Skip to content
CISA lists exploited flaws in the Linux kernel and VMware ESX
Black Shard

Loading

    A black glass monolith with a single cyan seam of light, standing among fallen shards of dark glass.

    Introducing Jetstone

    AI cyber defence for Australian businesses.

    Software that will run in Australia. Launching 2027.

    Join the waitlistSee Jetstone

    The Black Shard Platform

    Jetstone at the core. Practitioners who test, assure and respond around it. The engineering behind every system it protects.

    Explore the platform
    The Black Shard Platform. Jetstone at the core. Around it, Detect and respond: Jetstone, 24/7 incident line, Breach remediation. Test and assure: Penetration testing, Essential Eight assessment, Microsoft 365 and Azure security review, SMB1001 readiness, ISO 27001 readiness, vCISO. Build and run: Software engineering, Cloud and AI infrastructure, Managed ICT, Hosting on Azure Australian regions. Practitioners: Security leadership and audit, Law and governance, Offensive testing, Compliance, Tenders and procurement.
    Test and assurePen testingEssential EightM365 and AzureSMB1001ISO 27001vCISODetect and respond24/7 incident lineBreach remediationBuild and runSoftware engineeringCloud and AI infrastructureManaged ICTAzure hostingPractitionersLeadership and auditLaw and governanceOffensive testingComplianceTendersThe agentJetstoneLaunching 2027

    Where Jetstone will run

    • Windows
    • macOS
    • Microsoft 365
    • Google Workspace

    Integrations

    • Microsoft 365
    • Microsoft Azure
    • Microsoft Entra ID
    • Microsoft Intune
    • Microsoft Defender for Endpoint
    • Microsoft Teams
    • SharePoint
    • Xero
    • Cloudflare
    • Amazon Web Services
    • GitHub
    • Stripe
    • Twilio
    • Smokeball
    • InfoTrack
    • Every platform we run

    Product screens shown with sample data.

    Patch the edge first.Guard every sign-in.Keep a backup offline.

    The attacks in our advisories reach Australian firms through the same few doors: an exposed edge device, a stolen password, a backup server left on the network. The flaws behind them are often exploited before a fix ships. Half of the security events our monitoring analyses arrive outside business hours: 49.8 per cent from 2 to 25 October 2026.

    Read the advisories

    Services

    Fixed-scope engagements, each scoped and priced before the work starts, and a free scoping call for everything else.

    All services

    The scale behind every engagement.

    From our repositories, release pipelines and monitoring.

    • 553,764,020Security events analysed

      Each event checked against our detection rules.

      Our security monitoring, since 1 Oct 2026

    • 4,534,111Lines of source code

      Written and maintained by our own team, across client systems and our own products.

      Non-blank lines in the repositories we own

    • 73,819Tests across our codebases

      Tests run before a release ships, so a change is checked before it reaches your people.

      Counted in our repositories

    • 37,923Commits in 2026

      Every change traces back to who made it and why.

      Git history across our product repositories, since 1 Jan 2026

    • 3,933Pull requests merged

      Changes ship in small, reviewed steps, so each one is easy to check and to roll back.

      Merged on GitHub, since 1 Jan 2026

    • 1,745Deploys and releases shipped

      New releases reach the production systems we run every week.

      Successful deploy and release runs, since 1 Jan 2026

    Measured from our repositories and monitoring; last updated .

    Recognition and credentials

    SMB1001 Gold, and appointed to Local Buy.

    All credentials

    Also held

    Arrangements and own estate

    • NSW Government

      ICT Services Scheme SCM0020

      Prequalified for government ICT work, engaged through buy.nsw. Registered 14 Oct 2026

    • Victorian Government

      Fair Jobs Code certificate

      The pre-assessment a threshold or high-value government tender asks for. 23 Oct 2026 to 22 Oct 2028

    • Own estate

      Essential Eight Maturity Level 3

      All eight strategies, in our own estate. Assessed September 2026

    Reports and whitepapers

    Reports from our own data.

    Every report

    Some of the systems we build and run.

    Practice systems, client portals and clinical software, in production today.

    See the case studies
    The conflict log in the GRM LAW portal: one check pending, thirteen cleared, two waived and none blocked

    Legal

    GRM LAW

    The firm runs intake, conflicts, trust oversight and AML/CTF from one portal.

    Whole-tenant ICT, with Conditional Access across the firm from 23 October 2026.

    Product screens shown with sample data.

    And many others under confidentiality.

    Solutions by industry

    Software and security for the sectors our clients work in.

    All industries

    Jetstone

    Software that will act on a published list of threats, with every action undoable.

    The console will fit a phone, and a Monday summary will cover the week. The waitlist is open now.

    Join the waitlistSee Jetstone

    • Three policy presets

      Watch, Guard and Lockdown, with guardrails that will never isolate more than half of a fleet.

    • Action on a published list

      It will end the process, quarantine the file, isolate the device or sign the user out.

    • Sign-in threat watch

      Impossible travel, MFA fatigue, malicious inbox rules and risky OAuth consents will be flagged.

    • Alerts you can read

      Each will say what happened, what Jetstone did and what is waiting on you, in plain English.

    The Jetstone console fleet view: a health score, detections by day, open incidents and a device list, with sample data.

    Console preview with sample data.

    From the newsroom

    Visit the newsroom

    Latest from the desks

    Under attack? Call the incident line.

    24/7 incident line1800 370 270

    Talk to us about a test, a tender or Jetstone.

    Talk to usBreach response