Menu

Cyber security · GRC · AI

Make cyber security simple.

Deteqted is a Melbourne cyber security and governance, risk & compliance practice. We help regulated organisations meet their obligations, manage risk, put AI to work on security and build security that lasts.

Talk to us See our experience

What we do

Two practices, one team

Governance and hands-on security are usually sold separately. We bring them together, so your policy, your risk register and your controls tell the same story.

AI & frontier models

Put frontier AI to work on security

For three years we have engineered with frontier large language models — Claude, OpenAI, Gemini and Meta — for cyber security. We help organisations automate security testing, operations and GRC with them: safely, measurably, and with a person deciding on the record.

AI & security automation
  • 01

    Agentic security testing

    Automated, agentic AI testing with AI-assisted vulnerability discovery, exploit reasoning and code review.

  • 02

    Faster triage and GRC

    Findings triaged and explained, and supplier assessments, control mapping and evidence done in a first pass.

  • 03

    Governed by design

    Evaluation pipelines, content safety and operational AI controls, aligned to the EU AI Act and ISO/IEC 42001.

Our product

ControlDesk: cyber GRC that decides before the fact.

ControlDesk is the cyber GRC platform Deteqted built, with native AI governance for mid-market security teams. Risk decisions get made before a vendor is chosen, a contract signed, a system built or an AI model deployed: purpose-built AI does the first pass, a person decides on the record, and every decision lands in one register.

Visit controldesk.com.au About ControlDesk

  • One register

    Risks, controls, obligations, findings, evidence, incidents, assets, policies and a decision ledger in one place.

  • AI assessment lenses

    Third-party risk, privacy, maturity, business impact, agreements and AI governance — AI does the first pass, a person decides.

  • Built for Australian rules

    Hosted in AWS Sydney, with APRA CPS 230 and CPS 234 obligation packs, the Australian Privacy Principles and Essential Eight.

  • Connects to your tools

    Cloud posture, identity, endpoint, vulnerability, ticketing and SIEM integrations, plus a REST API and webhooks.

Experience

Recent engagements

All engagements
  • Cyber security
  • Security testing
  • AI-assisted

Penetration testing across applications and systems

  • Manual penetration testing combined with automation and AI-assisted testing
  • Web applications and APIs
  • Mobile applications
  • Point-of-sale (POS) systems
  • Warehouse management systems
  • LLM applications and agentic AI systems
  • Validated findings, risk ratings and remediation advice for technical and management audiences
  • GRC
  • APRA CPS 234

Security controls testing function

  • Established a controls testing framework to fulfil APRA CPS 234 obligations
  • Established the controls testing program
  • GRC
  • ISO/IEC 27001

ISO 27001 certification

  • Advisory services to establish ISO 27001 certification
  • Developed information security policy and standards
  • Developed the information security risk management framework
  • Conducted the information security risk assessment

How we work

Simple, from first conversation to outcome

  1. 01

    Understand

    We learn your business, obligations and risk appetite before recommending anything.

  2. 02

    Advise

    Clear, independent recommendations in language your executives can act on.

  3. 03

    Execute

    Hands-on delivery: we write the policy, run the assessment, build the program.

  4. 04

    Deliver

    A working capability your team owns, with the evidence to show it works.

Let’s make security simple.

Tell us where you are and where you need to be. We’ll come back with a clear, practical view of what it takes to get there.

Contact us hello@deteqted.com