Conformance is an Australian cyber security practice based in Melbourne. We help organisations find and fix real security weaknesses through hands-on penetration testing, and validate their ASD Essential Eight maturity through our own assessment platform.
What we do
Our core work is penetration testing, including internal and external networks, web and mobile applications, APIs, wireless, red team exercises and phishing campaigns. Every engagement is scoped in writing and combines recognised methodologies and tooling with hands-on manual testing, then reported with the evidence, the business impact and the specific fix for each finding. We retest remediated issues so you can show the risk is genuinely closed.
Alongside testing, we run evidence-based ASD Essential Eight assessments through a platform we built, turning dozens of technical checks into a validated, dated maturity position. Read about the Essential Eight platform.
How we work
Our consultants hold certifications including OffSec OSCP+, Burp Suite Certified Practitioner, CISSP and Certified Ethical Hacker. We quote fixed prices against a written scope, so the number you approve is the number you pay. We are Australian owned and operated.

