Cynch Security
Cynch Security is a Melbourne-based SaaS company providing a cloud-based Cyber Fitness platform that helps small businesses, enterprise procurement teams, and MSPs assess, monitor, and remediate cybersecurity risk via automated M365/Google Workspace scanning and a 12,000+ recommendation content library, sold on tiered subscriptions from A$149/month.
- Company typePrivate
- Founded2018
- HeadquartersDocklands, Australia
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Cynch Security does
Cynch Security is a Melbourne-based SaaS company that operates a cloud-based "Cyber Fitness" platform designed to help small businesses and the enterprises that rely on them assess, monitor, and improve cybersecurity posture. The platform, built natively on Google Cloud Platform, integrates with Microsoft 365 and Google Workspace via secure read-only APIs to automate misconfiguration scanning without software installation, and pairs this automation with a library of over 12,000 plain-language recommendations mapped to standards such as ISO 27001 and the Australian Essential 8. The product serves three customer segments in parallel: startups and small businesses who need to respond to security questionnaires and prove posture to enterprise clients and insurers; enterprise risk and procurement teams who need to assess and monitor large vendor populations; and managed service providers and IT consultants who white-label the platform to deliver Cyber Governance and vCISO services under their own brand.
The business operates on a recurring subscription model with three tiers — a self-serve Basic Plan at A$149 per month, a Coaching Plan at A$799 per month adding dedicated cyber fitness coaching and quarterly strategy sessions, and a custom-priced Enterprise tier for high-volume supply chain assurance with unlimited supplier assessments, automated control validation, and dedicated account management. Distribution is hybrid: a self-serve, product-led motion through cynch.com.au with a 14-day free trial, a field-sales motion for enterprise accounts, and a channel/partner motion for MSPs and consultants via the Partner Portal. Named customers include Telstra, KPMG, Victoria State Government, AIB, au Domain Administration, and AWSN, and the company states it has guided 2,000+ Australian businesses to improved security since founding. Founded in 2017-2018 by Adam Selwood and Susie Jones, Cynch has raised only ~A$333K in disclosed funding (CyRise 2018, Scale Investors 2019) and operates with 1-10 employees.
Cynch Security firmographics
Firmographics- Name
- Cynch Security
- Legal name
- Cynch Sec Pty Ltd
- Website
- https://cynch.com.au
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Cynch Security is a Melbourne-based SaaS company providing a cloud-based Cyber Fitness platform that helps small businesses, enterprise procurement teams, and MSPs assess, monitor, and remediate cybersecurity risk via automated M365/Google Workspace scanning and a 12,000+ recommendation content library, sold on tiered subscriptions from A$149/month.
- Ownership category
- akta.pro rank
Cynch Security industry classification
Industry- Product category
- Cybersecurity SaaS
- NAICS
- Computer Systems Design and Related Services (5415), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF)
- akta.pro secondary industries
- Cloud Security & Compliance Services (BPAEACAG), Cloud Security Services (Posture Mgmt, Workload Protection) (BPAKAHAK)
Keywords
Where Cynch Security is headquartered
LocationHeadquarters
- HQ city
- Docklands
- HQ country
- Australia
- HQ region
- Oceania
Offices1 record
Markets served
Cynch Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription (Basic Plan): Monthly subscription at $149/mo providing unlimited Cyber Fitness assessments, M365 and Google automated scanning, on-demand coaching, and downloadable policies and reports. Targets startups and small businesses on a self-serve basis.
- SaaS Subscription (Coaching Plan): Premium monthly subscription at $799/mo adding dedicated Cyber Fitness coaching, quarterly strategy and planning calls, prioritised remediation support, and internal audit support.
- Enterprise Custom Pricing: Custom pricing for high-volume supply chain assurance with unlimited supplier assessments, automated control validation, consulting for process design, and dedicated account management.
- Partner Program / White-Label: MSPs and IT Consultants can white-label the platform to offer Cyber Governance services to their clients, generating billable remediation projects and report generation revenue.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Basic Plan at $149/mo for small businesses |
| Subscription | Monthly | Coaching Plan at $799/mo for businesses needing expert guidance |
| Subscription | Annual | Enterprise custom pricing for supply chain assurance |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels9 records
Cynch Security product offering
Product offeringCore offering
Cynch Security operates a cloud-based SaaS Cyber Fitness Platform that helps Australian businesses monitor, assess, and improve their cybersecurity posture. The platform provides automated scanning of Microsoft 365 and Google Workspace environments, plain-language recommendations mapped to standards like ISO 27001, and combines AI/automation with human Cyber Fitness Coaches. It serves three segments: small businesses (self-serve), enterprise supply chain risk teams (third-party vendor assessment), and MSPs/IT consultants (white-label Cyber GRC partner program).
Product overview
Cynch Security offers a unified SaaS-based Cyber Fitness Platform designed to help businesses of all sizes assess, build, and prove their cybersecurity posture. The platform spans three core customer segments: enterprise and procurement teams using the Third-Party Cyber Risk Management solution for supply chain visibility; startups and small businesses using the self-service Small Business Cyber Fitness membership; and MSPs/consultants using the Cyber GRC Partner Program (Partner Portal) for white-label Cyber Governance services. The platform is delivered as a cloud-based SaaS product with no agent installation required, integrating natively with Microsoft 365 and Google Workspace via read-only APIs for automated scanning. Pricing tiers include the Basic Plan ($149/month) for self-guided cyber fitness, the Coaching Plan ($799/month) for expert-guided support, and a custom Enterprise plan for high-volume supply chain assurance.
Differentiator
Problem solved
Functional benefit
Products and services
- Cynch Cyber Fitness Platform A SaaS-based cyber fitness membership platform that helps small businesses and startups monitor, assess, and improve their cybersecurity posture through automated scanning, plain-language recommendations, and on-demand coaching from Cyber Fitness Coaches.
- Third-Party Cyber Risk Management Enterprise-tier solution enabling risk and procurement teams to assess, monitor, and manage the cyber fitness of their entire supply chain. Provides instant traffic-light assessments of vendors, automated control validation, and supplier coaching to remediate gaps.
- Small Business Cyber Fitness Self-service membership for startups and small businesses to build cyber fitness through automated Microsoft 365 and Google Workspace scanning, downloadable policies and reports, and same-day responses to security questionnaires.
- Cyber GRC Partner Program White-label program for Managed Service Providers and IT consultants to offer Cyber Governance and vCISO services to their clients, including a branded admin portal, automated client reporting, and identification of billable remediation projects.
Quantifiable outcome
- 2,000+ organisations guided to better security since founding
- +4 more outcomes
Companies that use Cynch Security
Customer profileNamed customers6 records
Segments4 records
Ideal customer profiles3 records
Cynch Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
Feature6 records
Cynch Security partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered minor and core.
- CyRiseminorCyRise is Australia's premier cyber security accelerator. Cynch participated in CyRise Cohort 2 in 2018, which provided early-stage support and visibility within the Australian cyber security ecosystem. This accelerator program helped launch Cynch Security.
- Google Cloud PlatformcoreCynch is built natively on Google Cloud Platform, using GCP infrastructure for its cloud-based SaaS platform. The architecture includes tenant-isolated instances, Google Secret Manager for encryption keys, and secure data storage.
- Microsoft 365 IntegrationcoreNative integration with Microsoft 365 for automated scanning of misconfigurations and missing safeguards. Cynch uses secure, read-only APIs to connect to M365 environments for risk assessment.
- Google Workspace IntegrationcoreNative integration with Google Workspace for automated scanning of misconfigurations and missing safeguards. Cynch uses secure, read-only APIs to connect to Google Workspace environments for risk assessment.
- Microsoft EntracoreSupports Bring Your Own Authentication with native Microsoft Entra (Azure AD) integration for enterprise authentication and single sign-on capabilities.
- Google Cloud IdentitycoreSupports Bring Your Own Authentication with native Google Cloud Identity integration for enterprise authentication and single sign-on capabilities.
- TelstraminorTelstra uses Cynch for third-party cyber risk management. Hannah McKelvie, Cyber Security Principal at Telstra, provided a testimonial on Cynch's supply chain security capabilities.
- KPMGminorKPMG is listed as a customer/user of Cynch services, utilizing the platform for cyber governance support.
- Victoria State GovernmentminorVictoria State Government is listed as a customer/user of Cynch, utilizing the platform for supply chain cyber risk management.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
Cynch Security competitors and assessment
Company assessmentDirect peers
- SecurityScorecard: SecurityScorecard is a category-defining TPRM platform offering vendor risk ratings and supply chain cyber monitoring — the most established direct competitor to Cynch's enterprise TPRM product.
- UpGuard: UpGuard is a direct TPRM competitor that continuously scores and monitors vendor security posture — overlapping directly with Cynch's third-party cyber risk management use case for enterprise procurement teams.
- Sprinto: Sprinto is a compliance automation platform for fast-growing tech companies, mapping controls to SOC 2, ISO 27001, GDPR and similar — competing with Cynch in the SMB/startup compliance posture segment.
- Whistic: Whistic is a vendor security assessment platform that lets buyers and suppliers exchange security posture information proactively — overlapping with Cynch's TPRM use case for enterprise procurement teams.
- Thoropass (formerly Laika): Thoropass combines compliance automation with expert support for SOC 2, ISO 27001 and HITRUST — directly comparable to Cynch's Coaching Plan model that pairs SaaS with human expert guidance.
- Drata: Drata is a compliance automation and continuous monitoring platform for SOC 2, ISO 27001 and HIPAA — a direct competitor to Cynch's automated scanning and standards-mapped recommendations for SMBs.
- Vanta: Vanta is a leading compliance automation platform that automates evidence collection for SOC 2, ISO 27001 and similar frameworks — competing with Cynch's SMB and enterprise compliance posture use case and using a similar PLG motion.
- Secureframe: Secureframe automates compliance audits (SOC 2, ISO 27001, HIPAA, PCI) for SMBs and startups with a PLG motion — directly comparable to Cynch's SMB cyber fitness offering in target customer and pricing tier.
- CyberGRX: CyberGRX is a third-party cyber risk management platform providing vendor assessments and risk exchange — an enterprise-focused direct competitor in the TPRM category.
Emerging players
- Strike Graph: Strike Graph is a compliance automation platform for SOC 2 and ISO 27001 with a focus on SMBs and startups — a niche but comparable emerging player in the same customer segment as Cynch.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks7 records
Key highlights7 records
Customer concentration
Cynch Security social profiles
Digital presenceCynch Security compliance and trust
Trust signalCompliance1 record
Cynch Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cynch Security leadership team
Management profileNumber of profiles
Profiles3 records
Cynch Security funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cynch Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cynch Security
What does Cynch Security do?
Cynch Security operates a cloud-based SaaS Cyber Fitness Platform that helps Australian businesses monitor, assess, and improve their cybersecurity posture. The platform provides automated scanning of Microsoft 365 and Google Workspace environments, plain-language recommendations mapped to standards like ISO 27001, and combines AI/automation with human Cyber Fitness Coaches. It serves three segments: small businesses (self-serve), enterprise supply chain risk teams (third-party vendor assessment), and MSPs/IT consultants (white-label Cyber GRC partner program).
Is Cynch Security a public or private company?
Cynch Security is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cynch Security founded?
Cynch Security was founded in 2018. It employs 1 to 10 people.
Where is Cynch Security based?
Cynch Security is headquartered in Docklands, Australia, in the Oceania region.
How does Cynch Security make money?
Four revenue lines are on record. SaaS Subscription (Basic Plan) is the primary driver. The others are saaS Subscription (Coaching Plan), enterprise Custom Pricing and partner Program / White-Label.
Who are Cynch Security's main competitors?
Direct peers on record are SecurityScorecard, UpGuard, Sprinto, Whistic, Thoropass (formerly Laika), Drata, Vanta, Secureframe and CyberGRX. Strike Graph is listed as an emerging player.
Does Cynch Security have an API?
No public API is recorded for Cynch Security.
What industry is Cynch Security in?
Cynch Security's product category is Cybersecurity SaaS. Its primary akta.pro industry code is BPAEADAF, Cloud Security Managed Services (CSPM/CWPP/CNAPP), with a secondary code of BPAEACAG, Cloud Security & Compliance Services. Its NAICS code is 5415 and its SIC code is 7372.