Providing Information Security Services Australia Wide

Trusted by Private and Government Organisations Since 2003

Solutions for Information Security Leaders

Vulnerability Management

Penetration Testing

PCI Compliance


Security Education

About Shearwater Solutions

Our purpose is to create a safer connected world.

Shearwater is a specialist information security services provider. We address four of the key information security challenges confronting organisations today, the challenges of securing applications; managing security operations; maintaining compliance, and improving awareness and security education across the board. We provide a combination of integrated services and capabilities delivered through our highly experienced information security and risk professionals.

Shearwater delivers Managed Security Services and Incident Response, Application Security Services including Secure Code Reviews and Penetration Testing, and Security Education. We also enable government and private organisations to achieve, maintain, and prove compliance with various domestic and international security standards including PCI-DSS, ISO 27001, NIST and the ISM/PSPF.

We also provide end-to-end Vulnerability Management services from one-off vulnerability assessments through to ongoing managed services comprised of discovery, classification, and remediation activities.

Why Choose Us?

  • Experience

    All our consultants pursue accreditation appropriate to their domain of expertise. We also continuously refine our methodologies to fit business needs and minimise any risk of disruption.

  • Ownership

    Going above and beyond to honour our commitments is embedded in our culture. We hire for skills and attitude, and our staff are empowered to make decisions and own the outcome.

  • Practicality

    We understand that providing value to you goes beyond pinpointing problems to providing the most direct and cost-effective route to resolution.

  • Communication

    A lead consultant and an escalation point are accessible throughout the engagement. Before, during and after delivery we are readily available to answer any questions so that you get the utmost value out of your engagement.

Client Testimonials

We chose to engage an Australian company called Shearwater to lead that (IRAP) assessment because of their reputation for rigour and expertise.

James KavanaghCTO, Microsoft Australia

The relationship with Shearwater and the two-way exchange of information, ideas, and feedback – has significantly helped us improve our own security and allowed us to stay abreast of changes in the security landscape.

Calvin RowleyCEO, The Reach Agency

Overall, we find Shearwater to be flexible, consultative, and delivering on their promise. They have a high level of understanding of the information security landscape and the threats that a financial services organisation has or may have in the future. They have demonstrated their capabilities and knowledge in suggesting and implementing suitable solutions.

Head of Business ManagementLeading Australian Insurer

Shearwater solved our problem and delivered on what was promised, on time and on budget.

ITSAFederal Agency - ISM/PSPF Engagement

Trusted by Industry Leaders

From our Blog