Check exposure
Use a no-signup check for a quick signal, or explore the protected scanning path for a scoped assessment.
SOC advisory for New Zealand & Australia
Make your SOC easier to run and easier to defend.
Yefosec helps security teams improve triage, detection, automation controls and governance, then turns the work into evidence and a roadmap people can own.
Remote-first delivery. No sales call required. Written scope before work begins.
Choose your next step
Start with the outcome, not the technology.
Improve operations
Make SOC decisions repeatable, measure quality and connect findings to the teams responsible for improvement.
Govern risk and delivery
Keep risk, control evidence, leadership decisions and roadmap ownership connected between formal reviews.
Security coverage Explore 13 operational domains and the evidence expected for each control.Learning labs Practice assessment, triage and validation decisions in your browser.Agent roles Browse 46 bounded specialist prompts with clear outputs and handoffs.Example deliverables Inspect synthetic investigation, governance and roadmap artifacts.Insights Read practical guidance grounded in official sources and operating reality.
Advisory services
Focused work with a concrete outcome.
Choose a readiness baseline, one bounded pilot, or an assurance cadence. Scope, authority and evidence are agreed before work starts. Prices are indicative, in NZD and exclude GST.
SOC operating-model readiness assessment
Recommended startA focused baseline of people, workflow, telemetry, controls and evidence, ending in an owned 30/60/90-day improvement plan.
from NZ$2,500
Bounded Agentic SOC pilot
One supervised triage or investigation workflow, measured against a matched baseline with explicit stop conditions and no autonomous consequential action.
scoped proposal
Ongoing assurance and governance review
A recurring review of evaluation evidence, drift, exceptions, accountable decisions and the controls that bound automation.
from NZ$1,500
How it works
Simple scope, useful evidence, owned next steps.
Delivery is email-led and designed to leave a clear decision trail, not a dependency on another tool or recurring meeting.
See example deliverables- 01Share the problemEmail a short note about the workflow, risk or operating issue you want to improve.
- 02Confirm the scopeYefosec confirms access, fees, boundaries and deliverables in writing before work starts.
- 03Review the evidenceRelevant workflows, telemetry, controls and obligations are assessed against the agreed outcome.
- 04Own the roadmapYou receive prioritised findings, decisions, evidence expectations and named next steps.
Evidence mapping
Ground the work in obligations that apply.
- Essential Eight
- ASD Information Security Manual
- APRA CPS 230 & CPS 234
- Security of Critical Infrastructure Act
- NZISM
- NZ Privacy Act 2020
- AU Privacy Act & NDB scheme
- NZ Protective Security Requirements
Operational evidence mapping is not legal advice, certification or regulator approval.
Why Yefosec
Clear boundaries from enquiry to handover.
Independent, remote-first advisory for NZ and AU teams
Evidence-led reviews with explicit scope and boundaries
Tool-agnostic recommendations tied to owned decisions
Written scope, fees and deliverables before work starts
FAQ
Common questions.
Do you work remotely across New Zealand and Australia?
Yes. Delivery is remote-first, with email-based collaboration and written deliverables.
Are you tied to specific security tools?
No. The work starts with operating discipline, evidence and the decisions your team needs to make. Tooling recommendations follow only when they support that outcome.
Which frameworks can you map evidence to?
Common scopes include the Essential Eight, NZISM, APRA CPS 230 and CPS 234, privacy obligations and critical-infrastructure requirements. The engagement starts with the obligations that actually apply to your organisation.
How do engagements start and how are fees set?
Start by email. Scope, fees, data handling and deliverables are confirmed in a written proposal before work begins. Indicative prices are in NZD and exclude GST.
Contact
Discuss the problem you need to solve.
A short email is enough. Include the current workflow, the main pain point and what a useful outcome would look like.
Typical response within 1-2 business days.