Advisory

When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making

Talk to an expert

Uncover security risks

Know the risk. Lead with confidence.

From board reporting to post-engagement reviews, we’re your partner in cybersecurity strategy.

Find and fix gaps in your response

We simulate real-world scenarios to test detection, escalation, and recovery - and provide actionable recommendations to strengthen response maturity.

Security Incident Response Testing

Deliver security insights that matter

We support report design, risk framing, and delivery - helping security leaders tell the right story, in the right way, to get the right support.

Executive & Board Reporting

Practice your response in a safe setting

Our guided sessions walk participants through realistic cyber scenarios, helping your team understand the plan, refine coordination.

Incident Response Tabletop Exercise

Turn frameworks into usable guidance

We create or uplift policy documents that meet compliance needs and support daily operations - written in plain language your teams can follow.

Security Policy and Standard Development

Get expert guidance on security priorities

We help define direction, build business cases, and prioritise investment — giving you a clear path to improve security outcomes and reduce risk.

Strategic Security Consulting

Find and fix gaps in your response

We simulate real-world scenarios to test detection, escalation, and recovery - and provide actionable recommendations to strengthen response maturity.

Security Incident Response Testing

Deliver security insights that matter

We support report design, risk framing, and delivery - helping security leaders tell the right story, in the right way, to get the right support.

Executive & Board Reporting

Practice your response in a safe setting

Our guided sessions walk participants through realistic cyber scenarios, helping your team understand the plan, refine coordination.

Incident Response Tabletop Exercise

Turn frameworks into usable guidance

We create or uplift policy documents that meet compliance needs and support daily operations - written in plain language your teams can follow.

Security Policy and Standard Development

Get expert guidance on security priorities

We help define direction, build business cases, and prioritise investment — giving you a clear path to improve security outcomes and reduce risk.

Strategic Security Consulting

Discover our services

All-in-one cyber resilience

Build long-term resilience through expert-led advisory services that strengthen your organisation’s ability to prepare, respond and adapt to evolving cyber threats.

Executive & Board Reporting

We help CISOs and business leaders report security performance, risk, and readiness to executive and board stakeholders — clearly and credibly.

Executive & Board Reporting

Communicate security clearly at the top level

Incident Response Tabletop Exercise

We facilitate tabletop exercises that familiarise your team with your incident response plan and clarify roles, actions, and escalation paths.

Incident Response Tabletop Exercise

Build confidence in your response plan

Security Incident Response Testing

We run hands-on technical and process-based exercises to assess the effectiveness of your incident response capability across your environment.

Security Incident Response Testing

Test and improve your incident response plan

Security Policy and Standard Development

We help you develop practical security policies and standards aligned with frameworks like ISO 27001, NZISM, or NIST — tailored to your context.

Security Policy and Standard Development

Build clear, fit-for-purpose security policies

Strategic Security Consulting

We work with executives and technology leaders to shape pragmatic, risk-based security strategies tailored to business goals and maturity.

Strategic Security Consulting

Security strategy aligned to your business

Security Operations

Energy Sector

"Excellent customer engagement and a thorough understanding of our diverse requirements. Outstanding testing and communication throughout the testing phase."

Service detail

From insight to action

From risk assessment to rapid response, we guide you through every step with clarity and confidence.

Real-world experience, real results

Practical insight backed by decades of delivery

We don’t just recommend change – we help implement it, drawing on lived experience across public and private sectors.

Expert-led reviews informed by current threat trends
Insights tailored to your industry and maturity
Actionable plans that support both compliance and resilience

Our delivery process

Benefits

Why work with us

From strategy to compliance, we help you build a security foundation that’s resilient, practical and future-ready.

Proven expertise

Security leaders with decades of experience across critical infrastructure, government and enterprise.

C-suite insight

Executive-level advisory that speaks your language and aligns with leadership priorities.

Ongoing partnership

Advisory that scales with your business, adapting as your security needs evolve.

What comes next

Our trusted approach

We tailor every engagement to your specific environment, but our trusted approach follows a proven path

Assess & Align: Evaluate your current security posture and align strategy with your business goals.
Design & Enable: Tailored policies, playbooks, and programs to guide your teams through adoption.
Support & Evolve: Continuous advisory, board-ready reporting, and adaptive updates to strengthen resilience over time.

Red teaming simulates real attacks to test your systems, people, and physical security. Our red team penetration testing reveals how well your defences hold up.

Secure Development Training

We train developers and engineers to identify, avoid, and mitigate common security issues — making secure coding part of everyday practice.

Testimonials

Our customers

Look what our customers have to say

Security Operations

Energy Sector

"Excellent customer engagement and a thorough understanding of our diverse requirements. Outstanding testing and communication throughout the testing phase."

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

Silverstripe - Cross-Site Scripting (XSS) Vulnerability

A Cross-Site Scripting (XSS) vulnerability has been identified in the administrator panel of Silverstripe CMS, specifically in the handling of the user input within the form messages module.

Silverstripe - Host Header Injection

A Host header injection vulnerability in Silverstripe has been identified that allows an attacker to poison the password rese

Sam Schroder found a local file inclusion (write only) vulnerability inside of the upload functionality of Statamic CMS. This affects front end components like forms with `assets` fields.

Frequently asked questions

Frequently asked questions

From risk assessment to rapid response - we’re with you every step of the way.

What size or type of organisation do you work with?

Our advisory services are ideal for mid-sized to large enterprises, government entities, and high-risk sectors needing strategic cybersecurity leadership, governance, and executive-level reporting.

Can we engage Bastion for a one-time consultation?

Yes. While many clients value our ongoing support, we also offer one-time strategy sessions, reviews, or incident readiness assessments.

What industries do you specialise in?

We have deep experience across critical infrastructure, finance, health, government, energy, and regulated industries, but our principles apply across all sectors facing modern cyber risks.

What outcomes should we expect from a strategic advisory session?

You’ll walk away with a clear view of your cyber maturity, priority risks, and actionable recommendations. We help align stakeholders, define next steps, and provide the guidance needed to uplift security posture.

Why should I use a security advisor instead of handling it internally?

Because even the best internal teams benefit from outside expertise. We bring fresh perspective, specialist knowledge, and years of frontline experience to help you make more informed and confident decisions.

Contact us

Talk to an expert

Please call our office number during normal business hours or submit a form below

Where to find us

If you experience a security breach outside normal working hours, please complete the form and we will respond as soon as possible.

Get in touch

info@bastionsecurity.co.nz

General enquiries

Auckland office

Level 5, 51
Shortland Street,
Auckland 1010 New Zealand

Wellington office

Levels 8 and 9, 10
Brandon Street
Wellington 6011 New Zealand

Melbourne office

Level 22
120 Spencer Street
Melbourne 3000 Australia

Are you experiencing a security breach?

Incident Response