Risk · Compliance · Strategy · Readiness
Independent cyber security consulting for Australian organisations
We assess your risk, give you a prioritised plan that fits your budget, and stay available when you need advice.
What does a cyber security consultant do for a small or medium organisation?
A cyber security consultant assesses where you are exposed, prioritises fixes by real business risk, aligns you to frameworks such as the Essential Eight and the Privacy Act, prepares you for incidents and insurer questions, and explains it to leadership without the jargon. Cyberstore engagements start from $1,500 plus GST, with ongoing support from $789 a month.
Security leadership, without a full-time hire
Most Australian organisations do not have a dedicated security team, but they still have to answer insurers, satisfy clients, meet Privacy Act obligations and respond when something goes wrong.
We give you a clear picture of your risk, a prioritised plan that fits your budget, and someone experienced to call on. We base our advice on what works in practice for organisations your size.
Organisations engage us to
- Understand their real security posture and exposure
- Meet Essential Eight, Privacy Act and client requirements
- Find vulnerabilities before attackers do
- Prepare for cyber insurance and vendor questionnaires
- Build a security roadmap that matches the business
- Respond well when something goes wrong
// Services
Our cyber security consulting services
Security assessments
External vulnerability scanning, web application reviews, configuration audits and overall security posture reviews.
Compliance and frameworks
Essential Eight alignment, SMB1001, Privacy Act and APP 11 data security, and industry requirements such as APRA CPS 234 and PCI DSS.
Incident response
Triage, containment, investigation, recovery and Notifiable Data Breaches support.
Strategy and risk
Cyber risk assessments, multi-year roadmaps, third-party and supplier risk, and board reporting.
Secure development
Architecture reviews, code review and security built into how custom software is developed and deployed.
Training and awareness
Phishing and password training for staff, upskilling for IT teams and briefings for executives.
// Pricing
Cyber security consulting packages
Starter
Establish your security baseline and fix the most critical exposures.
From$1,500+ GST
- External vulnerability scan (up to 5 domains or IPs)
- Web application security review
- Configuration and access control audit
- Risk-rated findings report with remediation guidance
- Essential Eight gap summary
- 30-minute debrief call
Best for: SMEs, NFPs and small teams needing a clear starting point. One-off engagement.
Book a consultOngoing
Regular oversight, compliance alignment and incident readiness.
From$789/ month + setup
- Everything in Starter
- Monthly vulnerability monitoring and reporting
- Essential Eight alignment and roadmap
- Privacy Act and data security guidance
- Incident response planning and support
- Annual staff security awareness training
- Quarterly strategy call and posture review
- Cyber insurance readiness support
Best for: established organisations wanting professional security oversight. Minimum 3 months.
Book a consultEnterprise
A customised security program for complex or high-risk environments.
Talk to us
- Everything in Ongoing
- Penetration testing (web, network, applications)
- Advanced compliance (APRA, PCI DSS, PSPF)
- Third-party and supply chain risk assessments
- Secure code review
- Board and executive risk reporting
- Dedicated advisor and priority incident response
Best for: larger organisations, government suppliers and regulated industries.
Book a consultPricing is indicative. Final scope depends on your infrastructure, obligations and risk profile. Every engagement starts with a no-obligation consult.
// How we work
How a consulting engagement runs
- 01
Initial consult
No-obligation conversation about your systems, concerns and obligations.
- 02
Scope and proposal
Clear deliverables, timeline and a fixed price.
- 03
Delivery
Assessments, implementation or advisory support as agreed, working with your IT provider.
- 04
Reporting and handover
Clear reports with evidence, risk ratings and remediation steps.
- 05
Ongoing support
Optional retainer for advisory, monitoring and incident response.
// FAQ
Common questions
We do not have an IT security person. Is that a problem?
No. Most of our clients don’t have one either. We act as your part-time security lead: we set priorities, explain risk to leadership and work with your IT provider to get things done.
Which frameworks do you work with?
Mainly the ASD Essential Eight and SMB1001 for small and medium organisations, plus the Privacy Act and Australian Privacy Principles. For larger or regulated clients we also map controls to ISO 27001, APRA CPS 234 and PCI DSS.
Are you independent?
Yes. We do not resell security products or lock you into a platform. Our recommendations are based on your risk, budget and how your organisation works.
What does the Starter assessment give us?
An external vulnerability scan of up to five domains or IP addresses, a web application security review, a configuration and access control audit, an Essential Eight gap summary and a risk-rated report with remediation guidance, plus a debrief call.
Can you brief our board?
Yes. We translate technical risk into business terms: what could happen, how likely it is, what it would cost and what we recommend, in a format a board can act on.
// Keep going
Related services
Essential Eight Assessment
Essential Eight assessments for Perth and WA organisations: evidence-based maturity scores, a risk register and a practical roadmap to Level 2.
Vulnerability Scanning & Pen Testing
Vulnerability scanning, web app testing and penetration testing for Perth organisations, with clear reports, fixes and retests.
Cyber Insurance Readiness
Get your cyber insurance questionnaire right. We verify MFA, backups, patching and email security, close gaps before renewal and document the evidence.
// Next step
Talk to us about Cyber Security Consulting
Tell us what you run and what you are worried about. We will come back within one business day and, if it helps, send you a fixed-price quote.
- No-obligation first consult
- Fixed scope and price before work starts
- A clear written report and next steps
Written and reviewed by Noah Greenstone, Founder and Principal Consultant. Last reviewed 22 October 2026.
Tell us what is going on
We read every enquiry and reply within one business day. If it is urgent, call 1300 566 652.
Organisations Noah and the team have built, secured and supported
