Skip to content
Cyphonica

Cyber security for NZ businesses

Audits, Copilot readiness and sovereign AI, delivered by builders who actually ship the software.

Cyphonica is the cyber security partner you bring in when peace of mind is non-negotiable. Independent, NZ-based, plain-English reports.

Get a quote See services

Trusted by NZ businesses across health, education, professional services and retail.

Headline service

Microsoft Copilot is going live in your tenant. Are you sure it can’t see what it shouldn’t?

Copilot inherits every permission your users already have across SharePoint, OneDrive, Teams and email. One forgotten anyone with the link share, one stale guest, one public Team that shouldn’t be public, and Copilot will surface it the moment someone asks the right question.

We sweep the tenant before you switch it on. Findings rated Critical to Low, standard fixes applied, written confirmation when we’re out. Fixed price from $2,500 + GST, report in your inbox next morning.

See the full scope →

What we do

Six services. Real scope. Real prices.

Headline service

Microsoft 365 & Copilot Readiness Assessment

Switch Copilot on without leaking what it shouldn't see.

Learn more →

Infrastructure

Infrastructure Vulnerability Assessment

Know exactly where your infrastructure is exposed, and what to fix first.

Learn more →

Web & application

Application & Website Security Review

Find the holes in your web app before someone else does.

Learn more →

Resilience

Data Protection & Offline Recovery

Ransomware-survivable backups, run on infrastructure you can actually trust.

Learn more →

Sovereign AI

Local & NZ-Hosted AI Deployments

Your AI. Your hardware (or ours, in NZ). Your data never leaves the country.

Learn more →

People-layer

Social Engineering & Phishing Simulation

Find out who clicks, before someone with bad intent does.

Learn more →
15+years building software
NZ-wideremote and on-site delivery
48-72htypical Copilot audit turnaround
0offshore data flow on local AI deployments

How we work

Five steps. No surprises.

  1. 01

    Scope

    Thirty-minute call. We figure out whether we can actually help.

  2. 02

    Access

    Read-only where possible. Time-boxed elevation when remediation needs it.

  3. 03

    Assess

    Manual validation, not auto-scan walls. Findings ranked by real risk.

  4. 04

    Report & fix

    Plain-English report. Standard fixes applied under the engagement.

  5. 05

    Verify

    Walkthrough call. Written confirmation that access is gone.

Tell us what is keeping you up at night.

Thirty minutes on a call. No pitch deck, no jargon. We will tell you whether we can help, and if we can't we will tell you who can.

Book a scoping call