21 Henry
21 Henry is building a sovereign data fabric for the Australian Public Service, critical infrastructure and regulated industry. It maps data, controls which people and AI can see it, and audits every action. When data is shared, the labels travel with it but the owner keeps the keys.
Aona
Let your team use AI with confidence. Aona protects sensitive company data, enforces AI policies and gives security teams visibility into employee AI use. Discover unapproved tools, prevent risky sharing and support compliance with clear reporting. Put Workforce AI Security into practice.
Assure Docs Pty Ltd
Assure Docs simplifies onboarding and compliance for regulated industries. Our AI platform combines KYC, KYB, AML and other compliance checks with document verification, interviews, digital signing and reusable verified evidence. Organisations can reduce fraud, accelerate onboarding and make accountable decisions, supported by transparent audit trails and humans retaining final authority.
BankVault Pty Ltd
Passwords are hard to remember, easy to steal, and the weakest link in security.
MasterKey is Invisible Passwordless MFA for web apps, deployed in minutes with no user software or setup. Phishing-resistant Multi-Factor Authentication in one step, not two. It removes the friction stalling passwordless, so security reaches every user.
MasterKey is Invisible Passwordless MFA for web apps, deployed in minutes with no user software or setup. Phishing-resistant Multi-Factor Authentication in one step, not two. It removes the friction stalling passwordless, so security reaches every user.
Castlepoint Systems
Castlepoint Systems is command and control AI for enterprise information. It reads, registers and classifies information across every format and system, automatically identifying risk and sensitive data. Using Explainable AI, Castlepoint enables organisations to discover, classify, manage and automatically redact sensitive information at scale, without moving data from source systems.
CSIRO
CSIRO is Australia's national science agency, delivering solutions for a productive, sustainable and secure future.
CSIRO. Improving the life of every Australian.
CSIRO. Improving the life of every Australian.
Cyrover Lab - A Cybergiene Group Brand
Cyrover Lab tackles cyber resilience challenges others overlook, fear or dismiss as impossible. From our Sydney-based private cloud, we optimise specialised small learning models, pioneer threat intelligence standards and correlate disconnected signals across unclear boundaries. Powering the Cyrover App, we’re building portable technology that carries digital trust signals across work, personal life and across countries, connecting fragmented intelligence to build resilience from the ground up.
DTEX
Australian government and enterprise teams are adopting AI faster than they can govern it. DTEX gives security leaders visibility of how staff and AI agents use data and tools, so they can spot insider risk, shadow AI and misuse early, without compromising privacy.
Elev8 Resilience
Overwhelmed by alerts, reports and competing priorities? Perlustra helps organisations turn scattered cyber, risk and assurance findings into clear, evidenced priorities. Guided by the questions your business needs answered, it connects intelligence to decisions and action. An Elev8 Resilience product, designed to complement your existing security tools, teams and providers.
ExeQuantum Pty Ltd
EQCore is ExeQuantum's sovereign Cryptographic Control Plane, taking organisations from discovery to post-quantum migration in one platform. CipherScout maps cryptography across ten surfaces into an audit-ready CBOM. CipherForge deploys formally verified ML-KEM and ML-DSA across cloud, on-premise or air-gapped environments. Your keys stay yours. Melbourne-built, ISO 27001 certified, AUKUS authorised.
GovernVeil Pty Ltd
The evidence layer for enterprise AI. GovernVeil governs every AI action inside your own environment: prompts, agents, tool calls, documents and model responses. Sensitive values are caught before they leave, and every decision is signed to a tamper-evident ledger. Australian-owned and self-hosted. Now booking pilot.
Liarbird
Liarbird is an autonomous cyber defence platform for enterprises that assume breach. Using intent-based detection and response, it detects and contains sophisticated human and AI attackers, protecting critical systems while making hostile agentic attacks less effective and more costly to sustain. Built for today's threats. Ready for an AI-native world.
Lively
OR NOT?™ is the platform setting a new standard for the human element of cyber. Updated daily across every channel a scammer uses, it builds the instinct to spot social engineering and measures it in real time. Winner, AISA Innovation in Cyber 2026. Phishy or Not? for business. Dodgy or Not?™ for schools.
MyRISK
MyRISK, a Gartner Cool Vendor, builds Australian governance technology. MyRISK Trace records risk acceptances, control waivers, supplier exceptions and AI approvals as sealed, tamper-evident records when they’re made, so decisions are replayed, not reconstructed. Trace runs on MyRISK Core, a sovereign GRC platform hosted onshore for government and critical infrastructure.
National Office of Cyber Security
The National Office of Cyber Security (NOCS) supports the National Cyber Security Coordinator. We work closely with industry and critical infrastructure operators to build a cyber-resilient Australia. The Coordinator leads across the whole of Government the coordination and triaging of action in response to a significant cyber security incident.
Ozishield Fortify
OziShield Fortify lets organisations register their official websites, emails, phone numbers and SMS sender names, plus what they never ask customers to do. Customers check any message on the organisation's website and see Matches or Does not match. It warns on unexpected bank-detail changes. Built and hosted in Sydney.
Psyber
Cyber threats target human psychology, yet most training still just ticks a compliance box. Built on behavioural science, Psyber sets a new standard for human cyber resilience. We combine our automated Psyber Instinct platform with expert-led training and consulting, pairing continuous micro-learning with hands-on expertise to transform employee habits and protect Australian organisations.
PTI Capability
Aletheia inverts the ontology-first orthodoxy to manage the volume of unstructured information hitting government agencies, organisation and teams. Entity types, attributes and relationships emerge from what the work actually contains. It is built to think the way experienced investigators and intelligence analysts think, applying an organisation’s Standards for Defensible Reasoning (SDRs). Its network graph becomes a living artefact that grows to fit the mission with every analytical claim traced back to the record, page and paragraph that supports it.