Bastion Security Group
Bastion Security Group is a New Zealand-based managed security services provider offering MDR, threat intelligence, penetration testing, GRC, DFIR, and advisory services to enterprise, government, and mid-market clients across Oceania, Europe, Asia, and the Americas.
- Company typePrivate
- Founded2023
- HeadquartersWellington, New Zealand
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Bastion Security Group does
Bastion Security Group is a New Zealand-headquartered managed security services provider (MSSP) founded in 2023 and built largely through acquisition. It delivers a full lifecycle cybersecurity portfolio — 24/7 Managed Detection & Response (MDR) covering 115,000+ assets, Cyber Threat Intelligence, penetration testing (including red teaming, OT/SCADA, and AI penetration testing), Digital Forensics & Incident Response, Security Architecture, Governance/Risk/Compliance, Advisory (including vCISO), and employee security awareness training — to enterprise, government, and mid-market clients across New Zealand, Australia, Europe, Asia, and the Americas.
The company's core technology stack is a 24/7 Security Operations Centre layered with managed services built on best-of-breed third-party platforms: CrowdStrike (endpoint/EDR), Rapid7 (SIEM/XDR and vulnerability management), Netskope (CASB/SWG/DLP), Cato Networks (SASE/ZTNA), Sublime Security (AI-powered email defense), SOCRadar (external threat intelligence), Automox (patch management), InfosecIQ (security awareness), and Vanta (compliance automation), with additional MDR integrations across Fortinet, Palo Alto, Zscaler, Cisco and Juniper. Bastion also retains the proprietary Cassini Cyber Threat Intelligence SaaS. Bastion is CREST-accredited with consultants holding OSCP, OSCE3 and CREST CRT certifications, and operates from six offices across Australia and New Zealand post-Astralas merger with 250+ cybersecurity professionals.
Commercially, Bastion generates revenue through three primary streams: recurring managed security services contracts (MDR, Managed Protection, vendor-platform management), professional services billed at agreed day rates (pentesting, GRC, incident response, advisory), and subscription-based security awareness training. The company is also a certified MSSP reseller for CrowdStrike, Rapid7, Netskope and other vendors, creating a pull-through channel revenue layer. Customer base totals 400 clients including 50+ government entities, with named enterprise exposure in financial services, telecommunications and critical infrastructure (via the Astralas merger). The company invests in community via its Hacking for Heroes programme (NZ$80,000 annual donated consultancy to NZ not-for-profits) and has earned APAC MSSP Partner of the Year awards from both CrowdStrike (2023) and Rapid7 (2022, 2024).
Bastion Security Group firmographics
Firmographics- Name
- Bastion Security Group
- Legal name
- Bastion Security Group
- Website
- https://bastionsecurity.co.nz
- Company type
- Private
- Founded year
- 2023
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Bastion Security Group is a New Zealand-based managed security services provider offering MDR, threat intelligence, penetration testing, GRC, DFIR, and advisory services to enterprise, government, and mid-market clients across Oceania, Europe, Asia, and the Americas.
- Ownership category
- akta.pro rank
Bastion Security Group industry classification
Industry- Product category
- Managed Cybersecurity Services
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Detective, Guard & Armored Car Services (7381)
- akta.pro primary industry
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH), Security Awareness & Phishing Simulation Managed Services (BPAEADAK), Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where Bastion Security Group is headquartered
LocationHeadquarters
- HQ city
- Wellington
- HQ country
- New Zealand
- HQ region
- Oceania
Offices3 records
Markets served
Bastion Security Group business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure, Others
Revenue model
- Managed Security Services: 24/7 monitoring, threat detection and response services delivered as recurring managed services contracts with enterprise and government clients
- Professional Security Services: Consulting engagements including penetration testing, security architecture, GRC advisory, incident response, and compliance assessments
- Security Awareness Training: Employee cyber training and awareness programs delivered as subscription or per-user licensing
- Vendor Partnership Reseller: Reseller and MSSP partnerships with security vendors including CrowdStrike, Rapid7, Netskope, delivering managed services around their platforms
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Pay-as-you-go | Professional consulting services billed at agreed day rates |
Go-to-market motion1 record
Distribution channels5 records
Marketing channels5 records
Bastion Security Group product offering
Product offeringCore offering
Bastion Security Group is a managed security services provider (MSSP) that delivers 24/7 Managed Detection & Response, cyber threat intelligence, penetration testing, security architecture, digital forensics & incident response, and Governance/Risk/Compliance advisory to enterprise and government clients. The company also operates certified managed services built on third-party security platforms from CrowdStrike, Rapid7, Netskope, Cato Networks, Automox, InfosecIQ, Sublime Security, SOCRadar, and Vanta.
Product overview
Bastion Security Group is a managed cybersecurity services provider offering a comprehensive portfolio of security services and managed products. The core offering centers on Managed Detection & Response (MDR) with 24/7 monitoring, supplemented by threat intelligence (Cassini CTI Services), penetration testing (red teaming, web app, internal, external, OT/SCADA, specialist), security architecture, digital forensics & incident response, governance/risk/compliance, and advisory services. The company also delivers managed services built on third-party platforms including CrowdStrike (endpoint security), Rapid7 (vulnerability management/SIEM), Netskope (cloud security/CASB), Automox (patch management), InfosecIQ (security awareness training), Sublime Security (email defense), Cato Networks (SASE), SOCRadar (threat intelligence), and Vanta (compliance automation). These are offered as managed services with Bastion providing deployment, configuration, monitoring, and ongoing support. The company has made strategic acquisitions including Cassini (2023), Cythera Cyber Security (June 2025), Seamless Intelligence (2025), Phronesis Security (2025), and Astralas (February 2026) to expand capabilities and geographic presence.
Differentiator
Problem solved
Functional benefit
Products and services
- Managed Detection & Response (MDR) 24/7 security monitoring service with expert analysts monitoring endpoints, infrastructure, and cloud environments for real-time detection, response, and protection across enterprise and government clients.
- Cyber Threat Intelligence Proactive threat intelligence services including Cassini CTI Services, dark web monitoring, and brand protection to anticipate attacks and fortify defences for organisations.
- Penetration Testing Comprehensive penetration testing services including red teaming, web application, internal, external, OT/SCADA, purple teaming, social engineering, DoS testing, configuration reviews, source code review, AI penetration testing, and specialist testing delivered by CREST-certified consultants.
- Security Architecture Security engineering services covering DevSecOps, cloud security configuration, system architecture design, and controls validation for organisations building or modernising secure infrastructure.
- Digital Forensics & Incident Response DFIR experts providing forensic investigation and incident response, including tabletop exercises and security incident response testing for organisations experiencing or preparing for cyber incidents.
- Governance, Risk & Compliance GRC services including risk assessment, NIST CSF assessment, CIS Controls assessment, Essential Eight assessment, SWIFT CSCF, PCI DSS, ISO 27001, and virtual CISO advisory for organisations seeking compliance and risk management support.
- Advisory Strategic executive-level security advisory including strategic security consulting, virtual CISO, executive and board governance training, and security policy development for senior leadership teams.
- Certification & Accreditation Assistance with security certification and accreditation processes including ISO 27001, SOC 2, and continuous certification programmes for organisations pursuing formal security certifications.
- Audit & Assurance Security audit and assurance services reviewing controls, highlighting gaps, and building resilient systems with system security plan development for organisations needing independent security validation.
- Cyber Maturity Assessments Security maturity assessments including NIST CSF maturity uplift, Essential Eight assessment, and PSR assessment for organisations seeking to benchmark and improve their security maturity.
- Employee Cyber Training & Awareness Security awareness training and phishing simulations delivered via the InfosecIQ platform to build workforce cyber defence capabilities across organisations.
- Managed Protection 24/7 monitoring and defence delivered as a leading MSSP with enterprise-grade protection and real-time human-led response for organisations seeking fully outsourced security operations.
- CrowdStrike MSSP Service Managed CrowdStrike services including endpoint security (Falcon Prevent/Insight), identity protection, asset visibility (Falcon Discover), and 24/7 monitoring with custom threat detection and monthly reporting.
- Rapid7 MSSP Service Managed Rapid7 services including InsightIDR (SIEM/XDR), InsightVM (vulnerability management), and Threat Command (threat intelligence) with 24/7 monitoring and strategic reporting.
- Netskope Managed Service Managed Netskope services including Next-Gen Secure Web Gateway, Cloud Access Security Broker (CASB), Data Loss Prevention (DLP), and Remote Browser Isolation for cloud and data security.
- Cato Networks SASE and ZTNA Managed Service Managed SASE services including unified SD-WAN, ZTNA, NGFW, and secure web gateway via Cato's global cloud backbone with 75+ PoPs to help clients transition from legacy WAN to cloud-delivered security.
- Automox Managed Service Managed Automox patch management for Windows, macOS, and Linux with policy-driven automation and Worklets for endpoint hygiene.
- Managed Email Protect Service (Sublime Security) Managed email security using Sublime Security's detection-as-code platform with AI-powered threat detection, real-time analytics, and SOC integration for phishing and BEC protection.
- Brand Protect Managed Service (SOCRadar) Managed SOCRadar threat intelligence including dark web monitoring, brand protection, credential leak alerts, and domain impersonation detection integrated into client security strategies.
- Vanta Managed Service Managed Vanta trust management platform automating compliance for SOC 2, ISO 27001, HIPAA, and PCI DSS with continuous monitoring and AI-powered security reviews.
Quantifiable outcome
- 115,000+ assets actively protected by Managed Threat Detection & Response service
- +2 more outcomes
Companies that use Bastion Security Group
Customer profileNamed customers3 records
Segments4 records
Ideal customer profiles3 records
Bastion Security Group technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
AI capability9 records
Feature6 records
Bastion Security Group partnerships and signals
Strategic signalPartnerships
14 partnerships are on record, tiered core and minor.
- AstralascoreMerger with Astralas, a specialist cybersecurity architecture and security engineering professional services provider headquartered in Melbourne, Australia. This marks Bastion's fourth strategic combination in Australia following Cythera, Seamless Intelligence, and Phronesis Security. Astralas brings over 60 cybersecurity and cloud professionals with expertise in financial services, telecommunications, and critical infrastructure.
- Cythera Cyber SecuritycoreMelbourne-based managed security services provider acquired in June 2025 to expand Bastion's managed security service capabilities into Australia.
- CassinicoreWellington-based threat intelligence firm acquired to expand Bastion's threat detection and security consulting services. Cassini's CTI services provide proactive protection and strengthen Bastion's cyber threat intelligence capabilities.
- CrowdStrikecoreBastion Security Group is CrowdStrike's APAC MSSP Partner of the Year (2023), offering expert deployment, fine-tuned configuration, and outcome-driven management of the CrowdStrike platform including Falcon Prevent, Falcon Insight, and Falcon Discover modules.
- Rapid7coreBastion is Rapid7's APAC MSSP Partner of the Year (2022, 2024) and APAC Partner of the Year (2023), providing full Managed Security Services including licensing, deployment, and 24/7 monitoring for InsightIDR, InsightVM, and Threat Command.
- NetskopecoreBastion provides comprehensive Netskope solutions including Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), and Data Loss Prevention (DLP) deployment, configuration, and ongoing management.
- AutomoxcoreBastion offers Automox deployment and management for cross-platform patching, configuration, and endpoint control across Windows, macOS, and Linux environments.
- Infosec IQcoreBastion brings the InfosecIQ training platform to Australian businesses offering over 2,000 training assets and phishing simulations for employee security awareness.
- Sublime SecuritycoreAs official reseller and MSSP for Sublime Security, Bastion offers expert deployment and 24/7 coverage for email threat management including phishing and BEC protection.
- Cato NetworkscoreBastion provides Cato Networks SASE and ZTNA deployment and management, helping clients transition from legacy WAN to cloud-delivered security.
- SOCRadarcoreBastion integrates SOCRadar's advanced threat intelligence including dark web monitoring, credential leaks, and brand impersonation detection into client security strategies.
- VantaminorBastion offers Vanta trust management platform deployment for automated compliance and security workflows including SOC 2, ISO 27001, HIPAA, and PCI DSS certifications.
- Seamless IntelligencecoreManaged services provider integrated into Bastion's Australian operations as part of strategic expansion.
- Phronesis SecuritycoreProfessional services provider integrated into Bastion's Australian operations, adding security consulting capabilities.
Scale indicators6 records
Recent moves8 records
Expansion highlights6 records
Bastion Security Group competitors and assessment
Company assessmentEmerging players
- Arctic Wolf: Global MDR and managed security operations provider expanding rapidly in APAC. Comparable to Bastion's MDR-led offering but operates a more software-centric, subscription model rather than the local consulting-heavy ANZ delivery Bastion uses.
- Expel: US-headquartered MDR provider with a transparent, software-led managed detection model. Comparable to Bastion's MDR service from a technology and customer-outcome perspective, though with less ANZ regional presence.
Direct peers
- Tesserent (Thales Cyber Solutions ANZ): Australia-headquartered MSSP and cybersecurity consulting firm, now part of Thales, serving government, defence and enterprise clients in ANZ. Directly comparable in services, customer profile, and vendor-reseller model.
- CyberCX: Australia and New Zealand's largest pure-play cybersecurity services provider, offering MSSP, advisory, and incident response. Closest direct analogue to Bastion in geography, service mix, and customer segments, but materially larger and now backed by Telstra.
- Aura Information Security: New Zealand-based cybersecurity services firm (part of Kordia) offering managed security, penetration testing, GRC and incident response. Direct competitor for NZ enterprise and government contracts.
- Sekuro: ANZ-based cybersecurity and digital risk services firm providing managed security, GRC, and offensive security. Competes head-to-head with Bastion for mid-market and enterprise ANZ customers.
- Insomnia Security: New Zealand-founded specialist cybersecurity consultancy and MSSP offering penetration testing, managed detection, and advisory. Competes with Bastion in NZ across both government and commercial accounts.
Broad incumbents
- Datacom: Large ANZ IT services provider with a significant cybersecurity practice including managed SOC, GRC and consulting. Competes with Bastion especially on government and large-enterprise frameworks where broader services are bundled.
- KPMG Australia (Cyber Security Services): Big Four firm with a sizable ANZ cybersecurity advisory, GRC and managed services practice. Competes with Bastion for governance, risk, compliance and large enterprise transformation work.
- Accenture Security (ANZ): Global consulting giant with a sizeable ANZ cybersecurity practice spanning managed security, strategy, and incident response. Competes for larger enterprise and government mandates that Bastion also targets.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
Bastion Security Group social profiles
Digital presenceBastion Security Group compliance and trust
Trust signalCompliance9 records
Bastion Security Group financial estimates
Financial estimateRevenue estimate
Valuation estimate
Bastion Security Group leadership team
Management profileNumber of profiles
Profiles14 records
Bastion Security Group funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Bastion Security Group M&A and investment
M&A and investmentM&A2 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Bastion Security Group
What does Bastion Security Group do?
Bastion Security Group is a managed security services provider (MSSP) that delivers 24/7 Managed Detection & Response, cyber threat intelligence, penetration testing, security architecture, digital forensics & incident response, and Governance/Risk/Compliance advisory to enterprise and government clients. The company also operates certified managed services built on third-party security platforms from CrowdStrike, Rapid7, Netskope, Cato Networks, Automox, InfosecIQ, Sublime Security, SOCRadar, and Vanta.
Is Bastion Security Group a public or private company?
Bastion Security Group is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Bastion Security Group founded?
Bastion Security Group was founded in 2023. It employs 51 to 100 people.
Where is Bastion Security Group based?
Bastion Security Group is headquartered in Wellington, New Zealand, in the Oceania region.
How does Bastion Security Group make money?
Four revenue lines are on record. Managed Security Services are the primary driver. The others are professional Security Services, security Awareness Training and vendor Partnership Reseller.
Who are Bastion Security Group's main competitors?
Emerging players on record are Arctic Wolf and Expel. Direct peers are Tesserent (Thales Cyber Solutions ANZ), CyberCX, Aura Information Security, Sekuro and Insomnia Security. Broad incumbents are Datacom, KPMG Australia (Cyber Security Services) and Accenture Security (ANZ).
Does Bastion Security Group have an API?
No public API is recorded for Bastion Security Group.
What industry is Bastion Security Group in?
Bastion Security Group's product category is Managed Cybersecurity Services. Its primary akta.pro industry code is BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 561621 and its SIC code is 7381.