Offensive security,
the way it should
be done.
CISO Cyber is an Australian-owned offensive security practice. We pair real human hackers with a continuous AI testing platform, sovereign, onshore, and independent by design, to give organisations honest coverage of the way they'll actually be attacked.
Built by
operators
For most providers, a penetration test is a fixed block of consultant-days, scope narrowed until it fits the budget, then a PDF weeks later that few executives read. Attackers don't work that way. They automate reconnaissance across everything you own, continuously, and only need to be right once.
CISO Cyber was built to close that gap. We put a machine's reach behind a specialist's judgement: our own AI platform runs continuous testing across your full attack surface, while senior operators do the creative, adversarial work that automation can't, chaining flaws into real breaches and standing behind every finding.
Testing is deliberately kept independent from AI development, so accountability sits with the people signing off the work. Everything is delivered onshore in Australia, at a fixed price, with retests included, and no surprises on the invoice.
Two decades at
the front line
CISO Cyber is led by operators who helped shape independent security testing in Australia.
One of Australia's most trusted offensive security operators, with more than 20 years testing the systems the country runs on. Rob founded Pure Hacking in 2002, a pioneering independent penetration-testing firm that became a benchmark for the industry, and went on to found CXO Security, translating deep offensive expertise into counsel for business leaders.
At CISO Cyber he sets the testing standard and safeguards the independence of every engagement.
A cyber-security executive with more than two decades across security leadership, consulting and government. Tony holds an MSc and is CISSP and C|CISO certified, and is a widely published author, sought-after keynote speaker and media commentator on the industry.
As CEO he sets the direction of the practice and translates deep technical work into strategy the board can act on.
Principles we
don't bend
Work with the team
Senior operators, AI-accelerated coverage, board-ready results. We respond within one business day.
Book a pen test assessment →Human + AI cyber security for Australian business, government and regulated industry.