About us

About Catharsis

Catharsis is a Sydney cyber security company certified to ISO/IEC 27001:2022 and a registered government supplier on BuyICT and buy.nsw.

01At a glance

At a glance

Catharsis Cyber Security is an Australian cyber security company with its office in Roseville NSW. We help organisations reduce their cyber risk in ways they can see, measure and explain to a board, an insurer or an auditor.

What we do
Security first, plus managed IT, secure AI and development
We work with
Organisations with 5 or more staff, government and regulated buyers
On each engagement
A security specialist who stays involved
Get in touch

02How we work

How our team works

Whatever the size of the job, the work runs the same way.

  • Before any work starts

    Fixed scope, agreed in writing

    Nothing starts until the scope and price are agreed and written down.

    • What is covered
    • What is not
    • What it costs
    Ask for a written quote
  • Plain-English reporting

    Every finding comes with what it means for your organisation and how to fix it, not just a technical rating.

  • Security built in

    Anything we build is designed with security in mind: secure defaults, least-privilege access and software kept up to date.

  • Hands-on work

    Our security practitioners do the testing, configuration and review themselves.

03In detail

Who is Catharsis?

#

Security comes first in everything we do. Around that core, we run security-first managed IT, help teams adopt AI safely and build secure websites and software. Each of those services is led by our own team, so security is part of the work from the start rather than added at the end.

How Catharsis started

#

Catharsis started in 2020. Our founders brought more than 20 years of combined experience in cyber security and networking, and they kept seeing the same problem: security was explained in jargon, so the organisations that most needed it struggled to know what mattered and what to do first.

We set out to change that. We cut through the jargon, explain risk in terms your team can act on, and do the technical work for you. You run your business day to day; we look after your IT and keep it secure.

Our focus is on the people behind the systems. Many incidents begin with a person, a process or a forgotten setting, not an exotic exploit. So we look at people, process and technology together, and we start every engagement by listening: to your team, your current set-up, the skills you have in-house and your budget. Then we work with you on a plan that fits.

We hold the certification we implement

#

We help clients design and implement their own information security management system (ISMS) and prepare for certification by an accredited certification body. We run our own business under a certified ISMS to the same international standard.

That matters for two reasons. First, your data, our test findings and our own systems are handled under a certified ISMS that is audited independently. Second, we know what an auditor actually asks for, because we go through it ourselves. Our trust page explains how we protect client data.

Who will you work with?

#

You talk directly to a subject-matter expert, not a call centre. The security specialist who scopes your work understands the technical detail and stays involved until it is finished, rather than passing it from a salesperson to a project manager to an unnamed technician.

04Sectors

Who we work with

The sectors most of our clients work in.

  • Accounting and finance
  • Legal
  • Healthcare
  • Technology
  • Education
  • Not-for-profit
  • Government and public sector

We work with organisations of 5 or more staff, with no upper limit, that want a security partner they can reach directly, and with public sector teams that need evidence, standards alignment and procurement fit.

We have a particular interest in the not-for-profit sector, where budgets are tight and the data held about clients and donors is often sensitive. Our aim is to help these organisations build practical cyber resilience and understand where to spend first.

Long corridor of a modern office with black-framed glass partitions, meeting rooms and a lounge area
Stock photo, not our office

How we are set up

Independent, hands-on and accountable

We keep security, IT and software work close together in one Australian team, so nothing falls between suppliers.

05Credentials

The evidence procurement teams ask for.

Certified, registered and easy to verify, so security and supplier questionnaires move quickly.

  • Certified

    ISO/IEC 27001:2022

    Our information security management system is certified and audited independently.

    About our certification
  • Registered supplier

    BuyICT and buy.nsw

    The federal and NSW Government marketplaces. NSW supplier 95776.

  • Legal entity

    Fibaro Pty Ltd

    ABN 50 600 361 822. We trade as Catharsis.net.au.

Is Catharsis a registered government supplier?

Yes. Federal agencies can find us on the Australian Government’s digital marketplace, and NSW Government buyers, including councils, schools and local health districts, can find us on buy.nsw.

For procurement teams

The documents and details procurement and risk teams usually ask for:

06Where we are

Where to find us.

Our office

Unit 49, 28 Barcoo Street
Roseville NSW 2069

On-site support across Sydney and Greater Sydney. Remote services Australia-wide.

Roseville NSW

Loads Google Maps

07What we do

The technology we work with

#

We supply licences for the security and IT vendors shown here, and we configure each product securely before handing it over. Our partners and licensing page lists what we supply, the services each product fits with and how buying through us works.

What we do

#
  • Cyber security: penetration testing, managed security, endpoint and email security, vulnerability management, awareness training and compliance.
  • Managed IT: your IT run by a certified cyber security company.
  • Secure AI: safe adoption of AI tools, with governance and data protection.
  • Development: websites and software built by a security company.

Talk to our team

Tell us what's worrying you. We'll tell you what matters.

No obligation. You talk to the people who do the work. Enquiries usually get a reply within 3 business days.