About Us

About Us

Learn more about the team at forefront of the Australian Cyber Security scene.

Awards and Partners

Learn more about out renowned partners and awards.

Careers

Meet the Team

Media
Solutions
Featured Categories

Offensive Security

Expert penetration testing

Adversary Simulation

Simulate real attacks

Cyber Advisory

Governance, Audits & Strategy

Virtual CISO

Security-as-a-service

Managed Detection & Response

24x7x365 Security Operations Centre

Digital Forensics & Incident Response

Incident Investigations and Remediation

View all services →

Products

Gridware Managed Services
Comprehensive & proactive security

Gridware 360
24x7x365 End-to-end security suite

Gridware Cloud 360
Harness the benefits of cloud technology

Incident Response Retainer
Swift, expert-led incident resolution

Industries we serve

Education

Finance

Fintech

Government

Healthcare

Legal

Nonprofit

Technology

Utilities

Regulatory Expertise

Data Privacy

GDPR

ISO 27001

ASD Essential 8

SOCI Act

APRA CPS 234

CIS 18

PCI DSS

NIST CSF

View top cyber threats services →
Insights

Resources

A collection of our published insights, whitepapers, customer success stories and more.

Subscribe to Cyber Insights

Success Stories

Customer success stories from real Gridware customers. Find out how we have helped others stay on top of their Cyber Security.

Published Insights

Cybersecurity Latest

Media

Events
Talk to an expert today

Security Advisories

Date	Title	Severity	CVE
2025-09-23	Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation	High	CVE-2025-1131
2025-02-19	SQL Injection in ChurchCRM CurrentFundraiser Parameter via BatchWinnerEntry.php	Critical	CVE-2025-1135
2025-02-19	SQL Injection in ChurchCRM CurrentFundraiser Parameter via DonatedItemEditor.php	Critical	CVE-2025-1134
2025-02-19	SQL Injection in ChurchCRM EID Parameter via EditEventAttendees.php	Critical	CVE-2025-1133
2025-02-19	SQL Injection in ChurchCRM EN_tyid Parameter via EditEventAttendees.php	Critical	CVE-2025-1132
2025-02-19	Session Hijacking via Reflected Cross-Site Scripting (XSS) in ChurchCRM EditEventAttendees.php EID Parameter	High	CVE-2025-1024
2025-02-18	SQL Injection in ChurchCRM newCountName Parameter via EditEventTypes.php	Critical	CVE-2025-1023
2025-02-18	Session Hijacking via Stored Cross-Site Scripting (XSS) in ChurchCRM GroupEditor.php Description Field	High	CVE-2025-0981
2024-12-04	Authenticated HTML Injection in Issuetrak Ticket Comment Function	High	CVE-2024-11479
2024-12-04	Unauthorized Modification of Ticket Requester	High	CVE-2024-12123

Company

Key Services

Products

Contact

Sydney Offices

Level 36, Suite 4
Australia Square
264 George Street
Sydney NSW 2000

T. 1300 211 235

Affiliations

Gridware is one of Australia’s leading Cybersecurity consultancies. Employing market-leading talent and with a strong thought leadership contribution to our field, we continue to out-think and out-smart the most innovative and cutting-edge cyber threats of today.

We acknowledge the Gadigal people of the Eora Nation as the Traditional Owners of the land where we work and live. We pay our respects to Elders past, present and emerging.

Terms and Conditions

Vulnerability Disclosure Policy

Security Advisories

© 2026 Gridware Cybersecurity Pty Limited | ABN: 19 617 435 711

Network Penetration Testing

Get a quote

Please fill out the form so we accurately can quote your project:

Are you looking to conduct an internal or external network penetration test?

How many external (or internal) IP addresses are there in the network? Please list all the ranges required for testing.

When should the active portions of the test (scanning, enumeration, exploitation, etc.) be performed? Please specify any required timeframes?

What are the reasons for having this penetration test carried out?

Please specify what type of testing you would prefer we perform. We offer:

Blind – provides the testers with NO information prior to testing. This form of testing gives an indication of what attack surface is visible to a threat actor. Testers have no prior knowledge to access the network or DMZ)

Targeted –a combination of both ‘blind’ and ‘internal’ testing, where the tester may be granted some access and basic knowledge of the system)

Internal Review - working with all level of privilege accounts, where the structure, design, implementation of the network is known to the testers)

If known, please list quantity and details of all external facing network devices present on the network, including: Routers / switches Network storage (NAS) Printers VoIP handsets or softphones

How many servers are present with a public IP address? Please list the type of operating systems, services (e.g. Apache web server, Microsoft IIS, Windows Server 2017 running Active Directory, MS SQL)

Please list your hosting/service providers

Are there any firewalls, intrusion detection/prevention systems, load balancers etc., that may impact the results of the test?

Do you require intensive/stress tests to be conducted i.e. Brute force, DoS and DDoS or load balance tests?

Are there any systems which could be considered fragile? (Tendencies to crash, older operating systems, etc.)

Are backups tested on a regular basis? If so, when was the system last backed up and restored?

Is there any system monitoring software in place?

Any other critical information?

Name

Company Name

Email

Contact Number

Industry