Codecas

BACKGROUND

Please describe your company and position.

 I am the Director of an it services company 

Describe what your company does in a single sentence.

The team offers a range of cybersecurity services, including:

Penetration testing and security assessments for web, mobile, network, and cloud environments.
Governance, risk, and compliance audits, including ISO, SOC 2, PCI DSS, GDPR, and other frameworks.
Security solutions such as next-generation firewall, anti-virus, IAM, data loss prevention, email gateways, SIEM, cloud security, and virtual CISO services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Codecas to accomplish?

• Penetration testing and security assessments
• Governance, risk, and compliance audits,
• Security solutions

SOLUTION

How did you find Codecas?

Online Search

Why did you select Codecas over others?

Other

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work was described as covering cybersecurity consulting, compliance advisory, and security assessment services. However, the actual scope was not clearly defined in measurable or actionable terms.

While high-level assurances were provided around security reviews and compliance support, specific deliverables, timelines, and methodologies were not clearly documented upfront. Expectations around outputs such as detailed reports, remediation plans, risk prioritization, or compliance evidence were loosely articulated and lacked structure.

Key deliverables were presented more as conceptual outcomes rather than concrete artifacts. There was limited visibility into:

The exact assessment framework being applied
The tools or standards used during evaluations
Clear success criteria or acceptance benchmarks
As a result, it was difficult to track progress or validate completion against predefined milestones. Overall, the scope appeared broad but shallow, with insufficient detail to support effective execution or accountability.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our experience with Cosecai Services Pty Ltd did not meet expectations.

While the company presents a wide range of cybersecurity, compliance, and governance services on its website, in practice we found limited clarity and transparency around how these services are actually delivered. Much of the information shared appeared high-level and generic, with insufficient detail on methodologies, tools used, or measurable outcomes.

Communication during interactions lacked consistency, and responses to specific technical or operational questions were often vague or non-committal. We also did not find verifiable case studies, client references, or documented results that could substantiate the scale and effectiveness of the services being marketed.

Overall, the experience made it difficult to assess the company’s real capabilities beyond marketing claims. Prospective clients may want to conduct thorough due diligence, request detailed documentation, and seek independent references before engaging.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

CoSecAI presents itself as a full-spectrum cybersecurity consultancy with a global footprint, including an Australian entity registered with ABN 11 682 138 923 (active since Nov 2024).  If considering their services, it would be prudent to ask for detailed case studies, client references, and measurable outcomes during your evaluation

What was your primary form of communication with Codecas?

Virtual Meeting

What did you find most impressive or unique about this company?

No specific aspect stood out as impressive or unique. The offerings appeared similar to many other providers in the space, with limited differentiation, depth, or clearly demonstrated value beyond standard industry claims.

Are there any areas for improvement or something Codecas could have done differently?

Yes. There is significant room for improvement in terms of clarity, execution, and transparency. The company could have done better by clearly defining the scope of work, deliverables, timelines, and success criteria upfront. Communication could also be more structured and consistent, with more detailed explanations rather than high-level assurances. Additionally, providing concrete case studies, documented methodologies, and measurable outcomes would help build credibility and trust.