Software, cybersecurity and compliance.

We design, build, run and secure the technology organisations depend on.

Start a conversation

The same engineers build the systems and secure them.

Software engineering
Any software, from first design to production.
AI & data solutions
Data platforms, reporting and the AI automation over them.
Cloud & agentic infrastructure
Landing zones, managed hosting and controls for AI agents.
Physical AI
Computer vision and edge inference on site hardware.
Offensive testing
Testing of any system, network, application or team.
Defensive & advisory
Security leadership, strategy and review across your whole environment.
Breach remediation
Investigation, containment and recovery from any security incident.
Compliance readiness
Readiness and assurance against any security or privacy framework.
Secure development
Security built into software from design to release.
AI cyber defence
Testing and governance for any AI you build or adopt.

Work in production

Businesses we build and secure software for, and the platforms underneath.

Recently shipped

Assay · External attack surface monitoring

External attack surface monitoring.

Assay scans your internet-facing systems every day, maps findings to the Essential Eight, SMB1001 and the questions on a cyber-insurance form, and gives you evidence to hand your insurer, your board and your customers.

Create an account Plans and checks

From $349 AUD a month. All plans run the same checks.

Attack-surface discovery
Vulnerability checks
Email and DNS hygiene
Exploited-in-the-wild ranking
Attack paths
Change tracking

OK
AT RISK
NOT ASSESSED
NOT OBSERVABLE

Every platform here is live in a system we ship.

Builds also run on client-run infrastructure when an engagement calls for it.

SMB1001:2026 GoldLEVEL 3 · CYBERCERT · PUBLIC REGISTRYVerify ↗Black Shard’s certification on the CyberCert public registry, opens in a new tab
cloud and infrastructure
identity and security
engineering
finance and legal
health and clinical
messaging and workplace
app distribution

Frameworks we work against: ASD Essential Eight, OWASP, MITRE ATT&CK, CISA KEV, SMB1001:2026, ISO 27001, and the Australian Privacy Principles.

Public data in our builds: ABR, ASIC company data via data.gov.au, the DFAT Consolidated Sanctions List, ABS, RBA, Transport for NSW, QGSO, the Residential Tenancies Authority (Queensland), the Queensland Valuer-General, the Government of South Australia's Department for Housing and Urban Development, NABERS, and Geoscape G-NAF.