project black logo

We are Project Black.

Project Black is a Sydney headquartered Australian cyber security consultancy.


Our mission is to make cybersecurity accessible to every Australian business. We are dedicated to offering top-notch services at reasonable prices, ensuring that businesses across Australia, irrespective of their size or industry, can feel confident in their security measures.

Our Values.

  1. Deliver high-quality, reliable security services to our clients.
  2. Provide a level of value that far exceeds the cost.
  3. Emphasize transparency in all of our interactions and communications.
  4. Establish long-term relationships with our clients based on trust and mutual respect.

Our Services.

Certified Testers

Project Black consultants hold industry-recognised penetration testing certifications like the CREST CRT, Offsec's OSCP, and OSCE, so you and your customers can rest assured that testing is being performed to a high standard.

CREST logo
OffSec logo

Proven Methodology, Proven Results

A pentest isn't a scan! Our penetration testing methodology is firmly rooted in industry best practices, including references to the Open Web Application Security Project (OWASP) Top 10, the SANS CWE Top 25, and the Penetration Testing Execution Standard (PTES).

Certified Consultants

Our application security experts boasts prestigious certifications such as GIAC's GCSA and Microsoft's AZ500, ensuring that our DevSecOps advice is practical and integrates seamlessly with your development lifecycle.

GIAC logo
MCP logo

Shift Left

Penetration testing isn't the only way to identify vulnerabilities in your application! Embrace the 'shift left' approach, incorporate threat modelling and Static Application Security Testing (SAST) early in the development cycle.

Pragmatic Controls

Tailor security controls specific to your needs, not everyone needs to build Fort Knox. We assess your unique risk profile to ensure that every security control is necessary, efficient, and adds real value.

The Attackers Mindset

The best defence is a good offence, and that's the core of our cybersecurity philosophy. By understanding the tactics of attackers, we can craft more robust defences and countermeasures.

Our Latest Blogs.

Our Partners.

Sophos logo
Knowbe4 logo
Tenable logo
Graylog logo

We're proud to collaborate with a diverse network of leading technology vendors. Partnerships allow us to leverage collective knowledge, advancements, and resources to deliver exceptional security solutions to our clients.

Contact Us:

  • Privacy Policy (November 2023)
  • This policy outlines how we collect, use, and safeguard your personal information.
  • Information We Collect & How We Use It
  • Contact Form: When you use our contact form, we collect your name, email, and phone number. This is used to respond to your inquiries
  • Microsoft Clarity, Google & Bing Analytics: We use Microsoft Clarity together with Google & Bing Analytics to collect data such as your page views, and visitor behavior on our site. This helps us understand how our website is used to help us improve our site.
  • We do not share your personal data with any third parties, except as necessary for Microsoft Clarity, Google & Bing Analytics analysis, see their privacy policies for more information.
  • Data Security
  • Contact form information is sent via formspree.io as this is a 100% static site to a shared mailbox in Office 365. Access to this mailbox is restricted to specific individuals within our company to ensure the security of your information.
  • formspree.io helps us archive a copy of the form submission where it is retained for 30 days. If you prefer to contact us directly, you can email us at [email protected] for the same purpose.
  • Your Rights
  • You have the right to access, amend, or request the deletion of your personal data. If you have any privacy-related concerns, questions, or requests regarding your personal information, please contact us at [email protected].
  • Changes to Privacy Policy
  • Our privacy policy may be updated periodically. Any changes will be posted here and communicated to individuals who have previously submitted forms.
  • Jurisdiction
  • This privacy policy adheres to the Australian Privacy Principles.