Est. 2013 · Australia

Designing, building, operating, and securing internet-facing and cloud-native systems for mission-critical sectors — government, finance, and beyond.

0
Years in Operation
0
Client Engagements
0
Core Frameworks
0
Uptime SLA
ZOAK + OSM Banner
Who We Are

Hands-on. Partner-focused. Long-term oriented.

ZOAK Pty Ltd (trading as ZOAK Solutions) is an Australian company operating since 2013, delivering secure, scalable, and resilient solutions to mission-critical sectors.

We serve Australian Government departments, internet regulators, ASX-listed firms, and global technology vendors — with deep specialisation in Information Security Management and compliance engineering.

  • Reducing operational overheads through automation and reusable frameworks
  • Bridging strategic objectives with operational execution
  • Security-first design, not security-as-an-afterthought
  • Supporting clients through every phase: design → build → secure → operate
Our Story

The ZOAK Journey

From boutique security engineering to trusted strategic partner — explore the milestones that shaped ZOAK Solutions.

ZOAK Solutions timeline

Prefer full screen? Open the timeline →

What We Do

Our Capabilities

From compliance engineering to cloud-native infrastructure — we cover the full stack.

Security Engineering

Design and implementation of robust security controls across cloud-native and internet-facing systems. Threat modelling, secure architecture review, and penetration testing.

Zero Trust Threat Modelling Pen Testing

Compliance & GRC

ISO/IEC 27001:2022, ASD ISM, Essential Eight, SOC 2, and OSCAL-aligned compliance engineering. Automated SoA generation and gap analysis tooling.

ISO 27001 ASD ISM Essential 8 SOC 2

DevSecOps Pipelines

Secure CI/CD pipeline design and implementation. Branch protection, CodeQL scanning, signed commits, and secrets management built into every workflow.

GitHub Actions CodeQL Signed Commits

Infrastructure-as-Code

Provider optiomized IaaS for AWS / Azure / Google / Microsoft 365 / CloudFlare, Hardened baselines, PowerShell / Bash / Go / Python automation and integration into GRCosm [Governance, Risk and Compliance].

AWS Microsoft 365 + Azure CloudFlare Google

Organisational Service Management

Machine+LLM-readable definitions and relationships for assets, risks, treatments, controls, policies, and audits. Graph-based OSM schema with validation and data hygene for people and bots 🤖.

osm.dev JSON Schema GRCosm

ISMS & Audit Automation

ISMS artefact management, control evidence tracking, automated Statement of Applicability generation, and audit-ready reporting pipelines integrated with Atlassian and GitHub.

ISMS SoA Australian Signals Directorate - Information Security Manaul
Open Source

Public Repositories

Selected tooling and frameworks published from the ZOAK GitHub organisation.

Loading repositories…

Tools & Info

ZOAK Live

ZOAK HQ — Melbourne
--:--:--
Loading…
Australia/Melbourne (AEST/AEDT)
Platform Status
99.999%
↑ All Systems Operational
Last 90 days · No incidents recorded
GitHub Pages API Services osm.dev
Security Tip
Tip 1 of 8
Loading tip…
OSM Schema — osm.dev

Machine-readable organisational management schemas. Click any entity to explore.

Risks Assets Controls Treatments Policies Objectives Third-Parties Audits
Explore osm.dev →
Technology Stack
Handy Tools

Client-side Utility Bench

Run lightweight, browser-based checks to inspect domains, headers, and performance without leaving the page.

Whois · RDAP
Enter a domain to query RDAP records.
Powered by rdap.org.
DNS Dumpr
Resolve records via DNS-over-HTTPS.
Uses dns.google/resolve.
Tracepath
Run a quick network trace summary.
Queries Google DNS trace endpoints.
Mailheader Parser
Parsed headers will appear here.
Speedtestr
Estimate download speed from this page.
Local-only fetch test.
Aim Trainer

Tap each target before it vanishes — every hit speeds things up.

Score: 0 · Level 1 · Best 0
Click start to begin.
Get in Touch

Let's Build Something Secure

Whether you need a security review, compliance roadmap, or cloud-native build partner — ZOAK Solutions has the experience to deliver.

ZOAK Pty Ltd · ABN/ACN: 68 161 531 880
Australian Registered Company · Operating since 2013