Practical cyber security for Australian businesses. We harden your systems, close the gaps, and give you the evidence to know it’s working.
Engineer-led. Clear scope. Measurable outcomes.
We deliberately keep the service list short. Everything below is something we deliver repeatably, with artefacts your IT team, MSP, auditor, or insurer can actually use.
Conditional Access, secure baselines, identity hygiene, mail hygiene, logging, and privileged access reviews — the controls that actually stop business email compromise.
Fortigate, pfSense, Palo Alto, or vendor-agnostic review. We rationalise rulesets that have grown for a decade and document what's left.
Essential Eight-aligned hardening: OS baselines, application control options, USB and device lockdown, secure config.
Explore serviceTargeted scanning, triage, and remediation plans your IT team or MSP can actually execute — ranked by real exploitability.
Explore serviceCompromise assessment, containment, and cleanup across accounts, endpoints, and email. Focused on rapid, practical recovery.
Explore servicePolicy development aligned to Essential Eight, ISO 27001, and NIST CSF — including board-level summaries that a non-technical director can act on.
Explore serviceRunbooks, escalation paths, backup validation, and tabletop exercises so the plan works on the day it's needed rather than the day it was written.
Explore serviceBring your Essential Eight program into focus. Track control status, surface configuration drift, and turn technical findings into a roadmap your team can work through.
Essential Eight controls, organised by maturity level.
A factory with a flat network and 24-hour production is a different problem to a council with FOI obligations. We start from the operating reality, not a generic checklist.
Flat networks, legacy PLCs and HMIs, and production lines that cannot take downtime for a patch window.
Read more →Cold chain and batch systems where an outage is a food safety event, plus customer audits from major retailers.
Read more →Many small sites, high staff turnover, and invoice volumes that make business email compromise genuinely lucrative.
Read more →Public records obligations, constrained budgets, and a service catalogue far wider than the IT team's headcount.
Read more →Client data under NDA, supply-chain questionnaires, and cyber insurance renewals that keep getting harder.
Read more →The pattern is usually the same: Microsoft 365, Windows endpoints, and a firewall nobody has revisited in years.
All industries →No 90-day discovery phase. We aim to have you measurably safer inside the first engagement, with evidence you can hand to an auditor.
30 minutes to understand your environment, obligations, and what's actually keeping you up at night.
We review the real configuration — tenant, edge, endpoints — not a questionnaire, and rank findings by exploitability.
Changesets your team or MSP can implement, or hands-on delivery by us. Documented as we go.
Re-test, evidence pack, and a prioritised backlog for what comes next. Optional ongoing monitoring.
Every engagement ends with practical deliverables your team can own.
DingoSec completely overhauled our firewall and M365 security in a matter of weeks. Highly pragmatic and no fluff. They operate exactly as advertised.
— CIO, National Logistics Firm
Their Essential 8 roadmap finally gave our board the clarity we needed. We now have a verifiable security baseline and can prove it to our insurers.
— IT Director, Manufacturing Sector
DingoSec focuses on Australian small and mid-sized organisations that need to make meaningful security progress without hiring a full-time internal security team.
Typical clients include manufacturing, food and beverage, logistics, regional councils, and services businesses built around Microsoft 365, Windows endpoints, and a firewall that “works” but hasn't been revisited in years.
Engagements are remote-first across Australia, with on-site work by arrangement where factories, warehouses, or data centres are involved.
Work is prioritised around threats that matter: ransomware, business email compromise, account takeover, and destructive insider activity.
Deliverables are pragmatic: secure baselines, changesets that your IT team or MSP can implement, and clear documentation. We can also deploy automated solutions to continuously track control status for Essential Eight programs.
The goal is to leave you measurably safer with artefacts that stand up to auditors, insurers, and customers — not a slide deck that gathers dust.
A 30-minute scoping call is usually enough to tell you where the real risk sits and what a sensible first engagement looks like. No obligation, no sales theatre.
