Automotive and trades
Workshop software that keeps every workshop separate.
We build multi-tenant workshop platforms and secure the systems a motor group runs on.
Automotive and trades
The obligations in play.
A motor group runs jobs, bookings, quotes, parts and payments across many workshops at once. Each workshop needs its own records, and none should be able to read another’s, so separation has to hold in the database and not only in the screens.
Privacy Act 1988 and the APPs
Customer, vehicle and payment records are personal information under the APPs, with the Notifiable Data Breaches scheme behind them.
Motor vehicle repair information sharing
Since 1 July 2022 repairers can buy the service and repair information car makers hold, and its safety and security information is released only to checked individuals.
Payment card security
Point of sale takes card payments, and the PCI DSS sets the controls the card schemes expect around them.
Repairer licensing
New South Wales and Western Australia license motor vehicle repair businesses, with conditions on how they operate.
Threat picture
What the sector is facing.
Critical severity
Critical severity
What we do
What you carry, and what we do about it.
Every workshop in a group needs its own data, and none should see another’s.
We build multi-tenant software that keeps each workshop’s data apart in the database itself, so separation holds in every query.
Software engineeringPoint of sale and invoicing put card payments and customer records in one system.
We penetration-test the platform and the network around it, and hand back a ranked fix list with a re-test.
Penetration testingStaff sign in from workshop floors and front counters, often on shared devices.
We review and harden the Microsoft 365 tenant: Conditional Access, MFA coverage, privileged roles and app consent.
Microsoft 365 and Azure security reviewReleases have to land without stopping the workshops that run on them.
Delivery pipelines run the tests and security checks before anything deploys, with staging, production and rollback.
Cloud and AI infrastructure
Software engineering
Web, mobile and platform builds, run in production.
Cloud and AI infrastructure
Azure hosting, delivery pipelines and the controls around AI systems.
Penetration testing
Networks, web apps, cloud and AI systems, with a written report and a re-test.
From A$4,950ex GSTMicrosoft 365 and Azure security review
Identity, Conditional Access and tenant settings, with written findings.
From A$3,500ex GST
Recruitment
Candidate intake, screening and placement workflows, built for an agency.
Health
Clinical software and the security around it, with the Privacy Act and the APPs built in.
Legal
Practice and compliance systems for law firms, with trust accounting and QLS obligations in view.
