Sydney-based, data hosted in Australia

Find the vulnerabilities before attackers do.

Comptrusence gives Australian businesses continuous, automated vulnerability scanning aligned with the Essential Eight, without the price tag of manual penetration testing.

MinutesFrom URL to a full report
Essential 8Mapped compliance findings
🇦🇺 100%Australian data residency
Comptrusence logo

Proudly partnered with

Cloud Bridge, an AWS Premier Tier Services Partner, backs our Australian cloud infrastructure.

Try the demo

See what a Comptrusence report looks like

Run the sample scan below to see how we turn a URL into prioritised findings and an Essential Eight and Privacy Act scorecard your board can actually read.

This is a demo, not a real scan The address above is not scanned. What you see is a walkthrough on sample data, so you can get a feel for how a report reads. To scan your own website for real, create a free account and log in. The scanner then runs against your actual site and the findings are yours to keep.
Press Try the demo to begin.
Who we are

Enterprise-grade security, made accessible.

Comptrusence is an Australian cybersecurity company on a mission to make continuous security testing affordable for every business, not just the ones with a security team. We scan your web-facing systems, map what we find to the frameworks your auditors care about, and teach your team how to stay ahead.

What we do

Three ways we keep you covered

Scanning that runs itself, reports your board can read, and education that lifts your whole team.

Automated Scanning

24/7 vulnerability detection across your web-facing systems. Passive checks that are safe to run on any site, with results in minutes and no manual testers required.

Compliance Reporting

Every finding mapped to Essential Eight, the Privacy Act and APRA CPS 234, ready for audits, boards and your ISO 27001 evidence pack.

Cloud Education

Live and on-demand webinars that teach your team cloud security fundamentals, from AWS basics to hardening real workloads.

Australian compliance, simplified

Speak your auditor's language

We turn raw scan findings into the frameworks Australian regulators and customers expect to see.

Essential Eight ISO 27001 ready Privacy Act 1988 Notifiable Data Breaches APRA CPS 234 ACSC aligned
Media

The media library

Explainers, talks and walkthroughs on security and compliance, made for people who run a business. Everything is captioned. Some are open to everyone, no account needed; register free for the rest.

Watch free Captions
AWS

Fortress of Amazon S3

How Amazon S3 keeps data safe, and the settings that decide whether it actually is. The misconfiguration behind most cloud data leaks, explained plainly.

9 min No login needed
Coming soon Members
Cloud Foundations

AWS in an Hour: Core Services for Business Owners

What actually runs your cloud: accounts, regions, IAM and the shared-responsibility model, in plain English.

58 min Beginner
Coming soon Members
Compliance

Essential Eight for Non-Technical Leaders

What the eight strategies mean, why your insurer asks about them, and how to show progress to a board.

36 min Beginner
Free and member tools

Security tooling you can use right now

Built for the questions a small firm actually asks. Is this email real? Has someone registered a lookalike of our domain? Has a service we rely on been breached? Start with the free one, then sign in for the rest.

Free

Password Breach Check

Has a password turned up in a public breach? Checked in your browser. The password never leaves the page.

Check a password
Members

Website Scanner

What your website exposes to the internet, mapped to the Essential Eight, with a score you can put in front of a partner.

Launch scanner
Members

Email Header Analyser

Paste a suspicious email's headers and see where it really came from and whether it passed authentication.

Analyse an email
Members

Lookalike Domains

The typos and lookalike spellings of your domain someone has already registered, and which of them can send email.

Find lookalikes
Members

Breached Services

Has Xero, Dropbox, Canva or any service your firm relies on been breached, when, and what leaked.

Check a service
Members

Domain Registration

When your domain expires, whether it is locked, and whether your home address is sitting in the public record.

Check a domain

Plus an SSL and TLS checker, DNS and email security lookup, a diagram renderer and more.

See all the tools
Questions and answers

Frequently asked questions

Is the website scan safe to run on my live site?
Yes. The public scan uses passive checks only, the same requests an ordinary visitor's browser makes. Nothing intrusive runs without explicit, authorised consent.
Where is my data stored?
All scanning and storage happens in Australian data centres, so you meet data-sovereignty requirements out of the box.
Do I need an account to watch the webinars?
A free account unlocks the full webinar library and the member tools. The email spoofing check and the marketing pages stay open to everyone.
Which compliance frameworks do you map to?
Essential Eight, the Privacy Act 1988, the Notifiable Data Breaches scheme and APRA CPS 234, with reporting that supports ISO 27001 evidence.

Create your free account

Unlock the website scanner, AI diagram studio and every cloud-security webinar. No card required.

Sign up free