Conformance Pty Ltd

Conformance is an Australian cyber security consultancy specialising in offensive security. We deliver penetration testing across external and internal infrastructure, web applications, APIs, mobile applications, cloud platforms and wireless networks, plus red team exercises, phishing campaigns and ASD Essential Eight maturity assessments on our purpose-built platform. Our research record includes five published CVEs, with acknowledgements from the Australian Taxation Office, OpenText and the UK National Cyber Security Centre. Recent research includes a CVSS 10.0 unauthenticated SQL injection in Esri ArcGIS Server (CVE-2025-57870). Every engagement is scoped in writing, quoted at a fixed price, and reported with evidence, business impact and a concrete fix for each finding, with remediated issues retested until closed. We work with government and enterprise organisations across Australia and New Zealand.