Skip to content
PHP2Shell: the critical PHP vulnerability and how to patch it
Black Shard
Black Shard
Introducing Jetstone

The Black Shard Platform

Build, test and defend the systems you run on.

How the platform fits together

Jetstone at the core, with the practice and the engineering around it

One firm runs every part of it, so a test finding, a breach call and the fix that follows reach the same team.

The Black Shard Platform. Jetstone at the core. Around it, Detect and respond: Jetstone, 24/7 incident line, Breach remediation. Test and assure: Penetration testing, Essential Eight assessment, Microsoft 365 and Azure security review, SMB1001 readiness, ISO 27001 readiness, vCISO. Build and run: Software engineering, Cloud and AI infrastructure, Managed ICT, Hosting on Azure Australian regions. Practitioners: Security leadership and audit, Law and governance, Offensive testing, Compliance, Tenders and procurement.

Detect and respond

Jetstone for your devices, and responders for the breach.

The incident line and breach remediation are open now. Jetstone joins them in 2027.

Build and run

Some of the systems we build and run.

1,660 deploys and releases and 3,523 merged pull requests since 1 Jan 2026, across the systems we build, host and secure.

Built and run by Black Shard

Practice systems, client portals and a workplace booking platform, among many others.

  • The Den, for Fox ValuationsValuers book, inspect, value and invoice every job in one system.
  • The GRM LAW portalConflicts, the matter register and AML/CTF, beside the matters in Smokeball.
  • A workplace booking platformDesks, rooms, offices and car bays, booked with Microsoft 365.
The workplace booking platform, shown with sample data: today’s availability counts and the floor plan of desks and meeting rooms in three neighbourhoods.
The workplace booking platform, shown with sample data.

Practitioners

The people who scope, run and sign off the work.

Every proposal names its engagement lead before the work starts.

  • Security leadership and audit

    Led by our CISO, an ISO/IEC 27001:2022 Lead Auditor.

  • Law and governance

    Led by a Queensland Law Society Accredited Specialist in Business Law.

  • Offensive testing

    Our testers hold postgraduate cyber qualifications, ISC2 certification and ACS and AISA membership.

  • Compliance

    A compliance practice that carries risk, policy and audit work through to evidence.

  • Tenders and procurement

    Tender responses built from our own records: certificates, insurance and the work we have delivered.

  • About the team

How it works

Who does what when something gets in.

One incident, from the device it starts on to the report your board reads.

  1. Recent sign-ins in Jetstone with sample data, two flagged for a new country and MFA fatigue.

    Jetstone

    The software will move first, on the device.

    A threat on the published list will be stopped where it lands, and each action will sit on the incident timeline with an undo.

  2. You call

    You call the incident line.

    Nothing is shut down or reset until you agree it, and the incident record opens with your call.

  3. A Jetstone incident with sample data: the evidence timeline and the actions taken, each with an undo.

    The response team

    Root cause found and fixed.

    The access the attacker used is traced and closed, what was touched is restored, and the affected surface is re-tested.

    Breach remediation
  4. The Jetstone incidents register with sample data: each incident with its technique and status, and an export for your insurer.

    The engagement lead

    The incident, in writing.

    A factual record for your board, insurer or legal advisers, from the person who ran the response.

Integrations

The platforms our shipped systems run on.

Built on the platforms Australian organisations already run.

Cloud, infrastructure and engineering

  • Microsoft Azure
  • Amazon Web Services
  • Cloudflare
  • GitHub

Identity and security

  • Microsoft Entra ID
  • Sign in with Apple
  • Sign in with Google
  • Microsoft Defender for Endpoint
  • Microsoft Intune

Finance, legal and clinical

  • Stripe
  • Xero
  • GoCardless
  • Smokeball
  • Notifyre
  • InfoTrack
  • Medical Objects

Messaging and workplace

  • Twilio
  • Microsoft 365
  • Microsoft Outlook
  • Microsoft Teams
  • SharePoint

Frequently asked

Questions about the platform

Talk to us
  • What is the Black Shard Platform?

    Jetstone, the practice that tests, assures and responds, and the engineering that builds and hosts client systems. Each is sold on its own, and one team runs all three.

  • Can we engage one service on its own?

    Yes. Every service on the platform can be engaged on its own.

  • Are prices GST inclusive?

    Starting prices are for a fixed scope, in Australian dollars, ex GST.

  • How will Jetstone be sold?

    Jetstone will be sold per device per year as software. The Jetstone waitlist is open. Pricing will be published at launch.

  • Where is our data held?

    Our Azure-hosted client platforms run in Australia East. Detection will run in Microsoft Azure Australia East, with rules mapped to MITRE ATT&CK.

Talk to us about the platform.

Tell us what you run today, and a director comes back with where to start.