Bastion Security

Assess your systems and improve security

Know where your security stands and how to make it stronger. Our Assess & Improve services identify gaps, measure maturity and help plan your next steps.

Talk to an expert

Strategy meets security

Security insights that drive better decisions

Explore services designed to uncover risks, strengthen your posture and support ongoing security improvement.

Practical, expert-led guidance tailored to your systems and goals
Clear insights you can act on
Support across penetration testing, compliance and cyber risk governance

Uncover security risks

Find the right path to strengthen your security

From audits to testing, we help you uncover risks, understand your posture and take the right steps.

Your path to certification

Our team ensures you meet the necessary standards and help you get your certification or accreditation with minimal hassle.

Certification & Accreditation

Find gaps and build resilience

Review your security enviroment, strengthen your defences, and move forward with confidence.

Audit & Assurance

Make compliance feel less complicated

We simplify GRC obligations so your business can stay compliant, without the headache.

Governance, Risk & Compliance

See where you stand, and how to improve

How resilient is your organisation? Our assessments uncover this and guide you on what to improve next.

Cyber Maturity Assessments

Find weaknesses before attackers do

How secure is your business? Our pen tests simulate real-world attacks to find what others miss, before someone else does.

Penetration Testing

Your path to certification

We help organisations simplify the security certification and accreditation process with expert advice that actually fits your systems, goals, and timelines.

Certification & Accreditation

Find gaps and build resilience

Strong security starts with visibility. Our audit and assurance services review your controls, highlight gaps, and help you build more resilient systems.

Audit & Assurance

Make compliance feel less complicated

Strengthen governance, manage risks and ensure compliance with ease. We simplify cyber security to fit seamlessly into your operations.

Governance, Risk & Compliance

See where you stand, and how to improve

We assess your controls, map your security maturity, and recommend a clear path to strengthen it. A well-executed digital maturity assessment sets the foundation for your security roadmap

Cyber Maturity Assessments

Find weaknesses before attackers do

Attackers don’t wait. Our penetration testing finds your weak spots first, across apps, systems, and networks so you can fix them fast.

Penetration Testing

Discover our services

Assess risk and improve resilience

Our services cover every aspect of your security, from initial assessment to ongoing protection.

Certification & Accreditation

We help organisations simplify the security certification and accreditation process with expert advice that actually fits your systems, goals, and timelines.

Certification & Accreditation

We help organisations simplify the security certification and accreditation process with expert advice that actually fits your systems, goals, and timelines.

Audit & Assurance

Strong security starts with visibility. Our audit and assurance services review your controls, highlight gaps, and help you build more resilient systems.

Audit & Assurance

Strong security starts with visibility. Our audit and assurance services review your controls, highlight gaps, and help you build more resilient systems.

Governance, Risk & Compliance

Strengthen governance, manage risks and ensure compliance with ease. We simplify cyber security to fit seamlessly into your operations.

Governance, Risk & Compliance

Strengthen governance, manage risks and ensure compliance with ease. We simplify cyber security to fit seamlessly into your operations.

Cyber Maturity Assessments

We assess your controls, map your security maturity, and recommend a clear path to strengthen it. A well-executed digital maturity assessment sets the foundation for your security roadmap

Cyber Maturity Assessments

We assess your controls, map your security maturity, and recommend a clear path to strengthen it. A well-executed digital maturity assessment sets the foundation for your security roadmap

Penetration Testing

Attackers don’t wait. Our penetration testing finds your weak spots first, across apps, systems, and networks so you can fix them fast.

Penetration Testing

Attackers don’t wait. Our penetration testing finds your weak spots first, across apps, systems, and networks so you can fix them fast.

Service Development Manager

Government Agency

"Great service, clear, detailed and precise information on what our vulnerabilities were and what needs addressing. Couldn't have been easier to deal with and very professional."

What comes next

Expand your security coverage

Assessment is just the beginning. We’ll guide you from insight to action, so you’re not only aware of the risks but ready to take them on.

Tailored recommendations based on your environment and risk profile
Follow-up services including remediation planning and continuous monitoring
Ongoing support to strengthen your cyber security posture over time

Talk to an expert

Employee Cyber Training & Awareness

Your people are your first line of defence. Our cyber training builds awareness, sharpens instincts and turns everyday staff into assets.

When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making

Why choose us

Meet the people who power your protection

Our team isn’t just experienced, they’re invested. Their technical expertise, breach response skills and certifications make Bastion’s cyber security services trusted and effective.

Governance, Risk & Compliance

James Fitzsimons

Threat Detection & Response

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

Silverstripe - Cross-Site Scripting (XSS) Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in the administrator panel of Silverstripe CMS, specifically in the handling of the user input within the form messages module.

Silverstripe - Host Header Injection

A Host header injection vulnerability in Silverstripe has been identified that allows an attacker to poison the password rese

Sam Schroder found a local file inclusion (write only) vulnerability inside of the upload functionality of Statamic CMS. This affects front end components like forms with `assets` fields.

Frequently asked questions

Frequently asked questions

From risk assessment to rapid response - we’re with you every step of the way.

Is this a one-time service or ongoing?

It can be both. We offer one-time evaluations or ongoing security improvement programs to help you evolve alongside changing threats and regulations.

Can you align assessments with specific frameworks or regulations?

Yes. We tailor assessments to ISO 27001, NZISM, PSR, NIST, PCI-DSS, and industry-specific compliance requirements.

What if we’ve never done a formal security assessment before?

That’s perfectly fine. We specialise in helping organisations get started, understand the gaps, and prioritise actions without overwhelming your team.

What services are included in your assessment offerings?

We conduct comprehensive security audits, gap analyses, threat risk assessments, maturity benchmarking, and compliance reviews aligned with ISO, NZISM, and other standards.

What does 'Assess & Improve' mean in the context of security?

It’s about understanding where your security stands today and how to make it stronger. We identify gaps, evaluate risks, and help you build a smarter, safer security strategy.

Contact us

Talk to an expert

Please call our office number during normal business hours or submit a form below

Where to find us

If you experience a security breach outside normal working hours, please complete the form and we will respond as soon as possible.

Get in touch

info@bastionsecurity.co.nz

General enquiries

Auckland office

Level 5, 51
Shortland Street,
Auckland 1010 New Zealand

Wellington office

Levels 8 and 9, 10
Brandon Street
Wellington 6011 New Zealand

Melbourne office

Level 22
120 Spencer Street
Melbourne 3000 Australia

Are you experiencing a security breach?

Incident Response