is a contractual requirement rather than a preference.
Most of what we do is delivered remotely, because that is how an attack would happen. An external penetration test, a web application test, an API test and the great majority of compliance work need no one on site, so a business in Perth gets the same engagement, the same testers and the same price as one down the road from our office.
Location starts to matter in three situations:
Everything else, including the scoping conversation, the debrief and the retest, works perfectly well over a call.
We work nationally. These pages cover what we do in each area, who we typically work with there and the regulatory pressures specific to that market.
If your city is not listed, it does not mean we cannot help. It means we have not written the page yet. Get in touch and we will tell you straight whether we are the right fit.
Penetration testing. Web applications, APIs, internal and external networks, cloud, mobile and wireless, delivered by CREST accredited testers with a retest included. Prices are published on our penetration testing pricing page.
Compliance and certification. ISO 27001, SOC 2, ISO 42001, ASD Essential 8 and DISP, delivered as a fixed monthly programme rather than hourly consulting. The numbers are on our compliance pricing page.
Advisory. Virtual CISO support, incident response planning, tabletop exercises and security awareness training.
Three reasons come up repeatedly. Time zones, because a critical finding at 4pm on a Thursday is a phone call, not an overnight ticket. Context, because an Australian team already knows what the Privacy Act, the SOCI Act, APRA CPS 234 and the Essential Eight actually require, and what an Australian auditor will ask for. And data residency, because for a lot of contracts the question of who handles your findings, and where, is not negotiable.
Every client we have taken to a SOC 2 or ISO 27001 audit has passed it.
Tell us where you are and what you are trying to achieve, and we will come back with a fixed price and a realistic timeline. If we are not the right fit, we will say so.
Next step: Book 30 minutes with Peter, or send us your details.