Incident response · Managed security
We know what happens when businesses get hacked. We built Fortify so it doesn’t happen to yours.
IronSights is an Australian incident response team. Fortify is our managed security plan, shaped by what we see on real incidents: the way in, the gap that let it happen, and the control that would have stopped it. Sydney-based, answered around the clock by a person.
Trusted by organisations across Australia
We partner with organisations in a wide range of industries to reduce risk, strengthen security and build resilience.
Mortgage
brokersLaw
firmsMedical
specialist groupIndependent
schoolColleges &
higher educationAnimation
studioFinancial
services firmTechnology
servicesNFP
organisationNDIS &
disability servicesASX listed
companies
What we see when the call comes
Most breaches aren't sophisticated. They walk in through a gap.
Attackers don't need zero-days. On the incidents we work, the same few gaps show up every time. Fortify exists to close them before the call.
Remote access without MFA
A VPN or remote desktop gateway with a password and no second factor is the front door in most Australian ransomware cases we see. One sprayed password, and the attacker is inside with a legitimate login.
Nobody watching the endpoint
Attackers sit on a server for days before encryption. Without detection on the device, the first sign is the ransom note.
A mailbox nobody is looking at
Business email compromise starts with one account. The attacker reads, waits, and sends the invoice from inside your own domain.
Built by responders
Security is not a project. It's a process.
The four pillars are what we wish every business we respond to had in place. Every cycle closes a gap we have seen exploited, raises Essential Eight maturity, and produces evidence your board can read.
Monitor
Identify threats
Detection across endpoints, identities, email, and cloud, tuned by the team that knows what an intrusion looks like at hour one.
Respond
Contain incidents
The same responders who handle and email compromise for Australian businesses, already on your account.
Improve
Reduce risk
Monthly hardening, prioritised by what is being exploited in Australia this quarter, not by a generic checklist.
Educate
Build awareness
simulations and short training built from the lures that actually landed.
Built on platforms you trust
The tools your business already uses, properly deployed.
Microsoft 365 Security
Secure identities, protect data, and reduce risk across the platform your business already runs on.
- Tenant hardening and Conditional Access
- Microsoft Secure Score uplift
- Continuous Defender coverage
- Identity and data protection
Microsoft Defender
Advanced endpoint protection, threat detection, and automated response.
Learn more→UniFi Protect CCTV
Enterprise video surveillance, professionally installed and managed.
Learn more→UniFi Access Control
Smart door access for modern Australian workplaces. Reliable and scalable.
Learn more→What clients say
Real voices from Australian businesses we protect.
“We weren’t looking for fear or complexity, we just wanted a clear picture of where we stood and what to focus on. IronSights delivered that. The advice was direct, practical, and aligned to how we work. It’s helped us move forward with confidence.”
Akram
Managing Director
Student Immigration Agency
“We engaged IronSights to help secure our Microsoft 365 environment, and the results have been outstanding. From start to finish, the process was handled with professionalism, clear communication, and deep technical expertise. The assessment gave us clarity on our risks and a practical path forward.”
Andrew
Technical Architect & CTO
Technology Consultancy
“IronSights secured our IT systems and protected sensitive information. Their skilled team delivered excellent cybersecurity and support that exceeded expectations. Their quick, proactive approach lets us focus on our business with confidence. I highly recommend IronSights for reliable IT solutions.”
Damien
Chief Executive Officer
Higher Education Provider
“When my Instagram got taken over, I honestly thought it was gone for good. I spoke to a few people before IronSights and nobody could get it back. The team jumped in, worked through the recovery properly, and got me back into the account. They made a stressful situation way easier and actually knew what they were doing.”
Daniel
Content Creator
Independent content creator
“IronSights have become an extension of our IT team, not just for this project but ongoing. They gave us extra support when we needed it, handled every technical detail, and made sure every workstation was connected and ready. Their planning and care turned a complex move into a smooth transition.”
Kareem
Head of Information and Technology
Animation Studio
“What I value most about Fortify is the confidence it gives our organisation. We know our systems are being actively monitored, risks are being managed, and we have a team that genuinely understands our environment. It has taken cyber security from something reactive and uncertain to something structured, visible, and well supported.”
Lisa
Director of Corporate Services
Social Services
“I’m a chippy, so I’m on the tools all day. I don’t have time to mess around with tech stuff. These guys have been a lifesaver. They keep my emails sorted, devices running smooth, and if anything goes pear-shaped, they fix it fast. No stress, no mucking around. Makes my life way easier. Highly rate them.”
Maher
Carpenter
Residential Construction
“What I appreciate most is that I’m not just fixing things anymore. We’ve got structure, we’ve got support, and we’ve got a plan. I know we’re protected, I know where we’re heading, and I know I’ve got the right people helping us get there.”
Susan
Head of Partnerships & Operations
Social Services
Free assessment
Where do you stand against the Essential Eight?
Answer a short set of questions and get an honest read on your maturity across all eight controls, plus where to focus first. No signup, results in about five minutes.
Start the assessmentLive threat intelligence · Updated weekly
View the trackerSecurity key store
The keys that replace SMS codes, sold by the people who deploy them.
Microsoft makes passkeys the default Entra sign-in from September 2026 and retires SMS and voice codes on 1 February 2027. We now stock YubiKeys in Australia, with straight advice on which key fits and guides to set them up.
Advice before checkout
Every product page says who the key suits and who it does not. The buying guides answer the questions people actually have.
Posted from Sydney
GST-inclusive pricing, a tax invoice with every order, and 30-day returns alongside your ACL rights.
Backed by the practice
Buy the hardware and take it from there, or have us run the enrolment and the Conditional Access policy behind it.
Insights
Practical security thinking for Australian businesses.
threat intelligence
Passports, licences and a TFN declaration
Three Australian businesses were listed by three different ransomware groups in ten days. The proof files had one thing in common: they were staff documents, not customer ones. The week on the breach tracker.
25 Sept 2026 · Ryan Balloot
security awareness
The WhatsApp message from your hotel
Qantas Hotels guests are getting WhatsApp messages asking them to verify a booking and hand over card details. Nobody has said where the data came from. To the person receiving it, that is beside the point.
24 Sept 2026 · Ryan Balloot
threat intelligence
Twenty-three days
Mathspace's reporting tool sat unpatched for 23 days after a maximum-severity advisory. Attackers needed four. What the timeline says about the tools nobody counts as internet-facing, and why your cyber insurer is reading it too.
23 Sept 2026 · Ryan Balloot
Free tool · No signup to run
Is your email domain exposed to spoofing?
Check your SPF, DKIM, and DMARC records in seconds and see your domain's email security score instantly. It's how business email compromise and invoice fraud start.
See the whole table
We'll show you every angle, then help you play the right shot.
A good player reads the whole table before they take a shot. A review does the same for your security. We map where your risks sit and what to deal with first, so every move after that is deliberate rather than a guess.
- Your highest-priority security gaps
- A clear remediation roadmap
- The right service for your situation