Project Black

Project Black

Sydney, NSW, Australia

Penetration TestingOffensive SecurityApplication SecurityManaged Security
Serves Enterprise, SMB, Public Sector
Profile last updated: August 28, 2026

About

Project Black is a cybersecurity company based in Sydney, Australia working in penetration testing, offensive security, application security +6 more.

Project Black is an Australian cybersecurity consultancy headquartered in Sydney and Melbourne, with consultants also based in Brisbane. It is CREST accredited and a CVE Numbering Authority. Penetration testing is its core service, covering web and API testing, mobile application testing, internal, external and wireless network testing, social engineering, Active Directory assessments and Microsoft 365 security assessments. Other services include application security (including an AppSec as a Service offering), security engineering, managed security services, managed vulnerability scanning, Essential Eight assessment and implementation, ISO 27001 readiness and implementation support, and security awareness training. Penetration testing is offered as a service (PTaaS) and under white-label or co-branded partner arrangements. The company states it works with businesses from startups to enterprises, including government agencies, and holds an approved government supplier position in New South Wales, Queensland and Victoria. It also conducts security research and publishes zero-day vulnerabilities.

Location

Sydney, Australia

Registration

ABN 44 665 887 749

Focus areas

penetration testingapplication securityCRESTEssential EightISO 27001managed securitysocial engineeringMicrosoft 365 security

Languages

EN

Services & products

Security domains

Penetration TestingOffensive SecurityApplication SecurityManaged SecurityNetwork SecurityIdentity & AccessCloud SecuritySecurity AwarenessGRC & Compliance

How they deliver

Professional ServicesConsultingManaged ServicesTraining

Products

Remote testing probe

Hardware

Plug-and-play device connected to a client network that opens an outbound encrypted connection to Project Black's systems, enabling internal penetration tests to be conducted remotely.

Customers

EnterpriseSMBPublic Sector

Industries served

SoftwareSaaSEducationFinanceHealthcareGovernment

Compliance & partners

Compliance frameworks

ISO 27001PCI DSSASD Essential EightAPRA CPS 234

Technology partners

Microsoft

Credentials & affiliations

Certifications

CREST accreditation

CVE Numbering Authority

Industry memberships

CREST

People

Management & team (3)