Skip to content
PHP2Shell: the critical PHP vulnerability and how to patch it
Black Shard
Black Shard

Why Black Shard

Security and software from the firm that runs both in production.

Jetstone, our cyber defence software, comes from the bench that tests and runs client systems today.

What you get

Six things to check before you sign.

  • One team from build to breach

    When something goes wrong in a system we built, the engineers who wrote it work the remediation beside the responders.

    Suspect a breach?
  • Prices published before work starts

    Starting prices for penetration testing, Essential Eight assessment, certification readiness and Microsoft 365 and Azure reviews, ex GST.

    Services
  • Your tester is qualified

    Our testers hold postgraduate cyber qualifications, ISC2 certification and ACS and AISA membership.

    Penetration testing
  • Our own estate, held to the bar we audit

    Essential Eight Maturity Level 3, assessed September 2026.

    Trust centre
  • Ready for government buyers

    Ready for Queensland councils, NSW Government and Victorian Government buyers: Local Buy LB308, NSW SCM0020 and a Victorian Fair Jobs Code certificate.

    How to buy
  • Security and law together

    Led by a Queensland Law Society Accredited Specialist in Business Law.

    Leadership

Read from live systems.

  • 477,172,148Security events analysed

    Our security monitoring, since 1 Oct 2026

  • 4,620,462Lines of source code

    Non-blank lines in the repositories we own

  • 70,540Tests across our codebases

    Tests in our repositories

  • 35,088Commits in 2026

    Git history across our product repositories, since 1 Jan 2026

  • 3,523Pull requests merged

    Merged on GitHub, since 1 Jan 2026

  • 1,660Deploys and releases shipped

    Successful deploy and release runs, since 1 Jan 2026

Measured from our repositories and monitoring; last updated .

Tell us what you need built, tested or answered.

24/7 incident line: 1800 370 270.