Drag
loader

Contact info

Email
hello@ferressystems.com.au
Based in
Melbourne, Victoria

Follow us

Talk to the team
Talk to the team
// SERVICES

Six services, one team

Five are projects with a written scope and a finish line. One is an ongoing service.

01 Managed Security Ongoing service Nobody is watching your systems overnight, and that is when attacks get in. What you get24/7 security monitoring and a named responder who owns every incident end to end, with patching and Microsoft 365 or Google Workspace backup included. We manage the security alongside whoever runs your everyday IT. 24/7 monitoring and triage · A named responder owns every confirmed incident · Patching and cloud backup, included Monthly, with the minimum term set out in your written quote Service detail See pricing
02 IT Projects and Microsoft 365 Project There is a migration, a network upgrade or a Microsoft 365 job everyone keeps putting off. What you getMigrations, network upgrades and tenant work delivered to a fixed written scope, with documentation and a proper handover. Assessments, AD and identity, networks and servers · Cloud assessments and migrations · Microsoft 365 tenant work Typically two to eight weeks Scope and pricing 03 Security Assessments and Penetration Testing Project Somebody is going to test your security eventually. The question is whether they tell you what they found. What you getThe weaknesses found, what each would actually cost you, fixes you can act on, and an included retest to verify the reported findings are fixed. Security assessments and Essential Eight uplift · Penetration testing · Access and identity audits Typically one to two weeks Scope and pricing 04 AI and Workflow Automation Project A repetitive process eats hours every week, and everyone has stopped noticing. What you getRepetitive admin handed to automations and integrations that work with your systems, with the right controls set before anything goes live. AI agents built for your processes · Microsoft Copilot deployment · AI security review, governance and acceptable use Typically three to six weeks for a first agent Scope and pricing 05 Custom Software and Integrations Project A spreadsheet is running part of your business, and only one person understands it. What you getAwkward spreadsheets and disconnected systems replaced with a tool built around how your team works, owned outright by you. Internal tools, dashboards and portals · System integrations and reporting · Workflow automation Typically six to twelve weeks for a first release Scope and pricing 06 Cybersecurity Governance and Compliance Project The questionnaire arrived, the deadline is Friday, and the honest answers are educated guesses. What you getThe policies, evidence and action plan you need to answer customers, insurers and auditors with confidence. Essential Eight and ISO 27001 readiness · Policies and incident response plans · Privacy Act and vendor risk Typically four to ten weeks Scope and pricing

Not seeing your problem in these six?

Describe it in your own words. A good share of the work we take on does not sit neatly inside one of these six.

Tell us what is going wrong
// WAYS TO WORK WITH US

Keep your IT provider, or hand it all over

Ongoing

We run it

Managed security as a monthly service. We watch the systems, own confirmed incidents, and take on the day-to-day IT too if you want us to.

See managed security Alongside

We sit behind your existing IT

Plenty of clients keep their current provider or their internal IT person exactly as they are, and put us behind them for the security depth. Nobody has to be replaced for this to work.

Talk about a split arrangement One-off

We deliver a project and leave

A migration, a penetration test, an application, an Essential Eight uplift. Written scope, fixed price, documentation another provider could pick up. No ongoing agreement attached.

Scope a project
// SAMPLE REPORT

A scanner rated these medium and low, and saw no link between them.

A real finding from one of our penetration tests, published with the client's written permission and redacted.

Penetration Test Report SECTION 05 // F-01, A FINDING WORKED IN FULL
FINDING F-01 HIGH

Appointment records reachable by changing a record number

A signed-in user can view another patient's record by altering the numeric identifier in the request. No additional privileges are required and the change is trivial to make by hand. That missing ownership check is serious by itself. Combined with F-05, valid identifiers can be enumerated rather than guessed, so the records can be collected systematically rather than one lucky guess at a time.

WHAT THE SCANNER SAID MEDIUM

The automated scan found both components of the chain, rated them medium and low, and reported no relationship between them. It rated the missing security headers higher than this finding, and it did not detect F-02 at all. That is the difference a manual test buys, and it is the reason we publish this sample.

Redacted sample report · 21 pages Read the full finding, then take the report
Every one of these previews a real page first Your Essential Eight action plan, written out Action plan · 21 pages The Essential Eight evidence checklist Fillable checklist · 20 pages The cloud migration readiness checklist Fillable workbook · 17 pages AI acceptable use and data handling policy Editable policy template · 18 pages
The whole shelf Free Exposure Check
// QUESTIONS, ANSWERED

Before you pick a service

Yes, and most relationships do. A migration, a penetration test, an application, an AI deployment: five of the six services below are project work by default, with a written scope and a finish line. Nothing obliges you to anything ongoing.

No. Plenty of clients keep their existing day-to-day IT and put Ferres Systems behind it for security, with who does what written down at onboarding. We are also happy to carry both.

Managed security is monthly, with the minimum term set out in your written quote. Everything else is project work with a fixed price and a finish line, and no ongoing agreement attached.

A conversation first, then an assessment where the work warrants one, then a written scope in plain language: what we will do, what you will have at the end, what is explicitly out, and what it costs. You approve that before anything changes.

The Security Baseline Assessment is $495 + GST. Ongoing managed services are priced by team size and selected plan, while projects are quoted against an agreed scope, because a number given before anyone has looked at the work is a guess.

Use our pricing calculator for an indicative monthly managed-service fee

The same Melbourne-based team across all six services, working nationally. No outsourcing your project to a desk you will never speak to.

Tell us the problem, not the solution. That is what the contact form is for: describe what is keeping you up at night and we will point you at the smallest thing that fixes it, including when that is nothing.

Tell us the problem, not the solution.

Get in touch
Shapes Shapes