Penetration Testing
Perth
Intrix provides CREST certified penetration testing Perth organisations trust across resources, energy, defence, government and enterprise environments in WA. Our team deploys on site to Perth CBD, West Perth, Henderson and regional WA with no offshoring and no subcontracting.
Join the leading organisations that trust us with their security
CREST Certified Penetration Testing Perth
Intrix holds CREST accreditation, the independently verified standard that APRA, the Australian Signals Directorate and most Commonwealth procurement panels require before engaging a penetration testing provider. Our testers hold OSCP, OSEP, GIAC and CREST CRT certifications and work to methodologies set out in the Australian Government Information Security Manual.
Most Perth penetration testing providers are managed service providers who offer scanning as a service. That is not penetration testing. CREST accreditation requires organisations to pass independent technical assessments of their testing methodology, data security practices and personnel qualifications. Without it there is no independent verification that the person conducting your test is qualified to do so.
For WA organisations operating under APRA CPS 234, the SOCI Act, DISP or the WA Government Cyber Security Policy, CREST certified testing is the standard your auditors, procurement panels and insurers expect. A test from an unaccredited provider will satisfy none of them.
OT and SCADA Penetration Testing for WA Resources and Energy
The resources and energy sector runs operational technology that corporate IT security providers are not equipped to test. SCADA systems, distributed control systems, historian servers and OT/IT network boundaries carry vulnerabilities that a standard network penetration test will not find. Probing them without proper isolation planning can trigger safety systems or disrupt production.
Intrix assesses OT environments including SCADA systems, industrial control systems and OT/IT boundaries for resources, energy and utilities operators across WA. Every OT engagement is scoped with your engineering and security teams before any active testing begins. Isolation requirements, testing windows and safety constraints are confirmed in writing before a single tool runs.
BHP, Rio Tinto, Fortescue, Woodside and Chevron all operate significant OT infrastructure from the Perth CBD and remote WA sites. State-aligned threat actors treat WA resources infrastructure as a priority target for production disruption and project intelligence collection. A vulnerability in a mine site OT network or an LNG facility control system is not a theoretical risk. It is the attack scenario that regulators under the SOCI Act require you to test against.
Penetration Testing for SOCI Act, DISP and WA Government Compliance
Critical infrastructure operators in WA carry obligations under the Security of Critical Infrastructure Act including risk management programme requirements and mandatory cyber incident reporting timeframes. A penetration test produces documented evidence that your controls hold under real attack conditions. Intrix reports are structured to give your risk management programme and board the evidence the SOCI Act requires.
Defence industry suppliers operating around Henderson carry Commonwealth security obligations that require testing by independently certified professionals with documented methodology. Intrix holds CREST accreditation and our engagements follow the Australian Government Information Security Manual, satisfying the requirements of most defence procurement panels.
WA Government agencies and state-owned corporations face obligations under the WA Government Cyber Security Policy that require periodic third-party security assessments with documented outcomes. Intrix delivers testing and reporting that satisfies those requirements and gives your security team actionable remediation guidance.
APRA regulated financial services firms in WA have obligations under CPS 234 that require independently verified security assessments. Our reports map findings to information asset classifications and control effectiveness, giving your prudential auditor the evidence they need.
How Much Does Penetration Testing Cost in Perth?
Most penetration testing engagements in Perth start from $5,000 AUD. The final cost depends on scope, test type and the complexity of your environment. A focused web application test typically runs three to five days. A full network penetration test runs one to two weeks. OT and SCADA assessments are scoped individually based on your environment and isolation requirements.
A scoping call with Intrix is free and produces a fixed-price quote based on your actual environment with no obligation to proceed. Most organisations find the cost of a penetration test is a fraction of what a breach, a failed audit or a pulled government contract costs to fix.
What is penetration testing and why do Perth organisations need it?
Penetration testing is an authorised security assessment where certified professionals attempt to exploit vulnerabilities in your systems the same way a real attacker would. Perth organisations need it to satisfy obligations under the SOCI Act, APRA CPS 234, DISP requirements and the WA Government Cyber Security Policy, and to find vulnerabilities in IT, OT and cloud environments before someone else does.
Does Intrix test OT and SCADA environments in Perth?
Yes. Intrix assesses OT environments including SCADA systems, distributed control systems and OT/IT network boundaries for resources, energy and utilities operators across WA. Every OT engagement is scoped with your engineering team to confirm isolation requirements and safety constraints before any active testing begins.
Does Intrix work with defence industry suppliers in Perth?
Yes. Intrix works with defence industry suppliers operating around Henderson and the broader Perth defence precinct. Intrix holds CREST accreditation and our engagements follow the Australian Government Information Security Manual, satisfying the requirements of most defence procurement panels.
Does Intrix deliver penetration testing for SOCI Act obligations?
Yes. Intrix delivers penetration testing that supports risk management programme obligations under the SOCI Act for critical infrastructure operators in WA. Reports are structured to give your risk management programme and board the evidence they need.
How long does a penetration test take in Perth?
A focused web application test typically runs three to five days. A full network penetration test runs one to two weeks. OT and SCADA assessments vary depending on scope, isolation requirements and site access. Every engagement is scoped before work begins so you receive an accurate timeline based on your actual environment.
Ready to Uncover Your Hidden Risks?
Intrix Cyber Security provides CREST certified penetration testing to organisations across Perth CBD, West Perth, Subiaco, Fremantle, Joondalup, Osborne Park, Cockburn, Henderson, Murdoch and the broader Western Australian metropolitan area including the Pilbara, Goldfields and regional WA. Contact our team to book a free scoping call.