Penetration testing. Red team. Vulnerability research.
A focused offensive security team in Australia. We test the things adversaries actually attack and write up what we find.
Network, cloud, identity.
External and internal networks, AD and Entra ID abuse paths, cloud perimeter, wireless. We map the routes attackers would take and prove them.
More → ApplicationWeb, API, mobile, LLM.
Code-assisted testing with reproducible findings. Auth and tenancy, business logic, RAG and agent boundaries.
More → Adversary simulationRed, purple, social.
Objective-based campaigns with approved scope and Rules of Engagement. Phishing, social engineering, ransomware simulation.
More → IoT · Embedded · OTDevice, firmware, operations.
Firmware, connected ecosystems, wireless surfaces, update paths, and production-safe OT validation.
More →-
14–16 OCT
Upcoming talk
The new control plane of macOS security
How code-signing, entitlements, and policy daemons combine to enforce trust on modern macOS. Australian Cyber Conference 2026, Melbourne.
↗ -
06.07.2026
Debrief 002
WebKit memory disclosure, Splunk, and LiteLLM
Original WebKit research, two lab-rebuilt flaws, and six actions Australian security leaders can assign now.
→ -
29.06.2026
Apple advisory
CVE-2026-43740 · Apple WebKit
Out-of-bounds read in WebKit's YARR JIT regex engine. Case-insensitive backreferences could disclose process memory through crafted web content; the fix adds the missing bounds check.
↗ -
16.03.2026
Post
Heap out-of-bounds in decompression loops
The bug class behind a chunk of recent zero-clicks. Integer overflows, missing bounds checks, and why hardened codebases still fall over the same edge.
→ -
2026
Advisory
CVE-2026-28922 · Apple CoreMedia
Apple CoreMedia privacy issue. An app could access private information.
↗ -
2025
Talk
From patch panic to proactive defence
Managing edge device vulnerabilities in 2025. Melbourne Cyber Conference, invited speaker.
↗
Email is the fastest way to reach us
hello@
We read every message and reply within a business day.
- Location
- Melbourne · Brisbane · Sydney
- Hours
- Mon – Fri
- Response
- Within 1 business day