Practitioners, not slides
Our advice is grounded in practical security experience.
About Vectra
Locally based cybersecurity,
Locally based cybersecurity,
since 2001.
Vectra specialises in cybersecurity. We combine independent advice, systems integration and managed operations, from first assessment through to 24/7 protection.
Why pure-play still matters.
When Vectra started in 2001, cybersecurity consulting was a side business inside big-four firms and networking resellers. Attackers moved faster than the org charts meant to stop them. Customers paid for that gap.
Our approach prioritises specialist cybersecurity expertise. We hire engineers with experience running SOCs and leading incident response, and invest in their qualifications and technical practice. We apply the controls we recommend to our own systems.
In 2022, Vectra joined Ensign InfoSecurity. Our Australian practice draws on the group's SOC network, research and threat intelligence, while retaining local delivery and accountability.
How we work
Four things we don't compromise on.
Sovereign by default
Locally based and operated, with data storage and access arrangements agreed for each service.
One team, one outcome
A named team coordinates your engagement from scoping through incident response, with clear accountability throughout.
Engineered end-to-end
We own the design, the build and the run. What we recommend, we operate - and what we operate, we stand behind.
Our story
25 years, one focus.
Milestones that shaped how Vectra operates today. We haven't diversified; we've deepened.
- 2001 Founded in Adelaide as a boutique offensive-security practice.
- 2005 Australia's first PCI Qualified Security Assessor company.
- 2010 IRAP assessor practice established. First Commonwealth engagements delivered.
- 2015 Sovereign Managed XDR launched on AWS Australia.
- 2019 CREST accreditation across offensive, defensive and incident response.
- 2022 Acquired by Ensign InfoSecurity. Retained as the pure-play Australian practice.
- 2026 Operating across Adelaide, Sydney, Melbourne, Brisbane, Perth and Canberra.
Powered by Ensign InfoSecurity
A much larger team stands behind us.
Ensign InfoSecurity is Asia Pacific’s largest pure-play cybersecurity services provider. Its size helps when a job goes beyond our local team, when you need 24×7 cover, or when regional threat context makes the work better. Beyond Asia Pacific, we can also deliver in the USA, Europe, the Indian Subcontinent and the Middle East.
~1,000
cyber professionals across Ensign
24×7×365
security operations that never stop
23
countries in Asia Pacific where we have supported clients
One cybersecurity company
From board-level risk to frontline response.
An end-to-end partner is not about how many services fill a website. It is about joining up strategy, testing, technology and operations when a problem crosses those lines.
Advise
Strategy, risk and compliance
We set cyber strategy and help with governance, maturity, PCI DSS, ISO 27001, Essential Eight, IRAP and regulation.
Assure
Test what you rely on
We run penetration tests, red team work, vulnerability management, reviews and audits, and check that your controls work.
Protect
Build stronger controls
We build controls for endpoint, identity, network, cloud, email, data, SIEM and infrastructure, and make them resilient.
Operate
Own the ongoing outcome
We run 24×7 security operations, MDR, Agentic SOC and managed IT. We also build detections, respond to incidents and keep improving.
Our people
The relationship is still human.
Cybersecurity is technical, but you feel it through people. It is the advice you get, the engineer making the change, the analyst on the incident and the person who owns the fix when something goes wrong. We keep those links close, and our local team can call on the wider Ensign group.
Consultants
They turn rules, compliance and risk needs into security plans you can really put in place.
Security engineers
They design, move and tune the platforms you rely on, from endpoint and network to identity, cloud, SIEM and infrastructure.
Offensive specialists
They test your systems and defences with CREST-accredited penetration testing and real-world attack simulation.
SOC practitioners
They watch, investigate, build detections and lead the response, 24×7.
Service teams
They keep us accountable. You get a local owner, regular reports and a clear way to escalate, and the service keeps improving.
Ensign specialists
They add regional research, threat intel, advanced engineering and rare skills when you need them.
Certifications and memberships
Some credentials belong to Vectra. Others belong to our people.
Company accreditations, personal certifications, government endorsements, vendor partner tiers and memberships are different kinds of proof. We don’t treat them as the same. The sections below keep them apart, so you can see just what sits behind the work you buy.
Accreditations and memberships.
CREST, IRAP and PCI cover our regulated work or our assessors, each under its own rules. AISA and ISACA are the professional groups we belong to.
CREST-accredited penetration testing
We are a CREST-accredited firm for penetration testing. CREST checks how a firm is run and how it delivers and quality-checks its work. It is a company accreditation, not a personal one.
ASD-endorsed IRAP assessors
Our IRAP assessors are endorsed by the Australian Signals Directorate. They assess systems against the government’s Information Security Manual. The endorsement is personal. An IRAP assessment does not certify or accredit the system itself.
PCI DSS Qualified Security Assessor
We run formal PCI DSS assessments, Reports on Compliance, readiness checks and scoping. We also provide supported ASV scans, though a scan alone does not prove full compliance. Through this work we take part in the PCI Security Standards Council ecosystem.
Australian Information Security Association
We support AISA and Australia’s cyber community by taking part, sharing what we know and keeping our skills current.
ISACA
ISACA sets global credentials and guidance for audit, governance, security, risk and assurance. These include CISA and CISM.
CrowdStrike
Certified across the Falcon platform.
Vectra is a CrowdStrike Elite Partner. Our Strike Team is a practice built just for CrowdStrike. People in that team hold all five of these credentials today. Our parent, Ensign InfoSecurity, was named CrowdStrike’s 2026 JAPAC Managed Security Services Partner of the Year.
Certified Falcon Administrator
Setting up sensors, policies and settings, and running the platform day to day.
Certified Falcon Responder
Front-line triage, investigation and response in Falcon.
Certified SIEM Engineer
Bringing data into Next-Gen SIEM, then parsing, searching and building detections.
Certified Cloud Specialist
Protecting cloud workloads and environments with CrowdStrike.
Certified Identity Specialist
Finding, blocking and responding to identity threats with Falcon.
Practitioner certifications
Specialist credentials for each part of the job.
These are examples of what people across the team hold. Not everyone holds every one, and holdings change as people join, move or renew. If your work needs a named assessor or credential, we confirm who is assigned when we scope it.
Offensive security
Hands-on attack and penetration testing
Hands-on credentials used in penetration tests, attack simulation and red team work.
- OSCP
- CEH
- eCPPT
- CRTP
- CRTE
Governance, risk and assurance
Governance and independent assessment
Used in audit, risk, security design and management, and formal assessments.
- CISA
- CISM
- CISSP
- PCI-QSA
- IRAP
Security operations
Detection, investigation and platforms
Used in SOC work, endpoint response and running modern platforms.
- CCFA, CCFR, CCSE, CCCS and CCIS
- Microsoft Security Operations Analyst
- Blue Team Level 1
- IBM QRadar SOC Analyst
Where we work
Six Australian offices, one regional hub.
Analysts, consultants and engineers across every Australian timezone - part of an 18-SOC global Ensign footprint.
HQ · SOC
Adelaide
145 South Terrace
Adelaide SA 5000
NSW office
Sydney
3 Spring Street
Sydney NSW 2000
VIC office
Melbourne
454 Collins Street
Melbourne VIC 3000
WA office
Perth
Level 3, 1060 Hay Street
West Perth WA 6005
Government
Canberra
Australian Capital Territory
QLD office
Brisbane
Brisbane, Queensland
Regional Office
Singapore
30A Kallang Place, #08-01
Singapore 339213
Start with a conversation.
Speak to us about your cyber governance and compliance requirements.
Message sent
Thanks. We have your message.
A member of our team will be in touch soon at . You can also reach us during business hours on 1800 816 044.
- Topic
- Company
Need us sooner? Call +61 8 8208 0800, or the 24/7 incident line on 1800 816 044 if something is happening now.