CyberCX

What CyberCX does

CyberCX is a managed cybersecurity services provider founded in 2019 and headquartered in Melbourne, Australia, serving enterprise and government organizations across Australia, New Zealand, the United Kingdom, and the United States. The company delivers end-to-end cybersecurity capabilities spanning managed security services (24x7 SOC, SIEM monitoring, endpoint detection and response, vulnerability management, threat intelligence), professional services (penetration testing, digital forensics and incident response, red/purple teaming), and consulting/advisory work (governance, risk and compliance, strategy, identity and access management, cloud security). Core technology includes the proprietary SmartSOC platform integrating robotic process automation across nine Advanced Security Operations Centers globally, delivering CREST-accredited services aligned with ISO 27001, NIST, PCI DSS, ISM/PSPF, CPS234, and Essential Eight frameworks.

The business operates a hybrid revenue model combining recurring managed services subscriptions (annual billing cadence) with project- and retainer-based professional services engagements. CyberCX sells primarily through direct enterprise sales to large organizations and government agencies, supplemented by strategic partnerships with major technology vendors (AWS Premier Services Partner, Microsoft Gold Security Partner, Palo Alto Networks, Tenable, Splunk, CrowdStrike, Okta, SailPoint, Cisco, Netskope, VMware, Illumio, and Nozomi Networks). Pricing is quote-based and not publicly disclosed, varying with scope and organization size. Named customer logos span banking, infrastructure, mining, agriculture, government, sports, publishing, and SMB segments, with reported customer counts ranging from 1,400 to 2,000+ organizations.

Following Accenture's acquisition completed on February 27, 2026 (announced August 2025), CyberCX operates as a wholly-owned subsidiary strengthening Accenture's Asia-Pacific cybersecurity footprint and adding over 1,400 experts to the parent's capabilities. Prior to the acquisition, CyberCX executed at least four inorganic moves (Basis Networks, Insomnia Security Group, Foresight IT Consulting, and Cyber Research NZ) and received growth capital from BGH Capital in 2022 to support its multi-geography expansion.

Name

CyberCX

Legal name

CyberCX

Website

https://cybercx.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

CyberCX is a managed cybersecurity services provider delivering 24x7 SOC, incident response, penetration testing, GRC, and cloud security services to enterprise and government organizations across Australia, New Zealand, the UK, and the US.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621), Computer Facilities Management Services (541513)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Cybersecurity Architecture & Security Integration (BPAEAAAL), Cyber Defense & Information Security (National Security) (BPAIAHAE)

Keywords

• Managed security services
• Penetration testing
• Incident response
• Cloud security solutions
• Governance risk compliance

Headquarters

HQ city

Melbourne

HQ country

Australia

HQ region

Oceania

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel

Revenue model

1. Managed Security Services: 24x7x365 managed security services including SOC, SIEM monitoring, vulnerability management, endpoint detection and response, and threat intelligence delivered as a subscription service
2. Professional Security Services: Consulting and advisory services, penetration testing, security assessments, incident response, and training delivered on project or retainer basis
3. Cloud Security Solutions: Cloud security assessment, migration, and managed services for multi-cloud environments (AWS, Microsoft Azure, Google Cloud)

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

CyberCX provides managed cybersecurity services (24x7 SOC monitoring, managed SIEM, endpoint detection and response, vulnerability management) and professional cybersecurity services (penetration testing, digital forensics and incident response, governance/risk/compliance consulting, cloud security, identity and access management, and cyber training) to enterprise and government organizations across Australia, New Zealand, the US, and the UK. Services are delivered through nine advanced Security Operations Centers and over 1,400 cyber security professionals.

Product overview

CyberCX is a managed cybersecurity services provider offering professional security services through a portfolio of interconnected capabilities. The core offerings include Penetration Testing Services (covering web, mobile, network, OT/IoT, social engineering, and physical testing), Managed Security Operations Centre (24x7 SOC with SIEM and threat hunting), Governance Risk and Compliance (GRC) services, Digital Forensics and Incident Response (DFIR), Cloud Security and Solutions, Strategy and Consulting, Network and Infrastructure Solutions, Identity and Access Management, and Cyber Capability Education and Training. Sub-products include ISO 27001 Services, PCI DSS Services, Cyber Threat and Risk Assessments, Vulnerability Assessments, Application Security, Red and Purple Teaming, and Technical Assessments. The company also produces proprietary research publications including the annual DFIR Threat Report, Hack Report, Secure Cloud & AI Report, and Cyber Governance Insights. CyberCX was acquired by Accenture in February 2026 and operates across Australia, New Zealand, United States, and United Kingdom.

Differentiator

Problem solved

Functional benefit

Products and services

• Penetration Testing Services Authorized hacking services to identify vulnerabilities across applications, networks, and physical environments. Conducted by certified testing experts following ISO 27001, NIST, PTES, CREST, OWASP, and ASVS frameworks. Targets enterprise and government organizations needing to validate security posture.
• Managed Security Operations Centre (SOC) 24x7x365 managed SOC providing SIEM monitoring, continuous threat hunting, breach and attack simulation, and digital brand protection. Operates across 9 advanced security operations centers globally with gold-standard CREST SOC accreditation.
• Managed Security Services End-to-end managed cyber security services including managed SIEM and SOC, vulnerability management, endpoint detection and response (EDR), and threat intelligence, delivered on a subscription basis to enterprise and government organizations.
• Governance, Risk and Compliance (GRC) Cyber risk management services including risk management, business continuity, governance frameworks, and compliance auditing against standards such as PCI-DSS, ISO 27001, NIST, CPS234, and PSPF/ISM. For enterprise, government, and SMB customers.
• Digital Forensics and Incident Response Cyber breach response and digital forensic investigation services including deep forensic analysis, live network threat hunting, enterprise-wide evidence collection, memory forensics, malware reverse engineering, and ransomware recovery for organizations experiencing or preparing for serious incidents.
• Cloud Security and Solutions Cloud security services covering assessment, advisory, transformation, and managed services for AWS, Azure, and Google Cloud. Includes IRAP assessments, cloud migration, landing zones, and FinOps.
• Strategy and Consulting Strategic cyber security advisory including CISO as a Service, M&A cyber due diligence, secure ecosystems, and strategic cyber counsel for C-suite and board partnerships.
• Network and Infrastructure Solutions Network security, unified communications, cloud, collaboration, and mobility solutions covering discovery, architecture, design, build, transition, and optimization for enterprise customers.
• Identity and Access Management Identity governance, access management, privileged access management, and IDAM transformation and integration services for on-premise, cloud, or hybrid deployments.
• Cyber Capability, Education and Training Organization-wide cyber security education and training including boardroom to basement workforce training, practitioner skills, executive cyber literacy, and phishing awareness simulation.
• ISO 27001 Services ISO 27001 certification and compliance services including gap assessment, ISMS internal audit, implementation, transition from 2013 to 2022 version, and ongoing management and maintenance for SMB and enterprise customers pursuing certification.
• PCI DSS Services Payment Card Industry Data Security Standard compliance services including scope discovery, gap analysis, remediation, SAQ assistance, pre-assessment, and full audit by registered QSAs for organizations handling card payments.
• Cyber Threat and Risk Assessment Intelligence-led threat and risk assessments to evaluate organizational risk profiles, identify threat actors, and provide prioritized remediation roadmaps.
• Vulnerability Assessments Network, wireless, and application vulnerability scanning to identify, quantify, and prioritize weaknesses for remediation across enterprise IT environments.
• Application Security Services Application security reviews and assessments ensuring application code strength against global cyber threats, including DevSecOps integration for development teams.
• Red and Purple Teaming Simulated cyber intrusion testing of digital, physical, and workforce environments using real-world attack methods to validate detection and response capabilities.
• Technical Assessments Targeted reviews of system configurations and security controls across cloud, infrastructure, and operational technology environments.

Quantifiable outcome

• 29% of security assessments uncovered at least one severe vulnerability (2026 Hack Report)
• +3 more outcomes

Named customers12 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability5 records

Feature3 records

Partnerships

18 partnerships are on record, tiered major, flagship, core and general.

• Rugby AustraliamajorGTM or Marketing Partner · 24 June 2026CyberCX extended its cyber security partnership with Rugby Australia through 2027, remaining the official partner for Wallabies and Wallaroos. Partnership includes penetration testing, executive cyber incident simulations, organizational risk assessments, and commercial marketing elements such as branding in coaches' boxes and match-day signage.
• Collingwood Football ClubmajorGTM or Marketing Partner · 9 April 2026CyberCX expanded its partnership with Collingwood Football Club, becoming a major partner. Services include monitoring, penetration testing, and awareness activities. This follows two years of collaboration on digital security.
• AccentureflagshipStrategic or Co-development Partner · 27 February 2026CyberCX was acquired by Accenture on February 27, 2026. The acquisition strengthens Accenture's cybersecurity footprint in Asia-Pacific, adding over 1,400 experts to Accenture's cybersecurity capabilities. Accenture completed 23 acquisitions across 2025 including CyberCX as part of its strategic push for AI and cybersecurity capabilities.
• Tennis Australia (Australian Open)majorGTM or Marketing Partner · 19 January 2026CyberCX extended its Official Cyber Security Partnership with the Australian Open through 2026, continuing a four-year relationship. Partnership addresses risks including data theft, privacy breaches, ticketing fraud, and operational disruption.
• Cyber Research NZcoreStrategic or Co-development Partner · 9 February 2022CyberCX acquired New Zealand MSSP Cyber Research NZ in 2022 to enhance cybersecurity offerings in New Zealand and globally, broadening capabilities in threat intelligence and managed security services.
• Amazon Web Services (AWS)coreTechnology or IntegrationAWS Premier Services Partner with Security Competency designation. CyberCX works with AWS customers across public and private sectors to design and build enterprise grade data solutions on native AWS services.
• MicrosoftcoreTechnology or IntegrationMicrosoft Gold Security Partner. CyberCX provides secure digital transformation services powered by Microsoft and security services designed to secure ecosystems using core Microsoft Security technologies.
• Palo Alto NetworkscoreTechnology or IntegrationRecognized at Palo Alto Networks 2025 APJ Partner Awards with Cybersecurity for Good Award. Partner delivering AI-powered cybersecurity solutions.
• TenablecoreTechnology or IntegrationTenable APJ Partner of the Year 2026. Partner driving adoption of Tenable One Exposure Management Platform.
• SplunkgeneralTechnology or IntegrationTechnology partner providing security information and event management (SIEM) solutions integrated into CyberCX managed services.
• CrowdStrikegeneralTechnology or IntegrationTechnology partner providing endpoint detection and response (EDR) solutions integrated into CyberCX offerings.
• OktageneralTechnology or IntegrationTechnology partner for identity and access management solutions.
• SailPointgeneralTechnology or IntegrationTechnology partner for identity governance solutions.
• CiscogeneralTechnology or IntegrationTechnology partner for network and infrastructure security solutions.
• NetskopegeneralTechnology or IntegrationTechnology partner for cloud security and secure access service edge (SASE) solutions.
• VMwaregeneralTechnology or IntegrationTechnology partner for virtualization and cloud infrastructure security.
• IllumiogeneralTechnology or IntegrationTechnology partner for zero trust segmentation solutions.
• Nozomi NetworksgeneralTechnology or IntegrationTechnology partner for operational technology (OT) and industrial control system security.

Scale indicators12 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• BAE Systems Applied Intelligence: Division of BAE Systems delivering cybersecurity, intelligence, and financial crime services to government and enterprise. Comparable to CyberCX in regulated-industry focus, cleared personnel, and large-scale managed services delivery.
• Secureworks: Global cybersecurity services firm delivering managed detection and response (MDR), incident response, and vulnerability management. Closely aligned with CyberCX's managed SOC and DFIR offerings, though more North America-weighted.
• Palo Alto Networks Unit 42: Palo Alto Networks' threat intelligence, incident response, and managed security services arm. Comparable to CyberCX in DFIR and SOC capabilities and one of CyberCX's key technology partners, making it both an ally and a competitor in services.
• NCC Group: UK-listed cybersecurity services firm delivering managed security, penetration testing, DFIR, and GRC. Comparable to CyberCX in service breadth, MSSP model, and geographic positioning (UK + ANZ presence), with similar reliance on enterprise and government clients.
• Tesserent (Thales): Tesserent was the largest ANZ-headquartered pure-play cybersecurity services firm prior to its acquisition by Thales. It competed head-to-head with CyberCX across MSSP, GRC, and consulting in Australia and New Zealand, serving the same enterprise and government segments.
• Trustwave: Global MSSP and MDR provider offering managed SOC, penetration testing, DFIR, and GRC services. Highly comparable business model to CyberCX with 24x7 SOC delivery and similar mid-market to enterprise customer mix.

Broad incumbents

• Accenture Security: Accenture's global cybersecurity services division and now CyberCX's parent organization. Directly overlapping managed security, GRC, and cyber transformation capabilities, and the acquirer that integrated CyberCX into its APAC security footprint in February 2026.
• Deloitte Cyber: Global consulting firm with a large cybersecurity practice spanning strategy, GRC, managed security, and incident response. Competes with CyberCX on enterprise and government engagements and offers overlapping capabilities as part of a much broader portfolio.

Regional players

• Datacom: Major ANZ-headquartered IT services provider with a cybersecurity practice spanning managed security, cloud security, and advisory. Competes with CyberCX in Australian and New Zealand enterprise and government markets but does not have comparable international scale.

Emerging players

• Arctic Wolf: North American-focused MDR and managed security provider with a strong channel-led model. Comparable to CyberCX in 24x7 SOC delivery but more SMB/mid-market weighted and primarily a security operations platform rather than a full-service MSSP.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/CxCyber
• LinkedInlinkedin.com/company/cyber-cx

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Subsidiaries1 record

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A4 records

Investments1 record

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CyberCX