InfoTrust
InfoTrust (ASX: ITS) is an Australian sovereign cybersecurity and managed technology services provider offering offensive and defensive security, GRC consulting, 24/7 SOC, and Microsoft/AWS managed workplace services to enterprise, government, and SMB customers across Australia.
- Company typePublic
- Founded2025
- HeadquartersSydney, Australia
- Headcount11–50
- GTM typeB2B
- OfferingServices
What InfoTrust does
InfoTrust (ASX: ITS) is an Australian sovereign cybersecurity and managed technology services provider headquartered in Sydney, operating across Sydney, Melbourne, Brisbane, Perth, and Canberra. The company delivers an integrated portfolio spanning offensive security (penetration testing, red teaming, SMB1001 framework), defensive security (Continuous Threat Exposure Management, data security, awareness training), GRC consulting (GRC = Governance, Risk, and Compliance — including IRAP assessments), specialist digital forensics via the Forensic IT sub-brand, and a 24/7 Australian-based SOC (Security Operations Centre) offering MDR (Managed Detection and Response), SIEM (Security Information and Event Management), CTI (Cyber Threat Intelligence), and incident response. It also delivers Secure Modern Workplace managed services integrating Microsoft 365, Azure, and AWS with governance-as-a-service and Microsoft 365 Backup.
InfoTrust makes money through two primary streams: subscription-based managed services (SOC, MDR, secure modern workplace, managed data resilience, network security) and project-based professional services (penetration testing, incident response, digital forensics, GRC advisory). GTM (go-to-market) is enterprise field sales with consultative "Talk to an Expert" CTAs (calls to action), supported by inside sales for mid-market and an Investor Hub post-IPO. Pricing is quote-based and not publicly disclosed, with monthly billing on managed contracts. Customer logos span large Australian enterprises (Coles, Mirvac, nib, Ingham's, Slater and Gordon) plus government, healthcare, nonprofit, and SMB segments through the SMB1001 framework.
The company completed its ASX listing in December 2025 and immediately executed a strategic refocus: divesting Nexgen Communications to Aussie Broadband for AUD $50 million (March 2026) and acquiring Canberra-based Catalyst Cyber for approximately AUD $5 million plus an uncapped earn-out, gaining IRAP-assessed, security-cleared federal government capability. With 250+ professionals including 140+ cyber specialists and 20+ security-cleared personnel, InfoTrust positions itself as a regulated-environment alternative to global MSSPs for Australian enterprises and government agencies.
InfoTrust firmographics
Firmographics- Name
- InfoTrust
- Legal name
- Infotrust Ltd
- Website
- https://infotrust.com.au
- Company type
- Public
- Founded year
- 2025
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- InfoTrust (ASX: ITS) is an Australian sovereign cybersecurity and managed technology services provider offering offensive and defensive security, GRC consulting, 24/7 SOC, and Microsoft/AWS managed workplace services to enterprise, government, and SMB customers across Australia.
- Ownership category
- akta.pro rank
InfoTrust industry classification
Industry- Product category
- Cybersecurity Services
- NAICS
- Computer Systems Design and Related Services (54151)
- akta.pro primary industry
- Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
- akta.pro secondary industry
- Cybersecurity & Identity Consulting (BPAHAEAG)
Keywords
Where InfoTrust is headquartered
LocationHeadquarters
- HQ city
- Sydney
- HQ country
- Australia
- HQ region
- Oceania
Offices5 records
Markets served
InfoTrust business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales
Revenue model
- Managed Services: Recurring managed security services including Managed SOC, MDR, threat intelligence, SIEM, and secure modern workplace solutions. Delivered as subscription-based contracts with ongoing monitoring, support, and SLA-aligned deliverables.
- Professional Services: One-time and project-based professional services including penetration testing, incident response, digital forensics, consulting and advisory (GRC), and security awareness training.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Custom enterprise pricing based on scope and requirements |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels4 records
InfoTrust product offering
Product offeringCore offering
InfoTrust is Australia's leading ASX-listed sovereign cyber security and technology services provider delivering an integrated portfolio of professional cyber security services and managed services. The company sells offensive and defensive security consulting (penetration testing, red teaming, CTEM, data security, awareness training), GRC and compliance advisory (IRAP, ISO 27001, NIST, Essential Eight), and operates a 24/7 Australian-based Security Operations Centre offering Managed Detection and Response (MDR), SIEM, Cyber Threat Intelligence, and incident response, along with Secure Modern Workplace, Managed Data Resilience, and Network Security managed services.
Product overview
InfoTrust is Australia’s leading ASX-listed sovereign cyber security and technology services provider delivering an integrated portfolio of professional cyber security services and managed services. The Cyber Security Services (Professional Services) division offers offensive security (penetration testing, red teaming, SMB1001), defensive security (CTEM, data security, awareness training), compliance and GRC consulting (including IRAP assessments), and specialist consulting via Forensic IT partnership (digital forensics, incident response, forensic advisory). The Managed Services division provides 24/7 Australian-based SOC with MDR, SIEM, CTI, and incident response; Secure Modern Workplace solutions integrating Microsoft 365, Azure, and AWS with governance-as-a-service; Managed Data Resilience with Microsoft 365 Backup and disaster recovery; and Security Solutions covering email, endpoint, cloud, and network protection. With over 250 professionals including 140+ cyber specialists and 20+ security-cleared personnel from the Catalyst Cyber acquisition, Infotrust protects organisations across Australia with sovereign capability focused on regulated and high-assurance environments.
Differentiator
Problem solved
Functional benefit
Brands
- Forensic IT: Digital forensics, cyber incident response, and forensic advisory services integrated into Infotrust's cybersecurity portfolio.
Products and services
- Cyber Security Services
Quantifiable outcome
- 64% of organisations have one or more endpoints compromised each year - penetration testing validates security controls
- +3 more outcomes
Companies that use InfoTrust
Customer profileNamed customers12 records
Segments8 records
Ideal customer profiles3 records
InfoTrust technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration17 records
AI capability15 records
Feature4 records
InfoTrust partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core and supporting.
- Catalyst Cyber Pty LtdcoreCanberra-based cybersecurity firm specialising in federal government cyber assurance, advisory, and compliance services. Acquired by Infotrust for approximately AUD $5 million to expand federal government market presence. Holds IRAP assessments and Essential Eight framework accreditations.
- MicrosoftcoreMicrosoft solutions partner providing Microsoft 365, Azure public cloud, and Microsoft security services. Infotrust delivers managed Microsoft services, security uplift, and integration across Australian enterprise and government clients.
- AWS (Amazon Web Services)coreAWS Partner providing managed cloud services for AWS public cloud. Services include cloud operations, security, 24x7 service desk, backup and disaster recovery, and governance/risk/compliance aligned to AWS Well-Architected Security Pillar.
- Forensic ITcoreSpecialist digital forensics and incident response provider fully integrated into Infotrust's cyber security portfolio. Provides forensic standard of analysis across prevention, readiness, identification, response, and investigations for legal, corporate, risk, and compliance stakeholders.
- CRESTsupportingCertification body for penetration testing professionals. Infotrust employs ethical hackers certified by CREST for penetration testing services.
- SANS InstitutesupportingTraining and certification organisation for information security professionals. Infotrust penetration testers hold SANS certifications.
- Offensive SecuritysupportingOrganisation providing the OSCP certification for penetration testers. Infotrust employs OSCP-certified ethical hackers.
Scale indicators5 records
Recent moves7 records
Expansion highlights6 records
InfoTrust competitors and assessment
Company assessmentDirect peers
- Bastion Security Group: Australian cybersecurity services provider focused on government, defence, and critical infrastructure. Comparable sovereign Australian MSSP and advisory profile.
- CyberCX: Australia's largest dedicated cybersecurity services firm offering MSSP, SOC, GRC, and offensive security. Directly comparable in service portfolio, sovereign positioning, and federal government focus.
- Tesserent: Australian cybersecurity services company (formerly ASX-listed, now part of a larger group) providing managed security, advisory, and offensive services. Comparable MSSP/consulting model and Australian enterprise/government customer base.
- Sekuro: Australian-headquartered cybersecurity and digital resiliency services firm offering managed security, consulting, and GRC. Comparable mid-market MSSP positioning in the Australian enterprise and government market.
Emerging players
- Arctic Wolf: Global MDR-focused cybersecurity vendor offering 24/7 SOC-as-a-service. Comparable managed detection and response delivery model, though operating at much larger scale and without Australian sovereign positioning.
Broad incumbents
- Trustwave: Global MSSP offering managed detection, response, and GRC services. Comparable MSSP/MDR portfolio with broader geographic reach but less Australian sovereign depth.
- CrowdStrike: Global cybersecurity platform with endpoint, MDR, SIEM, and managed services. Overlaps with Infotrust's MDR, EDR, and CTI offerings as both partner and potential competitor.
- Palo Alto Networks: Global cybersecurity platform with Cortex XSIAM/XDR and Unit 42 MDR/incident response services. Competes with Infotrust across MDR, SIEM, and incident response, particularly in Australian enterprise.
- Sophos: Global cybersecurity vendor offering endpoint, network, and managed detection and response (Sophos MDR). Comparable in endpoint security and MDR delivery model.
Regional players
- Avanade: Global Microsoft-focused SI and managed services provider with strong ANZ presence. Comparable in Microsoft 365/Azure managed security and digital workplace delivery to enterprise clients.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
InfoTrust social profiles
Digital presenceInfoTrust compliance and trust
Trust signalCompliance19 records
InfoTrust financial estimates
Financial estimateRevenue estimate
Valuation estimate
InfoTrust leadership team
Management profileNumber of profiles
Profiles1 record
InfoTrust subsidiaries and ownership
Company hierarchySubsidiaries1 record
InfoTrust funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
InfoTrust M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about InfoTrust
What does InfoTrust do?
InfoTrust is Australia's leading ASX-listed sovereign cyber security and technology services provider delivering an integrated portfolio of professional cyber security services and managed services. The company sells offensive and defensive security consulting (penetration testing, red teaming, CTEM, data security, awareness training), GRC and compliance advisory (IRAP, ISO 27001, NIST, Essential Eight), and operates a 24/7 Australian-based Security Operations Centre offering Managed Detection and Response (MDR), SIEM, Cyber Threat Intelligence, and incident response, along with Secure Modern Workplace, Managed Data Resilience, and Network Security managed services.
Is InfoTrust a public or private company?
InfoTrust is a public company. It is classified as public and is currently operating.
When was InfoTrust founded?
InfoTrust was founded in 2025. It employs 11 to 50 people.
Where is InfoTrust based?
InfoTrust is headquartered in Sydney, Australia, in the Oceania region.
How does InfoTrust make money?
Two revenue lines are on record. Managed Services are the primary driver. The others are professional Services.
Who are InfoTrust's main competitors?
Direct peers on record are Bastion Security Group, CyberCX, Tesserent and Sekuro. Arctic Wolf is listed as an emerging player. Broad incumbents are Trustwave, CrowdStrike, Palo Alto Networks and Sophos. Avanade is listed as a regional player.
Does InfoTrust have an API?
No public API is recorded for InfoTrust.
What industry is InfoTrust in?
InfoTrust's product category is Cybersecurity Services. Its primary akta.pro industry code is BPAEADAL, Data Security & Privacy Managed Services (DLP/Encryption), with a secondary code of BPAHAEAG, Cybersecurity & Identity Consulting. Its NAICS code is 54151.