Tell us what you need to
understand, improve or protect.
Where to reach us
Alchemy Security
📞 1300 792 870
🔗 Linkedin: Alchemy Security Consulting
🏢 30 Pirie St, Adelaide, South Australia 5000
What happens next
Our team reviews your enquiry and follows up to clarify your objectives, timing and technical requirements. Where an engagement is appropriate, we define the scope and proposed next steps with you.
Not sure where to start?
Tell us the problem you need to solve and the outcome you want. We will help you identify the right next step.
Email our team
Planning a penetration test?
Have a defined assessment in mind? Use our dedicated scoping form to share the testing requirements.
Scope a penetration test
Suspect a security incident?
Use our incident support route for contact information and next steps. Keep sensitive technical evidence out of the general enquiry form.
Request incident support
Frequently Asked Questions
What does a CREST Certified engagement mean for my organisation?
A CREST Certified engagement gives your organisation assurance that the security testing is performed by accredited professionals who meet rigorous international standards for technical capability, ethical conduct, and quality control. For Australian organisations, this means your assessment aligns with the same frameworks trusted by defence, critical infrastructure, and government sectors, ensuring that findings are credible, repeatable, and defensible during audits or compliance reviews.
It also means your leadership can rely on a validated methodology rather than ad‑hoc testing, reducing organisational risk and strengthening your overall security posture.
How long does a penetration test typically take?
A penetration test timeline varies depending on scope, complexity, and the number of systems involved. For most Australian businesses, a standard engagement runs between one and three weeks, including scoping, active testing, analysis, and reporting.
Larger environments—such as multi‑site networks, OT/ICS environments, or cloud‑heavy deployments—may require extended testing windows to ensure full coverage without disrupting operations.
What sectors do you work with?
We support a broad range of Australian industries, including critical infrastructure, defence supply chain, local government, education, healthcare, financial services, manufacturing, and high‑growth technology companies.
Our team is accustomed to environments with strict compliance requirements, operational constraints, and privacy expectations, allowing us to tailor engagements to each sector’s regulatory and operational realities.
What do we receive at the end of an engagement?
At completion, you receive a comprehensive security assessment report detailing vulnerabilities, exploitation evidence, business impact, and prioritised remediation guidance. We also provide an executive summary suitable for boards and auditors, along with a technical appendix for your internal teams.
Most organisations also opt for a read‑out session where we walk through findings, answer questions, and map remediation steps to your operational environment.
Do you offer ongoing managed services as well as one-off assessments?
Yes—alongside one‑off penetration tests, we provide ongoing managed security services such as continuous vulnerability monitoring, attack‑surface management, phishing simulation, and periodic retesting to validate remediation.
This hybrid model is popular with Australian organisations that want predictable security oversight without building a full internal security team.