Clients
Who we work with
We had an excellent experience working with Ironbark Cyber for our penetration testing. The team was highly professional, responsive, and receptive to our feedback throughout the entire process. Their detailed report provided clear, actionable insights into our network's security posture, and they went above and beyond in addressing our concerns. We are satisfied with the quality of their service and look forward to partnering with Ironbark Cyber for future security assessments.
Our services
What we do
We test your systems the way an attacker would, then help you fix what we find. Every engagement is delivered by a senior consultant and includes a free retest within 90 days.
01
AI Security & Assurance
Security testing and assurance for organisations building, buying or deploying AI. We attack LLM applications and agents, then help you prove to boards and regulators that the risk is managed.
- LLM application penetration testing
- AI red teaming
- AI agent security testing
- Secure AI architecture review
- ISO/IEC 42001 readiness
- AI governance & assurance
02
Offensive Security
Manual penetration testing across web applications, APIs, networks, cloud and people. This is the work Ironbark Cyber was built on.
- Web application penetration testing
- API penetration testing
- External network penetration testing
- Cloud penetration testing
- ISO 27001 & compliance testing
- Social engineering · OSINT · Secure development
Drowning in bug bounty or VDP reports? Our sister service Triagers.com handles the triage so your engineers can keep shipping fixes.
Founder
Luke Stephens (hakluke)
Widely known bug bounty hunter and security researcher, author of open-source offensive tooling including hakrawler, and featured by HackerOne on AI red teaming. Luke scopes and leads Ironbark Cyber engagements personally.
Government & defence
Cyber and AI security for Australian government
Australian owned and operated, eligible for direct SME engagement under the Commonwealth Procurement Rules. Essential Eight, ISM-aligned testing, IRAP-readiness pentesting and AI assurance for agencies, plus subcontracting for primes that need sovereign delivery.
Mid-audit and need a pentest fast?
Get a fixed quote in 1 business dayContact
Talk to us
Tell us what you're trying to protect, secure or build. We'll come back with a plan.