Blog

Research and field notes on AI security, penetration testing and offensive security from the Ironbark Cyber team.

How Much Does a Penetration Test Cost in Australia?

How Much Does a Penetration Test Cost in Australia?

Penetration test cost in Australia: real guide prices from AU$6,000–18,000, what drives price up or down, and how fixed-price scoping actually works.

How to Choose a Penetration Testing Company

How to Choose a Penetration Testing Company

How to choose a penetration testing company: the red flags to avoid and the questions to ask about testers, methodology, retesting and report quality.

LLM Security and Prompt Injection: The New Attack Surface

LLM Security and Prompt Injection: The New Attack Surface

LLM security starts with prompt injection. Why AI apps open a new attack surface, data exfiltration via tools, excessive agency, and practical mitigations.

How to Pass Enterprise Security Questionnaires

How to Pass Enterprise Security Questionnaires

How to pass an enterprise security questionnaire: the pentest reports, attestation letters and policies reviewers want, plus honest answers that win deals.

Penetration Testing for Startups: When and What to Test

Penetration Testing for Startups: When and What to Test

When a startup actually needs its first penetration test, what to test first on a limited budget, and how to turn the report into a sales asset.

ISO 27001 Penetration Testing: A Practical Guide

ISO 27001 Penetration Testing: A Practical Guide

What ISO 27001 expects on penetration testing: Annex A 8.8, right-sizing scope from your statement of applicability, and audit-ready deliverables.

SOC 2 Penetration Testing Requirements Explained

SOC 2 Penetration Testing Requirements Explained

Does SOC 2 require penetration testing? Not explicitly, but auditors expect it. What SOC 2 pentesting involves, Type I vs Type II, and what to provide.

Executive Digital Footprint: What Attackers Can Find

Executive Digital Footprint: What Attackers Can Find

Your executives' digital footprint fuels spear phishing, fraud and physical risk. What's publicly discoverable and how an exposure assessment works.

Physical Penetration Testing: What It Is and What You Learn

Physical Penetration Testing: What It Is and What You Learn

Physical penetration testing puts your locks, badges and staff to the test. What engagements cover, the legal and rules-of-engagement basics, what you learn.

API Penetration Testing: A Practical Guide

API Penetration Testing: A Practical Guide

API penetration testing explained: how it differs from web app testing, the OWASP API Security Top 10, and how to test an API without a spec.

Put this into practice

A senior Ironbark Cyber consultant will scope your engagement on a free 30-minute call and give you a fixed quote within one business day.