Our managed services keep your controls working day to day: 24/7 monitoring and response, secure configuration, web application protection and identity security, run by the same senior team that tests and advises.
years testing for government and enterprise
CREST-accredited through CREST ANZ
Our SOC is ours, not outsourced, and runs on Splunk Enterprise Security in per-customer tenancies.
Every service is backed by the testers and GRC specialists who know how attacks work and what auditors expect.
Each service can run on its own or alongside the others, with findings shared across monitoring, hardening and identity.
24/7 security operations, log analytics and expert investigation across cloud, on-premises and hybrid environments.
Our AI-driven review of SOC triage decisions, catching misclassified alerts and improving detection accuracy.
AWS WAF, Azure WAF and Cloudflare WAF, configured, monitored and tuned to block attacks without blocking users.
SOEs, Intune and Ansible baselines aligned with the Essential Eight and CIS Benchmarks, rolled out safely.
Duo, Microsoft Entra ID and Okta, designed and run to stop account takeover without adding friction.
Independent, senior and practical, from a team that has been operating for more than 25 years.
Our consultants bring deep technical and governance knowledge from more than 25 years of hands-on security work.
Our advice and services focus on risk, outcomes and evidence, not product sales.
We work with technical and business stakeholders to deliver realistic, sustainable improvements, and we are happy to complement your in-house team.
We understand the regulatory, threat and industry landscape Australian organisations operate in.
No. Our SOC is run by our own team, on Splunk Enterprise Security hosted in per-customer (not shared) tenancies in AWS, with SAIINT reviewing triage decisions.
Yes. Our managed services support internal IT and security teams by reducing noise, improving detection quality and giving independent assurance that potential attacks are not being overlooked.
Yes. We provide consulting and managed security services to organisations across Australia, in cities and regional areas, and to clients in New Zealand and Asia on specialist projects.
Australian organisations across legal, finance, technology, utilities, education and professional services, from mid-sized firms through to large enterprises and government.
Want stronger day-to-day security without building it all in-house? We can scope a managed service around your environment and risks.
Start with one service or combine several; each is run by our own senior team.
Practical and experienced Australian ISO 27001 and ISMS consulting services. We will help you to establish, implement and maintain an effective information security management system (ISMS).
dotSec’s penetration tests are conducted by experienced, Australian testers who understand real-world attacks and secure-system development. Clear, actionable recommendations, every time.
dotSec stands out among other PCI DSS companies in Australia: We are not only a PCI QSA company, we are a PCI DSS-compliant service provider so we have first-hand compliance experience.
Web Application Firewalls (WAFs) are critical, protecting web apps and services by inspecting and filtering malicious requests before they reach your servers. Web page or API, a WAF is your first defence.
Multi-Factor Authentication (MFA) and Single Sign-On (SSO) reduce password risks, simplify access, letting verified and authorised users reach sensitive systems, services and apps.
dotSec provides comprehensive vulnerability management services. As part of this service, we analyse findings in the context of your specific environment, priorities and threat landscape.
We don’t just test whether users will click a suspicious link — we also run exercises, simulating phishing attacks that are capable of bypassing multi-factor authentication (MFA) protections.
dotSec’s penetration testing services help you identify and reduce technical security risks across your applications, cloud services and internal networks. Clear, actionable recommendations, every time!
dotSec has provided Australian managed SOC, SIEM and EDR services for 15 years. PCI DSS-compliant and ISO 27001-certified. Advanced log analytics, threat detection and expert investigation services.
We provide prioritised, practical guidance on how to implement secure configurations properly. Choose from automated deployment via Intune for Windows, Ansible for Linux or Cloud Formation for AWS.
Secure web hosting is fundamental to protecting online assets and customer data. We have over a decade of AWS experience providing highly secure, scalable, and reliable cloud infrastructure.
dotSec helps organisations to benefit from the ACSC Essential Eight by assessing maturity levels, applying practical security controls, assessing compliance, and improving resilience against attacks.
Evaluation against the CIS 18 Controls establishes a clear baseline for stakeholders, supporting evidence-based planning, budgeting, maturity-improvement and compliance decisions
We have over 25 years of cyber security experience, providing practical risk-based guidance, advisory and CISO services to a wide range of public and private organisations across Australia.