Property
Fox Valuations
Every valuation, from inspection to invoice, runs through The Den.
Reports, sketch PDFs and fees come from the same job record in The Den.
Property
The sector’s classic attack is an email about a bank account.
We harden the identity, process and people a settlement depends on for Australian property businesses, and we build and run property systems.
Some of the property systems we build and run.
Property
Bold Property Group
Off-market deal sourcing and the AML/CTF program run from one staff app.
Every PEP match waits for a person’s approval before the client proceeds.
Product screens shown with sample data.
Property
The obligations in play.
Settlement money moved over email.
AML/CTF Act, tranche 2
Real estate professionals have been reporting entities since 1 July 2026: programs, customer due diligence and reporting.
Verification of identity
Conveyancing rules require reasonable steps to verify client identity on land transactions.
Trust account rules
State agent legislation governs trust money: record-keeping, audits and accountability for client funds.
Privacy Act 1988 and the APPs
Client identity documents and financial information under the APPs, with the Notifiable Data Breaches scheme behind them.
Threat picture
What the sector is facing.
High severity
Policy and regulation
Federal Court orders The Star to pay $260 million for AML/CTF breaches
Critical severity
What we do
What you carry, and what we do about it.
Payment redirection rides on a compromised inbox: one changed bank detail in a settlement chain.
We harden the identity layer the fraud depends on: conditional access and MFA coverage across your Microsoft 365 tenant, privileged-role and app-consent audits, and offboarding hygiene.
Entra ID and Microsoft 365 identity securityThe people in the chain are the attack surface: staff wired to act fast on emailed instructions.
Controlled phishing and pretext campaigns measure susceptibility, with per-team results and targeted awareness follow-up, without naming individuals.
Phishing and social-engineering simulationAML/CTF tranche 2 has captured real estate professionals since 1 July 2026, and identity verification is already standard in conveyancing.
We run compliance readiness programs that map the obligations to your business, close the gaps and build the evidence trail an assessor expects.
Compliance readinessTransaction data (contracts, client financials, identity documents) accumulates in portals, drives and inboxes.
We penetration-test the systems you already hold transaction data in and hand back a ranked fix list, with a re-test to confirm the fixes.
Penetration testing
Services
The services that apply.
- Microsoft 365 and Azure security reviewIdentity, Conditional Access and tenant settings, reviewed setting by setting.
- Penetration testingNetworks, web apps, cloud and AI systems, with a report and a re-test.
- SMB1001 readinessGap assessment, evidence pack and support through to your target tier.
- Software engineeringWeb, mobile and platform builds, run in production.
Questions, answered.
How do we stop payment redirection fraud?
The fraud rides on a compromised inbox, so the defences are identity, process and people. We harden conditional access and MFA coverage across your Microsoft 365 tenant, audit privileged roles and app consent, and run phishing and pretext campaigns that measure how staff respond, reported per team without naming individuals.
Does AML/CTF tranche 2 apply to real estate agencies?
Real estate professionals have been reporting entities since 1 July 2026, with programs, customer due diligence and reporting to run. We write the AML/CTF program with your business and build it into the systems your staff use, with the evidence trail an assessor expects.
Can you test the systems we hold transaction data in?
Yes. We penetration-test the portals and systems that hold contracts, client financials and identity documents, and hand back a ranked fix list with a re-test to confirm the fixes.
Industries
Other sectors we work in.
Government
Prequalified for councils and agencies, with the Essential Eight held on our own estate.
Professional services
Testing, tenancy hardening and managed ICT for advisory and accounting firms.
Motorsport and sport technology
Decision software for race weekends, from our Labs.
