Who is Ironbark Cyber?
Ironbark Cyber is an Australian consultancy specialising in two things: AI security and assurance, and offensive security. We test the systems organisations are betting on, LLM applications and agents, web and cloud infrastructure, the people around them, and we help boards, auditors and government prove the risk is managed. Headquartered in Queensland, Australia, we work with security-conscious organisations across the country and the world.
We're deliberately senior-only. The consultant who scopes your engagement is the consultant who does it. No junior bench, no rebadged scanner output, no 200-page report nobody reads.
Who founded it?
Ironbark Cyber was founded by Luke Stephens, better known as hakluke. Luke is a widely recognised bug bounty hunter and security researcher, the author of open-source offensive tooling used across the industry (including hakrawler), and has been featured by HackerOne on AI red teaming. He owns the Haksec group of cybersecurity companies, of which Ironbark Cyber is the offensive security and AI arm, alongside sister brand Triagers (vulnerability disclosure triage).
You can find more of Luke's work at hakluke.com, on LinkedIn, X and GitHub.
Who does the work?
Everyone at Ironbark Cyber is a senior practitioner with years in cybersecurity. There is no junior bench and no rebadged scanner output. The consultant who scopes your engagement is the one who does it, led personally by founder Luke Stephens. It's a deliberately small, senior team, and it's the whole point: you get the people who have spent careers breaking things for a living, not the people who read a report they didn't write.
Why "Ironbark"?
The Ironbark is one of Australia's toughest native trees: deeply rooted, fire-resistant, and built to outlast the storm. That's the kind of security posture we want for our clients. Not flashy, not theatrical, just resilient.
Company facts
- Legal name Ironbark Cyber
- ABN 18 692 781 561
- Founded 2025
- Location Queensland, Australia
- Address Suite 214, 10 Albert Ave, Broadbeach QLD 4218
- Group Part of the Haksec group
- Ownership Australian owned & operated
Press & talks
Luke's work and writing turn up across the offensive security community. A selection:
- Featured by HackerOne on AI red teaming.
- Profiled by Detectify Labs on building bug bounty automation.
- Interviewed on the Cybr podcast on breaking into bug bounty hunting.
- Featured on HackerNoon for hakrawler, his open-source recon crawler.
- Author of widely read offensive-security writing at hakluke.com and on Medium, and creator of open-source tooling used across the industry, including hakrawler, hakrevdns and hakoriginfinder.
Contact
Talk to us
Tell us what you're trying to protect, secure or build. We'll come back with a plan.