Development services

Cyber security services for apps, websites and business systems

Many attacks on businesses start with something simple: a weak password, an unpatched plugin or a convincing scam email. Our cyber security services find those gaps, fix them and help you stay protected.

At a glance

  • Security assessments and penetration testing
  • Essential Eight alignment
  • Secure code reviews for apps and websites
  • Clear reports in plain English

What do cyber security services include?

Cyber security services protect your systems, applications and data from attack. They usually include security assessments, penetration testing, fixing vulnerabilities, hardening servers and cloud accounts, training staff to spot scams, and planning how to respond if something goes wrong.

Services

How we protect your business

We focus on the fixes that reduce the most risk first.

Security assessments

A security audit that gives you a clear picture of risks across devices, accounts, cloud and software.

Penetration testing

Ethical hacking of your website, app or network to find weaknesses before attackers do.

Essential Eight alignment

Practical steps toward the Australian Cyber Security Centre's Essential Eight controls.

Secure development

Code reviews and security testing built into how software is made, with data protection from day one.

Cloud and server hardening

Lock down AWS, Azure, Microsoft 365 and hosting settings.

Incident response planning

A simple plan so your team knows what to do if there's a breach.

Is it right for you?

When to get a security review

  • Before launching a new app, portal or website
  • After a scam email, suspicious login or data scare
  • When a client, insurer or tender asks about your security
  • If nobody has reviewed your cybersecurity in the past year

Compare

Vulnerability scan vs penetration test

Both are useful. They answer different questions.

Vulnerability scan vs penetration test
CompareVulnerability scanPenetration test
MethodAutomated tools check for known issuesA specialist tries to break in, like a real attacker
DepthBroad but surface-levelDeep, finds chained and logic flaws
OutputA list of known vulnerabilitiesProven risks with clear steps to fix them
Best forRegular health checksBefore launch, after big changes, and for compliance

How we work

Our process, step by step

Scope

We agree what to test and the rules of engagement.

Assess

Scanning, testing and configuration reviews.

Report

Findings ranked by risk, written in plain English.

Fix

We fix the issues or guide your team through them.

Monitor and retest

We confirm the fixes work and keep watch.

Technology

Tools and technologies we use

Testing

OWASP ZAPBurp SuiteNmapNessus

Standards

OWASP Top 10Essential EightISO 27001

Cloud

AWS Security HubMicrosoft DefenderCloudflare

Controls

MFAEncryptionLeast-privilege accessBackups

Why Kedra Digi

Why work with us

One in-house team

Designers, developers and testers work together in-house. Your project is never passed to a subcontractor.

A clear proposal first

Before any work starts you get an itemised proposal that explains what we'll build and how.

You own everything

Source code, designs, documentation and accounts are handed over to you. There's no lock-in.

Support after launch

We monitor, maintain and improve what we build for as long as you need us.

Kedra Digi is an Australian-owned software development company. See our recent projects.

?

Frequently asked questions

Straight answers to the questions we hear most.

Ask your own →
Why does a small business need cyber security?
Smaller businesses are often targeted because their defences tend to be weaker. A breach can mean lost data, downtime and damaged trust, and getting the basics right prevents many common attacks.
How much do cyber security services cost?
It depends on your requirements: how many systems and apps are involved and what kind of testing you need. After a free discovery call you receive an itemised proposal.
What is the Essential Eight?
It's a set of eight mitigation strategies recommended by the Australian Cyber Security Centre, including patching applications, multi-factor authentication, regular backups and restricting admin privileges.
Will penetration testing disrupt our systems?
We agree the scope and timing with you first and test carefully. If you'd prefer, we can test a staging copy instead of your live system.
Can you fix the issues you find?
Yes. We can fix them for you, or give your team clear, step-by-step guidance.
Can you help with privacy obligations?
We help put the technical controls in place to protect personal information. For legal advice on your Privacy Act obligations, we recommend speaking with a lawyer.

Free discovery call

Not sure how secure you are?

Tell us about your systems and any concerns. We'll reply within one business day with honest advice on where to start.

Prefer email? [email protected]