Cosive
Cosive is an ANZ-based cybersecurity consultancy specialising in Cyber Threat Intelligence and Security Operations for banks, government, and critical infrastructure. It offers proprietary SaaS products (CloudMISP, MalwareZoo, Antifraud) alongside consulting, engineering, and training services, and is an authorised EclecticIQ and Intel 471 partner.
- Company typePrivate
- Founded2015
- HeadquartersMelbourne, Australia
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Cosive does
Cosive is an Australia and New Zealand-based cybersecurity consultancy founded in 2015 that specialises in Cyber Threat Intelligence (CTI) and Security Operations (SecOps). The firm serves financial institutions (including members of Australia's "Big Four" banks), federal/state/local government bodies, and critical infrastructure providers in energy, mining, transport and logistics. Co-founders Terry MacDonald (COO), Chris Horsley (CTO), and Kayne Naughton built the firm around practitioner expertise drawn from national CSIRTs in Australia and Japan, and have positioned Cosive as an active open-source contributor to MISP and a subject-matter partner on the Australian Signals Directorate's CTIS initiative.
The company operates three proprietary SaaS products — CloudMISP (managed MISP threat intelligence platform), MalwareZoo (private malware repository powered by Assemblyline 4), and Antifraud (behavioural biometrics and device fingerprinting fraud detection used by major banks). Around these products, Cosive delivers CTI and SecOps consulting (maturity assessments, tabletop exercises, bespoke tooling), engineering (threat-intel and SecOps engineering, SIEM/SOAR integration), penetration testing, code review, and a catalogue of practitioner-led training courses. It is also an authorised ANZ partner for EclecticIQ (TIP and curated feeds) and Intel 471 (malware and adversary intelligence feeds), with additional integrations to VMRAY, CrowdStrike, Feedly, and Splunk.
Revenue is generated through subscription-managed SaaS (CloudMISP, MalwareZoo, Antifraud), professional services (consulting, engineering, training), and reseller/integration margin on commercial threat-intelligence feeds. All pricing is quote-based with no public rates, and distribution is sales-led via direct enterprise engagement, supported by an event-driven motion across AISA CyberCon, AusCERT, NZITF, FIRST CTI, BSides and other conferences, plus a thought-leadership content engine (blog, podcast, CTI-CMM Assessment Tool, MISP Guide). The firm is privately held, bootstrapped with no disclosed funding rounds, founder-concentrated ownership, and a current headcount in the 11-50 range.
Cosive firmographics
Firmographics- Name
- Cosive
- Legal name
- Cosive Pty Ltd
- Website
- https://cosive.com
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Cosive is an ANZ-based cybersecurity consultancy specialising in Cyber Threat Intelligence and Security Operations for banks, government, and critical infrastructure. It offers proprietary SaaS products (CloudMISP, MalwareZoo, Antifraud) alongside consulting, engineering, and training services, and is an authorised EclecticIQ and Intel 471 partner.
- Ownership category
- akta.pro rank
Cosive industry classification
Industry- Product category
- Cybersecurity Consulting and Threat Intelligence
- NAICS
- Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (5415)
- SIC
- Finance Services (6199)
- akta.pro primary industry
- Attack Surface Management (EASM/CAASM) (HDADAHAC)
- akta.pro secondary industries
- Security Awareness, Training & Compliance Attestation (HDADAIAJ), Governance, Risk & Compliance (GRC) Advisory & Assessments (BPAKAHAH), Network Security Managed Services (Firewall/IDS/IPS/SASE) (BPAEADAG)
Keywords
Where Cosive is headquartered
LocationHeadquarters
- HQ city
- Melbourne
- HQ country
- Australia
- HQ region
- Oceania
Offices4 records
Markets served
Cosive business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- Managed Security Platforms (SaaS): Recurring subscription revenue from managed services including CloudMISP (hosted MISP), MalwareZoo (private malware repository), and Antifraud (fraud detection software). These are delivered as cloud/SaaS products with ongoing management by Cosive's security experts.
- CTI & SecOps Consulting: Professional consulting engagements covering CTI maturity assessment, threat intelligence consulting, security operations maturity assessment, security operations consulting, CTIS consulting, and bespoke security tooling development. Delivered by expert practitioners with domain expertise in banking, government, and critical infrastructure.
- Cybersecurity Training: Instructor-led and remote training programmes covering MISP (Kickstart, Basics), STIX/TAXII/CybOX, CSIRT/SOC Fundamentals, Open Source Security Orchestration, Open Source Intelligence for SOC Analysts, Threat Hunting for Windows Persistence Artefacts, Using ATT&CK to Map Threat Intelligence to Detections. Offered both in-person and remotely across Australia and New Zealand.
- Custom Security Tooling Development: Bespoke software development services building mission-critical security software tailored to client needs. Combines software engineering with cybersecurity expertise for incident response, threat intelligence tooling, and custom integrations.
- Commercial Threat Intelligence Feeds: Reselling and integrating commercial threat data feeds from partners including Intel 471 (Malware Intelligence, Adversary Intelligence) and EclecticIQ Curated Feeds for Australian and New Zealand organisations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise managed services (CloudMISP, MalwareZoo, Antifraud) |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels10 records
Cosive product offering
Product offeringCore offering
Cosive is an ANZ-based cybersecurity consultancy that delivers Cyber Threat Intelligence (CTI) and Security Operations (SecOps) capabilities through three proprietary SaaS products (CloudMISP managed threat intelligence, MalwareZoo private malware repository, Antifraud behavioural biometrics fraud detection) and a portfolio of consulting, engineering, maturity assessment, training, and bespoke security tooling services for banks, government bodies, and critical infrastructure operators.
Product overview
Cosive offers a portfolio of three proprietary SaaS products: CloudMISP (managed MISP threat intelligence platform), MalwareZoo (private malware repository powered by Assemblyline 4), and Antifraud (behavioural biometrics fraud detection). Alongside these core products, Cosive provides consulting, engineering, and training services for CTI and SecOps, and serves as an authorised partner for EclecticIQ and Intel 471 threat intelligence platforms and feeds.
Differentiator
Problem solved
Functional benefit
Brands
- CloudMISP: Managed MISP instance - a ready-to-use MISP instance in the cloud, managed by security experts with battle-tested MISP experience.
- MalwareZoo
- Antifraud
Products and services
- CloudMISP
Quantifiable outcome
- Managed MISP reduces burden of self-hosting, freeing analysts to focus on threat intelligence rather than infrastructure maintenance.
- +2 more outcomes
Companies that use Cosive
Customer profileNamed customers5 records
Segments4 records
Ideal customer profiles3 records
Cosive technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
Feature4 records
Cosive partnerships and signals
Strategic signalPartnerships
Three partnerships are on record, tiered core and minor.
- EclecticIQcoreCosive is an authorised partner of EclecticIQ, offering EclecticIQ Intelligence Centre and EclecticIQ Curated Feeds to Australian and New Zealand organisations. They help clients select, implement, and optimise EclecticIQ threat intelligence platforms.
- Intel 471coreCosive partnered with Intel 471 to make their Malware Intelligence and Adversary Intelligence feeds accessible to Australian and New Zealand organisations. Intel 471 provides high-fidelity, timely indicator feeds with rich context, TTP information, and malware intelligence reports.
- Endpoint Protection ProvidersminorCosive partnered with world's leading endpoint protection providers to make their solutions accessible to Australian and New Zealand organisations, offering comprehensive tooling to automatically protect endpoints from unauthorised access.
Scale indicators5 records
Recent moves6 records
Expansion highlights6 records
Cosive competitors and assessment
Company assessmentRegional players
- Sekuro: ANZ-based cybersecurity consultancy and managed services provider covering strategy, GRC, and technical security. Competes with Cosive for mid-market and enterprise cybersecurity consulting budgets across Australia.
- CyberCX: Australia and New Zealand's largest dedicated cybersecurity services firm, offering CTI, MDR, consulting, and managed security at significantly greater scale. Competes head-to-head with Cosive for ANZ enterprise and government security contracts.
Direct peers
- Triskele Labs: ANZ-based cybersecurity firm offering managed SOC, CTI, and DFIR services. Overlaps Cosive's CTI consulting, managed detection, and incident response lines for similar financial-services and government buyers in Australia.
- Anomali: Threat intelligence platform vendor with managed services and consulting offerings that directly compete with Cosive's CloudMISP and CTI engineering services. Both serve enterprise SOC teams looking to consolidate threat intel ingestion, correlation, and sharing.
- ParaFlare: Australian-headquartered managed detection, response, and threat intelligence provider. Closest ANZ-based peer to Cosive, competing for the same mid-to-large enterprise and government CTI/MDR engagements with a comparable boutique scale.
- ThreatConnect: Threat intelligence platform combining TIP, SOAR, and analytics. Competes with Cosive's CloudMISP/MalwareZoo and CTI engineering services for enterprise security operations buyers seeking unified intel and orchestration stacks.
- EclecticIQ: European-headquartered threat intelligence platform vendor. Cosive is both an authorised partner (reselling EclecticIQ Intelligence Centre and Curated Feeds in ANZ) and a direct competitor for managed CTI platform deployments in the region.
Broad incumbents
- Mandiant (Google Cloud): Global leader in cyber threat intelligence, incident response, and managed detection, now part of Google Cloud. Highly comparable to Cosive on CTI consulting and DFIR service lines, but operates at vastly greater scale and geographic breadth, and bundles CTI into broader MDR/SOC offerings.
- Recorded Future: Largest independent threat intelligence platform vendor, providing finished intelligence and TIP-style capabilities that overlap Cosive's managed MISP and CTI consulting offerings. Competes for the same tier-1 bank and government CTI budget pool.
- CrowdStrike: Global endpoint and threat intelligence leader whose Falcon Intelligence product directly overlaps Cosive's CTI capabilities. CrowdStrike is both a technology partner of Cosive (for sandboxing) and a competitor for enterprise CTI/MDR budgets in ANZ.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Cosive social profiles
Digital presenceCosive compliance and trust
Trust signalCompliance1 record
Cosive financial estimates
Financial estimateRevenue estimate
Valuation estimate
Cosive leadership team
Management profileNumber of profiles
Profiles7 records
Cosive funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Cosive M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Cosive
What does Cosive do?
Cosive is an ANZ-based cybersecurity consultancy that delivers Cyber Threat Intelligence (CTI) and Security Operations (SecOps) capabilities through three proprietary SaaS products (CloudMISP managed threat intelligence, MalwareZoo private malware repository, Antifraud behavioural biometrics fraud detection) and a portfolio of consulting, engineering, maturity assessment, training, and bespoke security tooling services for banks, government bodies, and critical infrastructure operators.
Is Cosive a public or private company?
Cosive is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Cosive founded?
Cosive was founded in 2015. It employs 11 to 50 people.
Where is Cosive based?
Cosive is headquartered in Melbourne, Australia, in the Oceania region.
How does Cosive make money?
Five revenue lines are on record. Managed Security Platforms (SaaS) is the primary driver. The others are CTI & SecOps Consulting, cybersecurity Training, custom Security Tooling Development and commercial Threat Intelligence Feeds.
Who are Cosive's main competitors?
Regional players on record are Sekuro and CyberCX. Direct peers are Triskele Labs, Anomali, ParaFlare, ThreatConnect and EclecticIQ. Broad incumbents are Mandiant (Google Cloud), Recorded Future and CrowdStrike.
Does Cosive have an API?
No public API is recorded for Cosive.
What industry is Cosive in?
Cosive's product category is Cybersecurity Consulting and Threat Intelligence. Its primary akta.pro industry code is HDADAHAC, Attack Surface Management (EASM/CAASM), with a secondary code of HDADAIAJ, Security Awareness, Training & Compliance Attestation. Its NAICS code is 561621 and its SIC code is 6199.