Home › About Conformance

About Conformance

Conformance is an Australian cyber security practice based in Melbourne. We help organisations find and fix real security weaknesses through hands-on penetration testing, and validate their ASD Essential Eight maturity through our own assessment platform.

What we do

Our core work is penetration testing, including internal and external networks, web and mobile applications, APIs, wireless, red team exercises and phishing campaigns. Every engagement is scoped in writing and combines recognised methodologies and tooling with hands-on manual testing, then reported with the evidence, the business impact and the specific fix for each finding. We retest remediated issues so you can show the risk is genuinely closed.

Alongside testing, we run evidence-based ASD Essential Eight assessments through a platform we built, turning dozens of technical checks into a validated, dated maturity position. Read about the Essential Eight platform.

How we work

Our consultants hold certifications including OffSec OSCP+, Burp Suite Certified Practitioner, CISSP and Certified Ethical Hacker. We quote fixed prices against a written scope, so the number you approve is the number you pay. We are Australian owned and operated.

Burp Suite Certified Practitioner (BSCP) OffSec Certified Professional (OSCP+) Certified Information Systems Security Professional (CISSP) Certified Ethical Hacker (CEH)