Our core
Cyber Security
Protect, test and monitor your business, and meet your compliance obligations.
Cyber security company · Managed IT · Secure AICyber security company
Cyber security that protects your business, your people and your AI.
Managed security, penetration testing and compliance uplift, plus security-first managed IT and safe AI adoption for your team.
Illustration · not live data
You talk to a security specialist, not a call centre.The Catharsis security team
Illustration · not live data
- EndpointEDR on laptops and servers
- EmailPhishing and BEC
- Cloud & AIMicrosoft 365 · Copilot
- ISO/IEC 27001:2022We hold the certification we implement
- Registered supplierBuyICT · buy.nsw
- 5 or more staffBusinesses, government and regulated organisations
- Based in SydneyOn-site across Greater Sydney, remote services Australia-wide
Vendors we configure and support
In short
Catharsis Cyber Security is a Sydney cyber security company, based in Roseville NSW and certified to ISO/IEC 27001:2022. It provides managed security, penetration testing, ASD Essentials readiness and ISO 27001 consulting, plus security-first managed IT and secure AI adoption, for Australian organisations with 5 or more staff and for government and regulated buyers.
01Start where you are
What's prompting the conversation?
Many conversations start with one of these. Pick the closest and we'll show you where to start. You won't get a sales sequence.
"A customer sent us a security questionnaire"
Prove your security to customers, insurers and boards
We put together the evidence they ask for: written policies, a control baseline and a risk summary you can share.
"A tender asks which ASD controls we have"
Put the controls ASD prioritises in place, ready for ASD Essentials
We assess you against ASD's current maturity model, then help you uplift to the level you need.
"Our IT provider doesn't really own security"
Get a team that runs your security tools and acts on alerts
Endpoint, email, Microsoft 365 and vulnerability scanning, configured, watched and tuned by our security team.
"Staff are already using Copilot and ChatGPT"
Adopt AI without leaking sensitive data
An AI use policy, a permission clean-up before Copilot rollout and governance aligned with ISO/IEC 42001.
02What we do
A cyber security company first.
Everything starts with security. The IT, AI and software we deliver are built on top of it.
Managed IT
Security-first IT support, Microsoft 365, networks, backup, hardware and licensing.
All managed IT services (7)Secure AI
Adopt AI safely: governance, Copilot readiness, automation and private AI.
All secure AI services (5)Development
Secure websites, custom software and automation, built by a security company.
03Care you can measure, not promises
How we work with you
Three steps from the first conversation to change you can see in your own reports.
We listen first
We look at how you work today and tell you, in plain English, which risks matter most, before we propose anything.
Free · no obligationFix what matters most
A prioritised plan mapped to the frameworks you answer to, so each fix also counts toward your compliance.
Prioritised · framework-mappedWe stay accountable
Regular reviews show what changed, what is still open and what comes next, so progress is something you can see.
Regular reviews
Your three priorities right now
Written for the person who signs off the budget. Technical detail is in the appendix for your IT team.
- Fix nowRisk to operations
- PlanScheduled with you
- DoneClosed since last report
- ASD · MFATurn on phishing-resistant MFA for adminsCatharsis
- M365Remove external forwarding on shared mailboxesYour IT
- ASD · PatchPatch the internet-facing VPN applianceCatharsis
Reviewed with you in a short call. You decide what happens next.
04How our team works
Specialists, not a ticket queue.
One team that learns your environment and stays with it, with the experience government and regulated buyers expect.
What we commit to before any work starts.
- A fixed scope and a written quote
- Your data handled under our certified ISMS
- Response targets and coverage agreed with you in a written SLA
The people who scope it, do it
The security specialists who assess your environment plan the work and stay involved until it is finished. No hand-offs to a ticket queue.
One team across security, IT and AI
Security, managed IT, secure AI and development sit with one team, so nothing falls between two providers.
05ASD Essentials
Get ready for ASD Essentials.
ASD has released the ASD Essentials series, which will replace the Essential Eight. The transition timeline hasn't been set, so organisations are still assessed against the current model today.
Maturity levels don't convert automatically to ASD Essentials ratings, so a baseline now makes the move easier later.
Today · eight strategies
- Patch applications
- Patch operating systems
- Multi-factor authentication
- Restrict administrative privileges
- Application control
- Restrict Microsoft Office macros
- User application hardening
- Regular backups
ASD Essentials · Phase 1
- Boundary services
- Identity services
- Governance and culture
- Visibility and response
06Try before you commit
See it working on your systems first.
Proof-of-value trials for organisations ready to evaluate properly.
Free
Free security health check
A short review of your key security controls with a security specialist, then a ranked list of your biggest risks and what to fix first.
Book a health check14days
14-day email security trial
Run email security on your own Microsoft 365 or Google Workspace mailboxes for 14 days and see the phishing, malware and impersonation attempts it catches.
Start the email trial14days
14-day endpoint security trial
Try endpoint detection and response (EDR) on your own devices for 14 days, set up and watched by our security team, with a findings review at the end.
Start the endpoint trial30days
30-day vulnerability management trial
For organisations with 65 or more endpoints or users: 30 days of scanning and a prioritised list of the vulnerabilities that matter most, explained by our team.
Start the 30-day trialOffers are provided at our discretion. Trials are proof-of-value engagements for organisations actively evaluating a purchase, starting with a scoping call and agreed success criteria. Offer terms.
07Straight answers
Cyber security questions, answered
Can't see your question? Ask a specialist and get a straight answer.
Ask a specialistShould we pause our security uplift until ASD Essentials arrives?
No. ASD does not recommend slowing or stopping uplift against its current maturity model, which stays in use until a transition timeline is set. We keep your uplift moving and record your current maturity, so you have a baseline to work from when the change comes.
Do you provide managed IT support as well as cyber security?
Yes. Our managed IT is security-first. Every managed IT plan includes helpdesk, device management and Microsoft 365 administration with a security baseline built in, including multi-factor authentication (MFA) and patching, rather than sold as an extra. Networks and backups are included or added depending on the plan.
Can you help us use AI safely?
Yes. Beyond policy and Copilot preparation, we run AI risk assessments aligned with Australia's Guidance for AI Adoption. For sensitive work we can also set up private AI, on your own hardware or in a private cloud, so prompts and documents stay on systems you control.
How much do your services cost?
Most services are quoted after a short scoping conversation, because the main drivers are the number of users, sites, systems and applications in scope. A few have published starting prices: website builds starting from $1,999, an external network penetration test of one IP address starting from $999, a Microsoft 365 security review starting from $1,999, managed IT plans starting from $99 per user per month, and managed security starting from $79 per user per month, all ex GST. Your written quote sets the final price.
How do we get started with Catharsis?
Use the contact form or call 1300 342 276. Tell us what prompted the conversation, such as a customer questionnaire, an audit finding or an incident, and we will suggest where to begin.
Can government agencies buy from you?
Yes. Catharsis is registered as a seller on BuyICT, the Australian Government's digital marketplace, and on buy.nsw as NSW Government supplier 95776, so federal and NSW government buyers, including NSW councils, schools and local health districts, can find us there. We can also supply the security documentation procurement teams usually ask for.
Talk to our team
Tell us what's worrying you. We'll tell you what matters.
No obligation. You talk to the people who do the work. Enquiries usually get a reply within 3 business days.