TRUST CENTRE

Security, privacy and compliance at Attack Insights

We help organisations secure their attack surface — so we hold ourselves to the same standard. This Trust Centre explains how Attack Insights Software Pty Ltd protects your data, the certifications we hold, and how we handle privacy and disclosure.

ISO/IEC 27001 · Privacy by design · Responsible disclosure
ISO 27001

OUR APPROACH

Security is foundational, not an afterthought

Attack Insights Software Pty Ltd (ABN 24 692 309 336) operates an information security program aligned with ISO/IEC 27001. Security, privacy and transparency are built into how we design our platform, run our business, and handle the data our customers trust us with.

Defence in depth: we apply layered technical and organisational controls — access management, encryption, monitoring and ongoing testing — appropriate to the sensitivity of the data we process.

HOW WE PROTECT YOUR DATA

Controls across people, process and technology

Access & Encryption

Least-privilege access controls, strong authentication, and encryption of data in transit protect your information.

Monitoring & Response

Continuous monitoring, logging and an incident response process help us detect and respond to issues quickly.

Secure Development

Security is built into our development lifecycle, with ongoing testing of our own external attack surface.

CERTIFICATIONS & FRAMEWORKS

Standards we align to

We align our program to recognised security and privacy frameworks.

ISO/IEC 27001Australian Privacy PrinciplesEssential EightNIST CSFGDPR (where applicable)

DATA RESIDENCY & PRIVACY

Where your data lives and how it’s handled

Australian operations

We operate from Australia and can discuss data-residency options for enterprise customers.

Privacy by design

We collect only what we need and handle it under the Australian Privacy Principles.

Sub-processors

We use vetted providers under appropriate contractual safeguards; a current list is available on request.

Your rights

Access, correction and other rights are set out in our Privacy Policy.

FAQ

Trust & security, answered

Is Attack Insights ISO 27001 certified?

Attack Insights operates an information security management program aligned with ISO/IEC 27001. Please contact us for current certification details and documentation.

Where is my data stored?

Attack Insights operates from Australia. Enterprise customers with specific data-residency requirements can contact us to discuss available options.

How do I report a security vulnerability?

Please see our Vulnerability Disclosure Policy and email security@attackinsights.ai. We support coordinated disclosure and offer safe harbour for good-faith research.

Can I get a list of sub-processors?

Yes. A current list of sub-processors is available on request — please contact us.

How is my privacy protected?

We handle personal information under the Australian Privacy Principles and, where applicable, the GDPR. See our Privacy Policy for full detail.

Questions about our security or privacy?

We’re happy to share more detail with customers and prospects under evaluation.

External Attack Surface

Discover and monitor every internet-facing asset you own.

Detect new CVEs and exposures as they appear.

Find misconfigurations across AWS, Azure and GCP.

Prove your security controls actually work.

Threat & Digital Risk

Our public threat intelligence platform, in real time.

Spot leaked credentials and targeted threats early.

AI-driven prioritisation that cuts through the noise.

Protect your brand, data and people beyond the perimeter.

API & Email Security

Discover and test externally exposed APIs.

Stop spoofing with SPF, DKIM and DMARC checks.

Dashboards and board-ready security reporting.

Continuously test your public web applications.

Stream validated findings to your SIEM, SOAR and ticketing tools.

Explore

See the full Attack Insights platform.

See Attack Insights in action.