DGplex

What DGplex does

DGplex is an Australian-owned cybersecurity company headquartered in Canberra that delivers sovereign cybersecurity solutions to Australian government agencies (federal, state, and local), critical infrastructure operators, and Australian enterprises. The company positions itself around data sovereignty and Australian regulatory alignment, holding DISP membership, ASD Cyber Security Partner status, and an IRAP PROTECTED assessment at the platform level.

The company's core product is TONK, a sovereign Continuous Threat Exposure Management (CTEM) platform built and hosted entirely in Australia. TONK integrates Attack Surface Management, AI-driven threat detection (including live CVE signature generation with CISA KEV correlation), ACSC CTIS feed ingestion, an integrated Red Team module with credential attacks across nine protocols, Third Party Risk Management with A-F vendor scoring, and Digital Risk Monitoring covering dark web, phishing, credential leaks, and executive exposure. Complementing TONK, DGplex offers managed security services (24/7 SOC, MDR, managed red team), cybersecurity consulting (penetration testing, incident response, compliance assessments against ISM, ISO 27001, NIST, PCI DSS, SOC2), custom AI solutions, and ICT contractor placements via the BuyICT Digital Marketplace panel.

DGplex generates revenue across four streams: subscription-based managed security services, software licensing and professional services through authorised reseller arrangements (Rapid7 Gold Partner plus CrowdStrike, Akamai, RunZero, Netwrix, Airlock Digital, Patch My PC), project-based cybersecurity consulting, and labour/contractor hire into Australian Government departments. Its go-to-market combines direct enterprise field sales to government and large enterprises with channel-led reach through its reseller and BuyICT DMP panel memberships. The company is privately held (DGplex Pty Ltd), shows no disclosed funding rounds or external investors, and operates with a 1-10 employee headcount.

Name

DGplex

Legal name

DGplex Pty Ltd

Website

https://dgplex.com.au

Company type

Private

Founded year

2012

Operating status

Operating

Headcount range

1–10 employees

Short description

DGplex is an Australian-owned cybersecurity company that delivers sovereign threat exposure management, managed security services, and compliance solutions to Australian government agencies and enterprises via its proprietary TONK CTEM platform.

Ownership category

akta.pro rank

Product category

Cybersecurity — Continuous Threat Exposure Management

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (56162)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

Keywords

• Managed security services
• Threat exposure management
• Cybersecurity consulting
• Sovereign cloud security
• Attack surface management

Headquarters

HQ city

Canberra

HQ country

Australia

HQ region

Oceania

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Managed Security Services: 24/7 SOC monitoring, Managed Detection & Response (MDR), EASM, managed red team operations, and digital risk management delivered by Australian-based security operations team. Subscription-based recurring revenue model.
2. Technology Reselling: Authorised reseller for Rapid7, CrowdStrike, Akamai, Airlock Digital, RunZero, Netwrix, and Patch My PC. Revenue generated from software licensing, subscriptions, and professional services around deployment.
3. Cybersecurity Consulting: Security architecture, penetration testing, incident response, compliance assessments (ISM, ISO 27001, NIST, PCI DSS, SOC2), cloud security assessments, and security awareness training.
4. Resource/Labour Hire: ICT contractor placements into Australian Government departments and agencies. DGplex is a BuyICT Digital Marketplace (DMP) panel member enabling streamlined procurement of specialist cybersecurity resources.

Go-to-market motion2 records

Distribution channels4 records

Marketing channels4 records

Core offering

DGplex delivers sovereign Australian cybersecurity through its TONK Continuous Threat Exposure Management (CTEM) platform and a portfolio of managed security, consulting, AI, technology resale, and government resource hire services. The platform combines attack surface management, AI-driven threat detection, integrated red team modules, third-party risk, and digital risk monitoring, all hosted on Australian infrastructure. Their offerings target Australian government agencies, defence contractors, critical infrastructure operators, and enterprises that require sovereign, IRAP PROTECTED-assessed controls.

Product overview

DGplex offers a unified platform-plus-services portfolio anchored by TONK, its sovereign Continuous Threat Exposure Management (CTEM) platform. TONK integrates Attack Surface Management, AI-driven threat detection, ACSC CTIS threat intelligence, integrated Red Team, Third Party Risk Management, and Digital Risk Monitoring into one platform. Complementing TONK are managed security services (MDR, SOC monitoring, managed red team), custom AI solutions, cybersecurity consulting, technology reselling (Rapid7, CrowdStrike, Akamai, and others), and government resource hire services.

Differentiator

Problem solved

Functional benefit

Brands

• TONK: Sovereign Continuous Threat Exposure Management (CTEM) platform delivering complete visibility of external-facing assets with integrated Red Team, Digital Risk Management, and Third Party Risk modules. Built and hosted in Australia with IRAP PROTECTED assessment.

Products and services

• TONK CTEM Platform Sovereign Continuous Threat Exposure Management (CTEM) platform delivering complete visibility of external-facing assets with integrated Red Team, Digital Risk Management, and Third Party Risk modules. Built and hosted in Australia with IRAP PROTECTED assessment. Designed for Australian government agencies, defence contractors, critical infrastructure operators, and enterprises that require sovereign security controls.
• Managed Security Services 24/7 SOC monitoring, Managed Detection & Response (MDR), External Attack Surface Management (EASM), managed red team operations, and digital risk management delivered by an Australian-based security operations team. Powered by the Rapid7 Gold Partnership.
• Custom AI Solutions AI-powered threat analysis, custom machine learning models, security automation, and intelligent alerting for cybersecurity applications, built by DGplex's development team. Includes behavioural analytics, anomaly detection, and predictive analytics capabilities.
• Cybersecurity Consulting Security architecture, penetration testing, incident response, and compliance assessments (ISM, ISO 27001, NIST, PCI DSS, SOC2) delivered by certified professionals for Australian organisations.
• Technology Reselling Authorised reseller for Rapid7, CrowdStrike, Akamai, Airlock Digital, RunZero, Netwrix, and Patch My PC. Curated best-of-breed cybersecurity portfolio for Australian organisations, with software licensing and deployment services.
• Resource Hire (ICT Contractor Placement) ICT contractor placements into Australian Government departments and agencies. DGplex is a BuyICT Digital Marketplace (DMP) panel member enabling streamlined procurement of specialist cybersecurity resources.

Quantifiable outcome

• Automated CVE signature generation with exploitability scoring and CISA KEV status correlation
• +2 more outcomes

Named customers2 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability6 records

Feature9 records

Partnerships

Ten partnerships are on record, tiered core.

• ACT GovernmentcoreImplementation/ SI/ Consulting Partner · 1 November 2021Contracted by ACT Government through the Digital, Data and Technology Solutions (DDTS) division to provide enhanced threat detection and response capabilities for the ACT public service under a three-year agreement.
• Rapid7coreTechnology or IntegrationGold Partner status in Rapid7 PACT Partner Program. DGplex deploys Rapid7's Insight Platform (InsightIDR, InsightVM, InsightConnect) for detection, response, and vulnerability management. Priority access to Rapid7 technical resources, advanced training, and pre-release product capabilities.
• RunZerocoreTechnology or IntegrationAuthorised Reseller for RunZero cyber asset attack surface management. Provides unauthenticated, active scanning that discovers and inventories every asset across IT, OT, IoT, and cloud environments — without requiring credentials or agents.
• Airlock DigitalcoreTechnology or IntegrationAuthorised Reseller for Australian-born Airlock Digital, specialising in application whitelisting and execution control aligned with ASD Essential Eight framework.
• Patch My PCcoreTechnology or IntegrationAuthorised Reseller for Patch My PC automated third-party patch and application management for Microsoft Intune and ConfigMgr. Trusted by over 10,100 enterprises.
• NetwrixcoreTechnology or IntegrationAuthorised Reseller for Netwrix data security and identity governance solutions protecting sensitive information, detecting threats, and maintaining compliance across hybrid IT environments.
• AkamaicoreTechnology or IntegrationAuthorised Reseller for Akamai global content delivery and cloud security, providing DDoS protection, WAF, microsegmentation, zero trust, and API security.
• CrowdStrikecoreTechnology or IntegrationAuthorised Reseller for CrowdStrike AI-native Falcon platform delivering endpoint protection, threat intelligence, and incident response through a single lightweight agent. Market leader in EDR and XDR.
• Australian Signals Directorate (ASD)coreStrategic or Co-development PartnerASD Cyber Security Partner since founding. Alignment with ASD guidance and Essential Eight framework. IRAP PROTECTED assessed platform.
• Defence Industry Security Program (DISP)coreStrategic or Co-development PartnerCurrent DISP member since founding. Demonstrates adherence to security standards for handling government information.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Regional players

• AUCloud: Australian sovereign-cloud and secure managed-services provider serving government and critical-infrastructure customers with IRAP-assessed infrastructure; adjacent competitor to DGplex for sovereign Australian cybersecurity and compliance workloads.
• Hive Kai / Vero IT Security (Pacific Aerospace): Emerging Australian cybersecurity firm offering managed security, consulting, and IRAP-aligned services to government and enterprise; a similarly positioned regional peer in sovereign Australian cyber services.
• Loop Secure: Australian cybersecurity services provider delivering consulting, managed security, and government-focused cyber capabilities across Australia — comparable peer in size, geography, and sovereign-services positioning to DGplex.

Broad incumbents

• CrowdStrike: DGplex resells CrowdStrike's Falcon EDR/XDR platform but CrowdStrike also offers its own Falcon Complete MDR service globally — a broad incumbent competing for the same Australian enterprise MDR dollars DGplex targets.
• Rapid7: DGplex's primary technology partner and platform vendor behind much of its managed service stack — a broad incumbent in SIEM/XDR/vulnerability management with global scale that DGplex wraps with sovereign delivery and managed services in Australia.

Direct peers

• Tesserent (Thales): Australian-headquartered cybersecurity services provider (now part of Thales) delivering managed security, MDR, IRAP-assessed platforms, and sovereign GOV/enterprise cyber — directly comparable to DGplex across Australian public-sector cyber services and IRAP-aligned offerings.
• Sekuro: Australian cybersecurity services and platform firm combining MSSP, consulting, and proprietary tools, targeting CISOs at large Australian enterprises and government — directly comparable to DGplex in offering breadth and Australian focus.
• CyberCX: Australia's largest dedicated cybersecurity services firm offering MSSP/MDR, consulting, and managed SOC capabilities to government and enterprise, headquartered in Australia with sovereign delivery — the clearest like-for-like competitor to DGplex for sovereign Australian cyber services.

Emerging players

• Arctic Wolf: Global MDR/MSSP delivering 24/7 SOC outcomes via a partner-first delivery model; competes head-on with DGplex's managed security services in the Australian market even if it lacks DGplex's sovereign/Australian-hosted data residency.
• eSentire: Specialised MDR provider delivering 24/7 managed detection and response to mid-market and enterprise customers; comparable to DGplex's MSSP/MDR offering in service scope and recurring managed-service model, with growing Australian and APJ presence.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/dgplex

Compliance7 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DGplex