Cythera
Cythera is an Australian and New Zealand managed security services provider (MSSP) and Bastion Security Group subsidiary delivering 24/7 managed detection and response, threat intelligence, penetration testing, and advisory services to enterprise and government clients across six ANZ offices.
- Company typePrivate
- Founded2018
- HeadquartersMelbourne, Australia
- Headcount11–50
- GTM typeB2B
- OfferingServices
What Cythera does
Cythera is an Australia and New Zealand managed security services provider (MSSP) operating as a subsidiary of Bastion Security Group, headquartered in Melbourne with offices in Sydney, Brisbane, Perth, Auckland, and Wellington. The company delivers four integrated service pillars — Assess & Improve (cyber maturity assessments, ISO 27001 certification, audit and assurance), Detect & Respond (Managed Detection & Response, Cyber Threat Intelligence via its proprietary Cassini platform, Digital Forensics & Incident Response), Protect & Secure (Managed Protection, Security Architecture, Penetration Testing, Vulnerability Management), and Advise & Empower (Advisory, vCISO, security awareness training). Its core detection stack is built on Rapid7's InsightIDR, InsightVM, and InsightConnect Pro, supplemented by CrowdStrike Falcon for endpoint, Netskope for SWG/CASB/DLP, Wiz for cloud security, Cato Networks for SASE/ZTNA, and a broader portfolio of MSSP reseller partnerships.
Cythera monetises primarily through recurring managed detection and response subscriptions, supplemented by professional services engagements (penetration testing, GRC consulting, incident response) and managed protection contracts. Pricing is quote-based and tailored per engagement; no public price list exists. Go-to-market is enterprise field sales direct to CIO/CISO-level buyers across government, healthcare, legal, and regulated industries, supported by 24/7 Australian-based SOC operations delivering a stated 19-minute average response time. The company has won Rapid7's APAC MSSP Partner of the Year in 2022, 2023, and 2024 and CrowdStrike's APAC MSSP Partner of the Year in 2023, and holds ISO 27001 certification as of 2025.
Growth is being pursued through both organic and inorganic channels. Bastion Security Group signed a merger with Astralas expected to close in February 2026, expanding the group's cybersecurity headcount from 150+ to 250+ and broadening professional services depth. Cythera continues to add managed services reseller partnerships (Wiz, Cato, Sublime Security, Automox, Vanta, Infosec IQ, SOCRadar, Druva) to extend its stack into cloud security posture, SASE, email security, compliance automation, and security awareness. Revenue is not publicly disclosed and the company remains privately held within Bastion Security Group, with no venture capital or private equity ownership signals detected in the source data.
Cythera firmographics
Firmographics- Name
- Cythera
- Legal name
- Cythera Cyber Security
- Website
- https://cythera.com.au
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Cythera is an Australian and New Zealand managed security services provider (MSSP) and Bastion Security Group subsidiary delivering 24/7 managed detection and response, threat intelligence, penetration testing, and advisory services to enterprise and government clients across six ANZ offices.
- Ownership category
- akta.pro rank
Cythera industry classification
Industry- Product category
- Managed Security Services
- NAICS
- Computer Systems Design and Related Services (54151)
- akta.pro primary industry
- Managed Security Services (MSSP) & 24/7 SOC Operations (BPAKAHAA)
- akta.pro secondary industries
- Security Operations Center (SOC) as a Service (BPAEADAB), Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)
Keywords
Where Cythera is headquartered
LocationHeadquarters
- HQ city
- Melbourne
- HQ country
- Australia
- HQ region
- Oceania
Offices6 records
Markets served
Cythera business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales
Revenue model
- Managed Security Services: Recurring managed detection and response services providing 24/7 monitoring, threat detection, and incident response. Delivered as a subscription-based service with continuous protection.
- Professional Security Services: Advisory, consulting, and implementation services including penetration testing, security architecture, governance risk and compliance, and incident response.
- Managed Protection Services: Enterprise-grade defense, real-time response, and full visibility delivered as a managed security service provider (MSSP) offering.
Go-to-market motion1 record
Distribution channels3 records
Marketing channels6 records
Cythera product offering
Product offeringCore offering
Cythera is a managed security services provider (MSSP) delivering 24/7 managed detection and response, managed protection, cyber threat intelligence, penetration testing, security architecture, governance/risk/compliance, audit and assurance, and incident response services. Offerings are delivered by an Australian-based security operations team using a partner technology stack (Rapid7, CrowdStrike, Netskope, Cato, Wiz, and others) integrated with Cythera's proprietary Cassini Cyber Threat Intelligence platform.
Product overview
Cythera is a managed cybersecurity services provider (MSSP) offering a portfolio of professional and managed security services rather than a single unified software product. The core offering is built around four service pillars: Assess & Improve (including Cyber Maturity Assessments, ISO 27001 certification support, NIST CSF assessments, Essential Eight assessments, Vulnerability Assessment, and Audit & Assurance); Detect & Respond (including Managed Detection & Response/MDR, Cyber Threat Intelligence powered by Cassini CTI, and Digital Forensics & Incident Response/DFIR); Protect & Secure (including Managed Protection, Security Architecture, Penetration Testing, Web Filtering/CASB/DLP, and Vulnerability Management); and Advise & Empower (including Advisory, vCISO, Employee Cyber Training & Awareness, and Security Policy Development). These services are delivered using a technology stack that includes Rapid7 (InsightIDR, InsightVM, InsightConnect Pro), CrowdStrike (Falcon), Netskope (SWG, CASB, DLP), and other vendor platforms, with a named Australian-based SOC team providing 24/7 monitoring. Cythera also publishes security advisories on vulnerabilities discovered during client engagements.
Differentiator
Problem solved
Functional benefit
Products and services
- Managed Detection & Response (MDR)
Quantifiable outcome
- 90% of businesses see compliance improvements within three months of partnering with Cythera
- +5 more outcomes
Companies that use Cythera
Customer profileNamed customers3 records
Segments4 records
Ideal customer profiles4 records
Cythera technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature9 records
Cythera partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered core, key and flagship.
- Rapid7coreCythera is Rapid7's APAC MSSP Partner of the Year for 2022, 2023, and 2024. They utilize Rapid7's InsightIDR, InsightVM, and InsightConnect Pro for managed detection, vulnerability management, and automation. The partnership powers Cythera's MDR services with over 900 behavioural-based threat detections and monitoring of more than 700,000 vulnerabilities.
- CrowdStrikecoreCythera is CrowdStrike's APAC MSSP Partner of the Year 2023. They deploy CrowdStrike Falcon for endpoint detection and response, identity security, and next-gen SIEM capabilities. Partnership provides AI-driven protection across endpoints, identities, and cloud workloads.
- NetskopecoreCythera is a certified Netskope partner providing managed Secure Web Gateway, CASB, and DLP services. The partnership enables cloud-native security inspection, data loss prevention, and secure access for hybrid and remote workers through Netskope's NewEdge network.
- WizkeyCythera is an accredited Wiz partner for cloud-native application protection platform (CNAPP) deployment. Wiz provides agentless scanning for multi-cloud environments (AWS, Azure, GCP, Kubernetes) with attack path visualization and automated remediation workflows.
- Cato NetworkskeyCythera is a Cato Networks MSSP reseller providing SASE and ZTNA solutions. The partnership delivers unified networking and security in the cloud with Cato's global backbone of 75+ PoPs, replacing legacy VPNs and MPLS connections.
- Sublime SecuritykeyCythera is the official reseller and MSSP for Sublime Security, providing managed email protection with detection-as-code platform. Features AI-enhanced natural language processing for real-time control over email threat detection logic.
- AutomoxkeyCythera is an Automox MSSP reseller providing automated endpoint patch management and configuration across Windows, macOS, and Linux. Automox Worklets enable custom script automation for security policy enforcement at scale.
- VantakeyCythera is a Vanta MSSP reseller providing trust management platform for automated compliance (SOC 2, ISO 27001, HIPAA, PCI DSS). Vanta automates evidence collection and continuous system monitoring for audit readiness.
- Infosec IQkeyCythera is an MSSP reseller for Infosec IQ providing security awareness training and phishing simulations. The platform offers 2,000+ training assets with content aligned to ISO 27001, NIST, and Essential Eight frameworks.
- SOCRadarkeyCythera is a SOCRadar MSSP reseller providing threat intelligence services including dark web monitoring, credential leak detection, and brand impersonation protection with real-time alerts from underground forums and marketplaces.
- DruvakeyCythera is a Druva partner in Australia providing cloud-native SaaS backup and recovery for Microsoft 365, cloud workloads, endpoints, and hybrid environments. Druva offers immutable protection and cyber recovery workflows for ransomware resilience.
- Bastion Security GroupflagshipCythera is part of Bastion Security Group, an Australian and New Zealand headquartered security organization. Bastion brings together expertise of Quantum Security, ZX Security, Helix Security, Cassini, and Cythera. The group announced a merger with Astralas in 2026 to expand presence in Australia.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
Cythera competitors and assessment
Company assessmentDirect peers
- Triskele Labs: ANZ-headquartered MDR and MSSP offering 24/7 SOC, incident response, and managed detection services. Named alongside Cythera as a recognized Australian Rapid7 partner, making it a direct head-to-head competitor for enterprise and government MDR contracts in Australia and New Zealand.
- CyberCX: Australia and New Zealand's largest dedicated cybersecurity services business, offering MDR, SOC, DFIR, GRC, and security consulting. Competes with Cythera for the same enterprise, government, and critical infrastructure clients across ANZ and is the most natural scale competitor to the Bastion group.
- Tesserent (Thales Cyber Solutions ANZ): Australian cybersecurity services firm (acquired by Thales in 2024) delivering managed security, advisory, and technical security testing. Competes directly with Cythera in ANZ enterprise and government accounts, now with the backing of a global defense and security prime.
- Sekuro: ANZ-headquartered cybersecurity and digital risk firm offering managed security, GRC, offensive security, and advisory services. Targets the same mid-market and enterprise customers as Cythera and competes for MDR and compliance mandates across Australia.
- Loop Secure: Australian MSSP providing managed detection and response, security monitoring, and compliance services. Operates in the same ANZ enterprise and government segment as Cythera, often shortlisted alongside Cythera on managed security tenders.
- Orro Group: Australian secure-network and managed services provider recognized as a Rapid7 Australian partner alongside Cythera. Competes for enterprise managed security and networking mandates, with overlapping MDR/SASE capabilities through Cato-style partnerships.
Broad incumbents
- Arctic Wolf: Global MDR and managed security operations platform with a subscription-based SOC-as-a-service model. Represents the global, platform-driven competitive threat Cythera faces as Arctic Wolf expands into the ANZ enterprise and mid-market segments.
- eSentire: Global MDR provider delivering 24/7 threat detection, hunting, and incident response across endpoint, network, cloud, and identity. Comparable to Cythera's managed detection and DFIR offerings and competes for mid-market and enterprise MDR contracts worldwide.
- Expel: Global MDR provider using a transparent, cloud-native SOC platform with strong integrations across major EDR, SIEM, and cloud security vendors. Comparable to Cythera's Rapid7/CrowdStrike-powered MDR service and represents the modern, software-enabled MSSP benchmark.
Regional players
- Privasec: ANZ-headquartered cybersecurity consulting and testing firm with growing managed security offerings. Overlaps with Cythera on penetration testing, GRC, and security advisory, and is increasingly competing for managed security mandates in the Australian mid-market.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Cythera social profiles
Digital presenceCythera compliance and trust
Trust signalCompliance4 records
Cythera financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cythera leadership team
Management profileNumber of profiles
Profiles3 records
Cythera funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cythera M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cythera
What does Cythera do?
Cythera is a managed security services provider (MSSP) delivering 24/7 managed detection and response, managed protection, cyber threat intelligence, penetration testing, security architecture, governance/risk/compliance, audit and assurance, and incident response services. Offerings are delivered by an Australian-based security operations team using a partner technology stack (Rapid7, CrowdStrike, Netskope, Cato, Wiz, and others) integrated with Cythera's proprietary Cassini Cyber Threat Intelligence platform.
Is Cythera a public or private company?
Cythera is a private company. It is classified as corporate owned and is currently operating.
When was Cythera founded?
Cythera was founded in 2018. It employs 11 to 50 people.
Where is Cythera based?
Cythera is headquartered in Melbourne, Australia, in the Oceania region.
How does Cythera make money?
Three revenue lines are on record. Managed Security Services are the primary driver. The others are professional Security Services and managed Protection Services.
Who are Cythera's main competitors?
Direct peers on record are Triskele Labs, CyberCX, Tesserent (Thales Cyber Solutions ANZ), Sekuro, Loop Secure and Orro Group. Broad incumbents are Arctic Wolf, eSentire and Expel. Privasec is listed as a regional player.
Does Cythera have an API?
No public API is recorded for Cythera.
What industry is Cythera in?
Cythera's product category is Managed Security Services. Its primary akta.pro industry code is BPAKAHAA, Managed Security Services (MSSP) & 24/7 SOC Operations, with a secondary code of BPAEADAB, Security Operations Center (SOC) as a Service. Its NAICS code is 54151.