About us
About Catharsis
Catharsis is a Sydney cyber security company certified to ISO/IEC 27001:2022 and a registered government supplier on BuyICT and buy.nsw.
01At a glance
At a glance
Catharsis Cyber Security is an Australian cyber security company with its office in Roseville NSW. We help organisations reduce their cyber risk in ways they can see, measure and explain to a board, an insurer or an auditor.
- What we do
- Security first, plus managed IT, secure AI and development
- We work with
- Organisations with 5 or more staff, government and regulated buyers
- On each engagement
- A security specialist who stays involved
02How we work
How our team works
Whatever the size of the job, the work runs the same way.
Before any work starts
Fixed scope, agreed in writing
Nothing starts until the scope and price are agreed and written down.
- What is covered
- What is not
- What it costs
Plain-English reporting
Every finding comes with what it means for your organisation and how to fix it, not just a technical rating.
Security built in
Anything we build is designed with security in mind: secure defaults, least-privilege access and software kept up to date.
Hands-on work
Our security practitioners do the testing, configuration and review themselves.
03In detail
Who is Catharsis?
#Security comes first in everything we do. Around that core, we run security-first managed IT, help teams adopt AI safely and build secure websites and software. Each of those services is led by our own team, so security is part of the work from the start rather than added at the end.
How Catharsis started
#Catharsis started in 2020. Our founders brought more than 20 years of combined experience in cyber security and networking, and they kept seeing the same problem: security was explained in jargon, so the organisations that most needed it struggled to know what mattered and what to do first.
We set out to change that. We cut through the jargon, explain risk in terms your team can act on, and do the technical work for you. You run your business day to day; we look after your IT and keep it secure.
Our focus is on the people behind the systems. Many incidents begin with a person, a process or a forgotten setting, not an exotic exploit. So we look at people, process and technology together, and we start every engagement by listening: to your team, your current set-up, the skills you have in-house and your budget. Then we work with you on a plan that fits.
We hold the certification we implement
#We help clients design and implement their own information security management system (ISMS) and prepare for certification by an accredited certification body. We run our own business under a certified ISMS to the same international standard.
That matters for two reasons. First, your data, our test findings and our own systems are handled under a certified ISMS that is audited independently. Second, we know what an auditor actually asks for, because we go through it ourselves. Our trust page explains how we protect client data.
Who will you work with?
#You talk directly to a subject-matter expert, not a call centre. The security specialist who scopes your work understands the technical detail and stays involved until it is finished, rather than passing it from a salesperson to a project manager to an unnamed technician.
04Sectors
Who we work with
The sectors most of our clients work in.
- Accounting and finance
- Legal
- Healthcare
- Technology
- Education
- Not-for-profit
- Government and public sector
We work with organisations of 5 or more staff, with no upper limit, that want a security partner they can reach directly, and with public sector teams that need evidence, standards alignment and procurement fit.
We have a particular interest in the not-for-profit sector, where budgets are tight and the data held about clients and donors is often sensitive. Our aim is to help these organisations build practical cyber resilience and understand where to spend first.

How we are set up
Independent, hands-on and accountable
We keep security, IT and software work close together in one Australian team, so nothing falls between suppliers.
05Credentials
The evidence procurement teams ask for.
Certified, registered and easy to verify, so security and supplier questionnaires move quickly.
Certified
ISO/IEC 27001:2022
Our information security management system is certified and audited independently.
About our certificationRegistered supplier
BuyICT and buy.nsw
The federal and NSW Government marketplaces. NSW supplier 95776.
Legal entity
Fibaro Pty Ltd
ABN 50 600 361 822. We trade as Catharsis.net.au.
Is Catharsis a registered government supplier?
Yes. Federal agencies can find us on the Australian Government’s digital marketplace, and NSW Government buyers, including councils, schools and local health districts, can find us on buy.nsw.
For procurement teams
The documents and details procurement and risk teams usually ask for:
- Certificate copy: a copy of our ISO/IEC 27001:2022 certificate is available on request.
- Federal marketplace seller profile: view our seller profile on the federal digital marketplace
- buy.nsw supplier profile: view supplier 95776 on buy.nsw
- Insurance: professional indemnity and cyber liability insurance, with certificates available on request.
- Security contact: our security.txt file and responsible disclosure guidelines.
06Where we are
Where to find us.
Our office
Unit 49, 28 Barcoo StreetRoseville NSW 2069
On-site support across Sydney and Greater Sydney. Remote services Australia-wide.
Roseville NSW
Loads Google Maps
07What we do
The technology we work with
#We supply licences for the security and IT vendors shown here, and we configure each product securely before handing it over. Our partners and licensing page lists what we supply, the services each product fits with and how buying through us works.
What we do
#- Cyber security: penetration testing, managed security, endpoint and email security, vulnerability management, awareness training and compliance.
- Managed IT: your IT run by a certified cyber security company.
- Secure AI: safe adoption of AI tools, with governance and data protection.
- Development: websites and software built by a security company.
Talk to our team
Tell us what's worrying you. We'll tell you what matters.
No obligation. You talk to the people who do the work. Enquiries usually get a reply within 3 business days.