PROTECT | INNOVATE | GROW
Security that protects what comes next.
AI security, identity and access management, cloud security and cyber security consulting for Australian government and enterprise.
SecureT turns complex technology risk into defensible architecture, practical controls and assurance evidence—from strategy and design through to delivery.
Based in Canberra. Working across Australia.
- ASD ISM
- PSPF
- Essential Eight
- NIST
- OWASP
- IEC 62443
START WITH YOUR CHALLENGE
What needs to work better?
Find the problem closest to yours. We'll clarify priorities, constraints and evidence before recommending technologies.
AI agents with access to real business systems?
Govern data access, tool permissions, prompt-injection paths and autonomous actions.
AI security ↗02 / ASSURANCESecurity evidence that needs to withstand review?
Turn ISM, PSPF and Essential Eight obligations into controls and traceable evidence.
Assurance & compliance ↗03 / OPERATIONAL TECHNOLOGYReducing OT exposure without disrupting operations?
Build visibility and secure vendor pathways before changing plant systems.
OT security ↗04 / ACCESS GOVERNANCEGood identity tools, fragmented access decisions?
Improve lifecycle ownership, privileged access and non-human identity governance.
Identity and access ↗05 / CRYPTOGRAPHYUnclear exposure to the post-quantum transition?
Inventory cryptography, prioritise long-lived data and plan for crypto-agility.
PQC readiness ↗06 / CLOUD & PLATFORMSCloud security that needs to be designed in?
Build integrated guardrails across Azure, AWS and Oracle Cloud Infrastructure.
Cloud architecture ↗OUR CAPABILITIES / 11 CONNECTED SERVICES
Specialist depth. One security picture.
Browse the complete SecureT portfolio horizontally, or open the service catalogue for detailed scope and deliverables.
Cyber security consulting
Architecture, risk, assurance and uplift you can defend.
Explore service 02 / CAPABILITYAI and agentic AI security
Secure the data, tools and authority your AI systems actually have.
Explore service 03 / CAPABILITYOT security
Reduce industrial cyber risk without compromising safety or availability.
Explore service 04 / CAPABILITYIdentity and access management
Make access easier to grant, govern, remove and prove.
Explore service 05 / CAPABILITYCloud security
Design cloud landing zones and guardrails before risk spreads.
Explore service 06 / CAPABILITYSecurity engineering
Connect useful telemetry to detections your team can act on.
Explore service 07 / CAPABILITYApplication security and penetration testing
Authorised testing that developers can turn into concrete fixes.
Explore service 08 / CAPABILITYStrategy and advisory
An achievable target state, investment sequence and accountable decisions.
Explore service 09 / CAPABILITYPost-quantum readiness
Know where vulnerable cryptography lives before migration becomes urgent.
Explore service 10 / CAPABILITYCyber resilience and incident response
Prepare the people, decisions and systems needed when an incident occurs.
Explore service 11 / CAPABILITYData protection and privacy
Understand where sensitive information is, who can access it and how to protect it.
Explore serviceDESIGNED AS A SYSTEM
One risk picture.
Not another collection of tools.
Good security architecture connects business decisions to technical delivery. We work across strategy, design, engineering, assurance and operational handover.
OUR WORKING METHOD
Clear scope. Useful outputs. No theatre.
We agree the questions, constraints and decision owners first. A good deliverable should change what happens next.
- 01 / DISCOVER
Define
Agree the problem, risk, stakeholders and success criteria.
- 02 / ARCHITECT
Design
Map trust boundaries, controls, decisions and options.
- 03 / EVIDENCE
Validate
Test the proposed design against threats and obligations.
- 04 / ENABLE
Transfer
Hand over a roadmap, controls and practical assurance material.
IN THE FIELD / AI SECURITY
AI agents can act. The controls must be able to stop them.
Identity, policy enforcement, tool validation and approval belong at trust boundaries outside the language model—not in its prompt alone.
Read the agentic AI threat model ↗AUSTRALIAN FOCUS
Local context. Enterprise-scale problems.
Practical security design grounded in the Australian policy, regulatory and operational environments our clients work in.
Canberra
Government security architecture, ISM, PSPF, assurance evidence and identity governance.
View Canberra expertise ↗NSW / ENTERPRISESydney
AI security, cloud adoption, data protection and access governance in regulated organisations.
View Sydney expertise ↗QLD / OPERATIONSBrisbane
Critical infrastructure, OT, distributed systems and secure third-party access.
View Brisbane expertise ↗RESEARCH & PERSPECTIVES
Useful thinking for difficult decisions.
Technical insight written to help risk owners, architects and delivery teams make better choices.
Threat modelling agentic AI: trust boundaries that matter
A practical security model for AI tools that can read and act inside enterprise systems.
Read perspective ↗PQC / CRYPTO-AGILITYPost-quantum readiness: plan for the transition
Why the first deliverable is a crypto inventory, not a product purchase.
Read perspective ↗IAM / NON-HUMAN IDENTITIESWho owns an AI agent's credentials?
Identity lifecycle, delegated authority and accountable controls for machine identities.
Read perspective ↗