TLR Global

What TLR Global does

TLR Global is an Australian-owned cybersecurity company headquartered in Canberra with a second office in Brisbane, operating a platform-plus-services model across government, critical infrastructure, SME, and education sectors exclusively within Australia. The firm's commercial offering is anchored by two proprietary software platforms developed in-house — CAVS (Continuous Automated Vulnerability Scanning), a subscription-based attack-surface management engine that performs automated discovery, CVE matching, and SIEM-ingestible reporting, and SETH (Software Enabled Threat Hunting), a modular threat-detection and autonomous-remediation platform that deploys 'microbots' across network assets to detect and resolve suspicious behaviour with minimal human intervention. These platforms are wrapped by a managed SOCaaS offering, on-site or remote Managed Product delivery, and standalone professional services including penetration testing (network, application, physical/social-engineering), incident response, and proactive threat hunting with takedown support. A distinctive kinetic-training product, Cyber War Games, uses interactive Lego city simulations to run real-world cyber attack scenarios for skills development, sold in both moderated (TLR-staff-delivered) and packaged (self-run) formats.

The business operates on a hybrid revenue model: tiered annual software subscriptions for CAVS (Up to 15 / Up to 40 / 40+ Hosts, Managed and Managed Premium), modular SETH licensing, recurring or multi-year Cyber War Games subscriptions priced on application, plus managed-services and bespoke professional-services engagements. Go-to-market is direct and consultative, targeting government, critical infrastructure operators (utilities, transport, healthcare, communications), SMEs requiring outsourced security operations, and educational institutions. Distribution channels include thought-leadership content, a 'Request a Demo' website conversion mechanism, and industry events. The company does not use third-party resellers or distributors, has no disclosed institutional funding, no parent company, no M&A activity, and no disclosed revenue or headcount figure beyond a publicly listed 1-10 range. Leadership comprises co-founder and CEO Dave Roberts (ex-Australian Defence Intelligence, original SETH and Cyber War Games creator), CTO Jarrah Gosbell (Debian Maintainer, ex-Defence penetration tester), and CFO Melanie Roberts (ex-Fujitsu Australia PMO).

Name

TLR Global

Legal name

TLR Global

Website

https://tlr.global

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

1–10 employees

Short description

TLR Global is an Australia-only cybersecurity firm offering proprietary vulnerability scanning (CAVS) and autonomous threat-hunting (SETH) software, a managed SOC service, penetration testing, incident response, and kinetic Cyber War Games training, serving government, critical infrastructure, SMEs, and education clients from offices in Canberra and Brisbane.

Ownership category

akta.pro rank

Product category

Cybersecurity Software & Managed Security Services

NAICS

Computer Systems Design and Related Services (54151), Other Computer Related Services (541519), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)

akta.pro primary industry

Penetration Testing Platforms (PTaaS) (HDADAHAG)

akta.pro secondary industries

Threat Detection, Monitoring & Response (SOC, SIEM, SOAR, OT NDR) (EUADANAE), Incident Response, Forensics & Recovery for Critical Infrastructure (EUADANAI)

Keywords

• Vulnerability scanning software
• Threat hunting platform
• Managed security services
• Penetration testing services
• Incident response services

Headquarters

HQ city

Canberra

HQ country

Australia

HQ region

Oceania

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Revenue model

1. CAVS Subscriptions: CAVS is offered as a tiered annual subscription (12-month subscription) with three host-based tiers: Up to 15 Hosts, Up to 40 Hosts, and 40+ Hosts, each with Managed and Managed Premium options. Subscriptions include cloud access, portal training, reporting, and varying levels of support and remediation services.
2. SETH Licenses and Modules: SETH is a modular threat hunting platform with add-on modules (Active Directory, File Monitoring, Process Tracking, etc.) sold as part of a bundled security solution, typically as a managed service or subscription.
3. Cyber War Games: Cyber War Games offered as either a packaged self-run product (organisations run their own games) or a fully moderated delivery (TLR sends staff on-site). Pricing is listed as Price on Application (POA).
4. Managed Product Services: TLR manages any of its technology services (CAVS, SETH) remotely or on-site for clients who lack in-house capacity. Offered as a premium add-on to existing subscriptions or as a standalone managed service covering deployment, monitoring, and remediation.
5. Professional Services (Penetration Testing, Incident Response, Threat Hunting): Bespoke cybersecurity professional services including penetration testing (network, physical, application), incident response, and threat hunting. Sold as individual service engagements to complement the software product suite.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels4 records

Core offering

TLR Global is an Australian cybersecurity company that develops and sells two proprietary software platforms — CAVS (Continuous Automated Vulnerability Scanning) and SETH (Software Enabled Threat Hunting) — and delivers a suite of professional and managed security services including penetration testing, incident response, threat hunting, and 24/7 SOC-as-a-Service. The company also offers Cyber War Games, a kinetic cyber training product built around interactive Lego city simulations of real-world attacks on critical infrastructure.

Product overview

TLR Global is a cybersecurity company offering a platform-plus-services model built around two proprietary software products — CAVS and SETH — supported by a suite of professional services. CAVS (Continuous Automated Vulnerability Scanning) is the attack surface management and vulnerability detection engine, continuously scanning internal and external networks and delivering ingestible reports to SIEM/SOC platforms. SETH (Software Enabled Threat Hunting) is the automated threat detection and remediation platform that deploys microbots to autonomously detect, contain, and resolve security issues across network assets, freeing human operators for higher-value tasks. Together with Cyber War Games (kinetic real-world cyber training simulations), these products are complemented by managed service wrappers (Managed Product), a fully managed SOC (SOC as a Service), and standalone professional services including Threat Hunting, Incident Response, and Penetration Testing. The portfolio serves government, critical infrastructure, SME, and education sectors across Australia.

Differentiator

Problem solved

Functional benefit

Brands

• CAVS: Continuous Automated Vulnerability Scanning - A continuous automated attack surface management and mapping solution that analyses and detects security misconfigurations and vulnerabilities within an organisation's network.
• SETH
• Cyber War Games

Products and services

• CAVS (Continuous Automated Vulnerability Scanning) Continuous automated attack surface management and mapping solution that analyses and detects security misconfigurations and vulnerabilities within an organisation's internal and external networks. Engineered by TLR's penetration testers and software developers, with asset discovery, CVE reporting, TLS/content security policy checking, SIEM/SOC/DevSecOps ingestible reports, and tiered Managed/Managed Premium subscription tiers by host count (up to 15, up to 40, 40+).
• SETH (Software Enabled Threat Hunting) Automated threat detection and remediation platform that identifies vulnerabilities and breaches in network and infrastructure and resolves them using deployable microbots. Modules include Active Directory Module, Critical & Sensitive File Monitoring, Process Tracking & Learning, Local Account Monitoring, Application Whitelisting, Scheduled Task Monitoring, Windows Patch Monitoring, Automated Threat Intelligence Management (ATIM), and Active Server Attack Detection.
• Cyber War Games Kinetic cyber training experiences using interactive Lego cities to simulate real-world cyber attacks on critical infrastructure and networks. Configurable for attack-only, defend-only, or attack-versus-defence scenarios. Offered as a packaged self-run product or fully moderated TLR-run delivery.
• Managed Product Premium managed service wrapper around TLR's technology solutions (CAVS and SETH) where TLR's team handles deployment, monitoring, and ongoing management remotely or onsite, enabling organisations to access enterprise-level security without a full in-house security team.
• SOC as a Service (SOCaaS) Cloud-based managed Security Operations Centre providing 24/7 monitoring, detection, and response to cyber threats. Integrates CAVS and SETH proprietary software with human cybersecurity expert oversight for event categorisation, prioritisation, and remediation.
• Penetration Testing Simulated attacks against networks, applications, and infrastructure to identify weaknesses before attackers exploit them. Covers network penetration testing, physical penetration testing (social engineering), and application penetration testing using a three-step Scan & Analyse, Validate, Report process.
• Incident Response Rapid response to cyber attacks through a structured incident response program that identifies and contains threats, restores critical operations, and implements measures to prevent future breaches.
• Threat Hunting Proactive threat hunting service that continuously monitors for threats and indicators of risk across all environments, collects finished intelligence from deep web, paste sites, code repositories, breached datasets, and social channels, and provides actionable intelligence, risk prioritisation, and takedown services for harmful sites or exposed data.

Quantifiable outcome

• SETH automatically finds and rectifies issues before they become critical, reducing the need for human intervention and freeing SOC operators for critical tasks.
• +3 more outcomes

Named customers1 record

Segments4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability5 records

Feature5 records

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• CrowdStrike: CrowdStrike Falcon is a leading endpoint/threat detection platform with autonomous response and managed hunting services. SETH's autonomous microbot-based threat hunting directly overlaps with CrowdStrike's Falcon platform positioning.
• Cobalt: Cobalt is a leading Penetration Testing as a Service (PTaaS) platform connecting organisations to vetted testers — a direct competitor for TLR's network, application, and physical penetration testing services.
• SentinelOne: SentinelOne's Singularity platform emphasises autonomous threat detection and remediation via AI — a near-direct technical analogue to SETH's microbot-based autonomous remediation approach.
• Qualys: Qualys provides cloud-based vulnerability management, detection, and response with a subscription model very similar to CAVS. It is a direct competitor for TLR's vulnerability scanning offering across mid-market and enterprise.
• Rapid7: Rapid7 combines vulnerability management (InsightVM) with managed detection/response (InsightIDR MDR) and penetration testing services — closely mirroring TLR's CAVS + SETH + SOCaaS + pen testing stack.
• Tenable: Tenable is a leading vulnerability management and attack surface management vendor (Nessus, Tenable One). It directly competes with TLR's CAVS product in continuous automated vulnerability scanning and is a benchmark peer for that capability.
• Bugcrowd: Bugcrowd provides crowdsourced PTaaS and attack surface management — a direct competitor in the penetration testing and continuous vulnerability assessment categories where TLR operates.

Emerging players

• Hack The Box: Hack The Box is a leading cybersecurity skills and training platform with hands-on labs and gamified learning — overlapping with TLR's Cyber War Games in the cyber-skills training category, though with a digital rather than kinetic delivery model.

Regional players

• CyberCX: CyberCX is Australia's largest dedicated cybersecurity services firm, offering pen testing, SOC, IR, and managed security across government and critical infrastructure — TLR's most direct regional peer in the Australian market.
• Tesserent: Tesserent (now part of Thales/Axon) is an Australian cybersecurity services provider focused on government, defence, and critical infrastructure — a regional peer competing for similar Australian sovereign and regulated workloads.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/tlrglobal

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about TLR Global