Security-led IT, cyber and AI, Australia wide

Everything your business runs on, run securely

For Australian businesses holding data they cannot afford to lose. One local team across security, IT, cloud, AI and custom software, accountable for all of it.

Tell us what you need

See the six services

Triage online 00:00:00 AEST · watched from Melbourne

Always on 24/7 Monitoring and triage Real threats sorted from the daily noise before they reach you.

Our commitment 30min Priority-one response A Ferres Systems responder owns it end to end, any hour.

Watching now Endpoints & identities Every managed device reports in continuously.

Reality check $4.26M Average cost of an Australian data breach IBM Cost of a Data Breach 2024

Reality check Every
6 min A cybercrime is reported in Australia ASD Annual Cyber Threat Report

Sovereign 100% Australian data, Australian team Australian owned and operated. Managed-service data stays in Australia.

Baseline Essential Eight aligned Check your readiness free, in about a minute.

// COMPLETE SECURITY

Your security team, without hiring a security team.

The whole security service in one monthly package: watched around the clock, answered by a named person in Melbourne, with patching, Microsoft 365 or Google Workspace backup and browser management already in it. Everything we manage, we support, as often as you need it. We do not replace your IT team, we give them a security team, and plenty of our clients came to us with one already.

Watched every hour of every day
One person owns it until it is finished
Every mailbox and file backed up daily, kept for seven years
A password manager for everyone in the package

AUD 995 a month + GST, for up to 15 people

After that it is AUD 65 a person a month. One managed computer each, pooled across the team.

Price it for your team

How the service runs

See a real month of a client's report, redacted

// PLATFORMS WE DEPLOY AND MANAGE

The enterprise tooling behind the service. These are platforms we operate for clients, not client logos.

// CLIENT RESULTS

What changed for the people who hired us

A real month, redacted

The report a client gets, every month

1,412Signals triaged

4Incidents raised

8/8SLA targets met

0Data loss events

Four incidents confirmed and closed, none of which reached client data or met the threshold for a notifiable breach. Eleven pages: every incident with its timeline and evidence, service levels measured against their targets, Essential Eight maturity, and the three things that needed a decision.

Read all eleven pages

IT Projects and Microsoft 365

Accounting practice, 22 staff

The problem: Files lived on an eight-year-old server in a storeroom, two partners worked around it from home with a shared password, and the backup had never been restored.
Agreed scope: A fixed-price move to Microsoft 365 and SharePoint, multi-factor authentication for every account, and a tested backup, cut over on a weekend.
Delivered: Migrated 1.4 TB of client files with permissions rebuilt by team, retired the server, and handed over as-built documentation their next provider could follow.

0hours of lost trading at cutover

6 wksfrom signed scope to handover

100%of accounts on multi-factor

// SERVICES

Six ways we help

Managed Security

Nobody is watching your systems overnight, and that is when attacks get in.

What you get24/7 security monitoring and a named responder who owns every incident end to end, with patching and Microsoft 365 or Google Workspace backup included. We manage the security alongside whoever runs your everyday IT.

Ongoing service Scope and pricing

IT Projects and Microsoft 365

There is a migration, a network upgrade or a Microsoft 365 job everyone keeps putting off.

What you getMigrations, network upgrades and tenant work delivered to a fixed written scope, with documentation and a proper handover.

Project Scope and pricing

Security Assessments and Penetration Testing

Somebody is going to test your security eventually. The question is whether they tell you what they found.

What you getThe weaknesses found, what each would actually cost you, fixes you can act on, and an included retest to verify the reported findings are fixed.

Project Scope and pricing

AI and Workflow Automation

A repetitive process eats hours every week, and everyone has stopped noticing.

What you getRepetitive admin handed to automations and integrations that work with your systems, with the right controls set before anything goes live.

Project Scope and pricing

Custom Software and Integrations

A spreadsheet is running part of your business, and only one person understands it.

What you getAwkward spreadsheets and disconnected systems replaced with a tool built around how your team works, owned outright by you.

Project Scope and pricing

Cybersecurity Governance and Compliance

The questionnaire arrived, the deadline is Friday, and the honest answers are educated guesses.

What you getThe policies, evidence and action plan you need to answer customers, insurers and auditors with confidence.

Project Scope and pricing

Not seeing your problem here?

Describe it in your own words. Plenty of the work we take on does not sit neatly inside one of these six.

Tell us what is going wrong

// WAYS TO WORK WITH US

Keep your IT provider, or hand it all over

Ongoing

We run it

Managed security as a monthly service. We watch the systems and own confirmed incidents end to end, and take on the day-to-day IT too if you want us to.

See how the service runs Alongside

We sit behind your existing IT

Keep your current provider or internal IT person exactly as they are, and add us behind them for security. Who does what is written down at onboarding.

Talk about a split arrangement One-off

We deliver a project and leave

A migration, a penetration test, an application, an Essential Eight uplift. Written scope, fixed price, and documentation the next provider can follow.

See the six services

// CASE FILES

How the work actually went

Composites of real engagements, with identifying details changed.

DECLASSIFIED Composite

The stolen laptop that stopped being a problem in nineteen minutes

A partner's laptop was taken from a car in a Melbourne car park on a Friday afternoon. The call came in at 4:41pm. By 5:00pm her sessions had been revoked, her password reset, a remote wipe issued and disk encryption confirmed, and the firm had the evidence it needed for its privilege obligations.

Sector: Legal
Services: Managed Security, Incident Response

Open the file

Also on the shelf The Tuesday night an accounting firm slept through Accounting The agent that reads the intake inbox, and the two things it is not allowed to do Professional services Two findings nobody would have fixed, and what they did together Allied health The server in the storeroom, and the spreadsheet that nearly broke the cutover Manufacturing Every case file and field note The whole index, one screen

// SAMPLE REPORT

A real finding from one of our penetration tests

Published with the client's written permission and redacted. A scanner had rated both halves of it medium and low.

Penetration Test Report SECTION 05 // F-01, A FINDING WORKED IN FULL

FINDING F-01 HIGH

Appointment records reachable by changing a record number

A signed-in user can view another patient's record by altering the numeric identifier in the request. No additional privileges are required and the change is trivial to make by hand. That missing ownership check is serious by itself. Combined with F-05, valid identifiers can be enumerated rather than guessed, so the records can be collected systematically rather than one lucky guess at a time.

WHAT THE SCANNER SAID MEDIUM

The automated scan found both components of the chain, rated them medium and low, and reported no relationship between them. It rated the missing security headers higher than this finding, and it did not detect F-02 at all. That is the difference a manual test buys, and it is the reason we publish this sample.

Redacted sample report · 21 pages Read the full finding

More samples, each previewed first Your Essential Eight action plan, written out Action plan · 21 pages The Essential Eight evidence checklist Fillable checklist · 20 pages The cloud migration readiness checklist Fillable workbook · 17 pages AI acceptable use and data handling policy Editable policy template · 18 pages

All resources Free Exposure Check

// THE TEAM BEHIND THE SERVICE

Not one person. A team that owns the outcome.

Named people in Melbourne, working nationally. George leads every engagement, and also teaches cybersecurity and speaks at security conferences.

George Ferres

Founder and Principal

Hirusha Adikari

Security and Incident Response Consultant

Sham Polavarapu

Security and Incident Response Consultant

Kat Ho

Offensive Security Analyst and Penetration Tester

Meet the whole team

// HOW IT RUNS

From onboarding
to the 3am call

01. Onboard

We map your environment, connect monitoring to your endpoints and Microsoft 365 or Google Workspace identities, and set the baseline. Access is agreed first, and deployment is scheduled with you around your team's work.

02. Monitor and triage

Around the clock, triage separates real threats from the daily noise, so almost everything is dealt with before it reaches you.

03. Respond

A confirmed incident goes straight to a named Ferres Systems responder who owns it end to end, whatever its priority. A priority one is handled within 30 minutes, any hour.

One pipeline in, one accountable team out

0 min

Priority-one response commitment.

// THE 30 MINUTES, DEFINED

Who it covers: Clients on the managed security service. It is part of that agreement, not a general promise to the public.
What qualifies: A priority-one incident: a confirmed compromise, active data loss, or a system outage stopping you trading.
Before the timer starts: Alerts are triaged around the clock as they arrive, and anything that looks like a real threat goes to a responder straight away. The 30-minute commitment applies from the point triage confirms it.
When the timer starts: The moment triage confirms the incident is genuine, not when a ticket is filed and not in business hours only.
What "response" means: A named Ferres Systems responder has picked it up and owns it end to end. Containment starts straight away, and how long it takes depends on the incident, the access available and the systems affected.

// FREE, NOTHING STORED

Where do you stand on the Essential Eight?

The baseline Australian insurers, tenders and enterprise customers lean on. Eight questions, a readiness checklist and a list of your gaps in about a minute, with no email and no form. It is not an ASD maturity rating.

Take the readiness checklist

// QUESTIONS, ANSWERED

The things people ask before they hand over their security.

Rather talk it through?

Book a 30-minute call

No. Managed security leads, with day-to-day IT on top if you want it, alongside IT projects and Microsoft 365, security assessments and penetration testing, AI and workflow automation, custom software and integrations, and governance and compliance. One local team across all of it.

No. Plenty of clients keep their existing day-to-day IT exactly as it is and put Ferres Systems behind it for security. We are also happy to carry both. Who does what gets written down at onboarding.

Monthly, with the minimum term set out in your written quote. Project work is separate: fixed price against a written scope, with no ongoing agreement attached.

It applies to clients on the managed security service and covers a priority-one incident: a confirmed compromise, active data loss, or an outage stopping you trading. Every confirmed incident gets a named responder who owns it end to end, whatever its priority; the 30 minutes is what we commit to on a priority one. Alerts are triaged around the clock, the timer starts when triage confirms an incident is genuine, and response means that responder has picked it up. Containment starts straight away, and how long it takes depends on the incident, the access available and the systems affected. It is not a response time for everyday support requests.

Your data stays in Australia. Client data is held inside Australian infrastructure for the whole engagement, and that is not something we vary by client or by state.

Australian organisations holding data they cannot afford to lose, from a handful of staff up. Allied health, disability services, legal and accounting are the sectors we know best, alongside professional services, not-for-profits and manufacturing.

See the sectors we work in

Tell us the problem, not the solution.

Get in touch

Everything your business runs on, run securely

Your security team, without hiring a security team.