Solution

Security & Risk.

Defend every layer. Trust nothing. Verify everything.

Zero Trust across the network, identity, endpoints, cloud and data, aligned to the ASD Essential Eight, and monitored around the clock. The goal is not that nothing ever gets in. It is that when something does, it does not become an outage.

Modern threats don't knock. They walk through gaps your team didn't know existed. Onel designs and implements layered security so the attacker hits friction at every step, not just the perimeter.

Most people arrive here via a referral. If that's you, here's who to call.

Book a security assessment 1300 609 101 →

Partner of the Year

HPE Hybrid IT Gold

2025

Recognition

CRN Fast 50

Five times · 2017–2025

Panel member

MAV · DPC

+ Procure Australasia

Framework

ASD Essential Eight

+ NIST CSF · ISO 27001 aligned

Vendor stack

Palo Alto · Fortinet

Microsoft · Zscaler · CrowdStrike

The threat landscape

The threats your organisation faces every day.

Phishing

Credential harvesting via email and fake login pages.

Ransomware

Encrypt-and-extort attacks targeting backups and file servers.

Identity attack

Compromised credentials and privilege escalation.

Web app attacks

SQL injection, XSS, API abuse against public apps.

Lateral movement

Attackers pivoting through flat networks after initial breach.

Data exfiltration

Sensitive data leaving via email, cloud apps, removable media.

Security domains

Seven domains. One coherent defence.

Defence in depth is an old idea that still holds: no single control is trusted to be the one that works. We design and run seven layers, from the perimeter through to detection, as one architecture rather than seven products bought separately.

Network & Perimeter Security

NGFW · SASE · Cloud firewall

Next-gen firewalls inspecting all traffic, at the edge and between internal zones. Application-layer inspection, IPS, TLS inspection, URL/DNS security, threat intelligence feeds. Part of the wider managed network services we design and run.

Palo Alto · Fortinet · Cisco · Zscaler

Microsegmentation

Stop lateral movement

Divide your network into isolated zones with enforced access controls between them. Even if an attacker gets in, they can't go anywhere. SD-Access, ISE, NSX, TrustSec.

Cisco SD-Access · ISE · VMware NSX

Web Application Firewall

OWASP Top 10 · DDoS · Bots

Block attacks before they reach your code. OWASP Top 10 protection, DDoS mitigation, bot management, API security, virtual patching of CVEs.

Azure WAF · Front Door · Prisma · FortiWeb

Email & Collaboration Security

Email is attack vector #1

Over 90% of cyberattacks start with email. Defender for Office 365 Safe Links + Safe Attachments, DMARC/DKIM/SPF, BEC detection, attack simulation.

Defender for O365 · Proofpoint · Mimecast

DLP & Data Security

Control where data goes

Discover sensitive data, classify it with sensitivity labels, and prevent it leaving via email, Teams, USB or cloud, automatically. Microsoft Purview at the core.

Purview · Endpoint DLP · MCAS · AIP

Endpoint & Systems

EDR · ASR · Essential Eight

Defender for Endpoint with EDR, automated investigation and response. Attack surface reduction, vulnerability management, privileged access, application allowlisting.

MDE · Intune · CrowdStrike · AppLocker

SIEM, XDR & Threat Detection

See everything. Respond fast.

Microsoft Sentinel · Defender XDR · KQL

Individual security tools generate alerts in isolation. A SIEM correlates signals from across your entire environment: network, endpoints, identity, email, cloud, to surface real threats and give your team the context to respond fast.

→Microsoft Sentinel SIEM/SOAR deployment
→MITRE ATT&CK-mapped detection rules
→200+ data connectors. Every Microsoft + 3rd party
→Automated response playbooks (SOAR)
→Defender XDR, unified investigation
→Optional managed SOC service

Security architecture

Zero Trust, the architecture that ties it all together.

Zero Trust is not something you can buy, whatever a vendor tells you. It is a set of assumptions: verify explicitly, give the least access that works, and design as though someone is already inside. Everything we build follows those.

Identity

Every access request authenticated and authorised: MFA, Conditional Access, PIM for users and admins.

Entra ID · MFA · PIM

Endpoints

Only compliant, managed devices gain access, posture checked at every connection attempt.

MDE · Intune · Autopilot

Network

Segmented, policy-enforced network: least-privilege access between zones, encrypted traffic, no implicit trust.

NGFW · Microseg · SASE

Applications

Applications sit behind a WAF, API controls and an access proxy rather than facing the internet themselves.

WAF · App Proxy · MCAS

Data

Sensitive data is classified and labelled so the controls know what they are protecting, with DLP watching the routes it could leave by.

Purview · DLP · AIP

Tying it all together

Across all five pillars, Microsoft Sentinel and Defender XDR provide unified visibility: correlating signals from identity, endpoints, network, applications and data into a single security operations platform. Onel can deploy, configure, tune and operate this platform as a fully managed security service, giving your organisation enterprise-grade security operations without building an in-house SOC.

Compliance & frameworks

Security built to meet your compliance obligations.

Every control we implement is mapped to the framework you answer to. Whether it's ASD Essential Eight, ISO 27001, IRAP, APRA CPS 234 or the Privacy Act. We'll show you exactly how each control supports your audit.

ASD Essential Eight - maturity

ASD E8

Application controlML3
Patch applicationsML3
Configure Office macro settingsML3
User application hardeningML2
Restrict administrative privilegesML3
Patch operating systemsML3
Multi-factor authenticationML3
Regular backupsML3

Essential Eight gap assessment & implementation - Onel typically targets ML2 or ML3 for government and regulated organisations, mapped control-by-control to your audit obligations.

Other frameworks we work to

Most clients answer to more than one of these. Onel maps controls across the whole portfolio so a single security investment satisfies multiple obligations.

ISO 27001 / 27002

ISMS, controls mapped across all Onel security services.

Privacy Act 2024

APPs + notifiable data breach scheme, DLP and Purview aligned.

PSPF

Protective Security Policy Framework, federal government & suppliers.

APRA CPS 234

Information security for APRA-regulated entities.

IRAP

Assessment support for Australian Government cloud.

SOC 2 Type II

Security, availability, confidentiality controls.

ISM

Australian Government Information Security Manual.

GDPR

EU personal data, DLP and governance aligned.

Technology partners

Authorised security partners. Independent advice.

Authorised partner status across the leading security vendors, so we recommend and implement what's right for your threat model, not what's easiest to sell.

Palo Alto Networks

NGFW · Prisma · Cortex XDR

Fortinet

FortiGate · FortiSASE · FortiWeb

Cisco

Firepower · ISE · Umbrella · SecureX

Microsoft Security

Defender XDR · Sentinel · Purview · Entra ID

Zscaler

ZIA · ZPA · Zero Trust Exchange

CrowdStrike

Falcon EDR · Threat Intelligence

Rubrik

Zero Trust Data Security · Radar

Proofpoint

Email Security · DMARC · Awareness

Mimecast

Secure Email Gateway · Impersonation

Snyk / SonarQube

AppSec · SAST · DAST · Dependency

Assessment findings

You get the report. Whatever you do next is your call.

A security assessment from Onel produces a written report with prioritised, plain-English findings and a remediation roadmap: yours to keep, share, or take to a different provider. We're confident in the work; we don't withhold it to force a follow-on contract. If you want the roadmap turned into a costed plan, that is our IT strategy consulting.

Read the FAQ →

FAQ

Questions we get before first call.

If your question isn't answered here, the fastest way to a clear answer is a 15-minute phone call. No sales pitch, no obligation.

1300 609 101 →

We're a Victorian council, what's the realistic Essential Eight target for us?

Maturity Level 2 is the realistic target for most councils today, with selective ML3 controls on the highest-risk systems (finance, customer data, planning records). ML3 across the board is rare in the public sector and rarely worth the operational cost. Onel maps your current posture against the eight controls and identifies the highest-impact moves first. More on how we work with local government.

If we already have Microsoft Defender, do we need anything else?

Defender covers endpoint, identity and email well when properly configured - but a lot of E5 deployments have controls disabled or alerts going to a mailbox nobody watches. Before recommending additional vendors, we audit what your existing Microsoft licensing already entitles you to and what's actually switched on. Often the highest-ROI move is configuring what you've already paid for.

What happens if we have an incident, do you have a SOC?

Onel runs managed security with 24/7 monitoring and incident response. For full SOC-as-a-service capability we partner with established Australian SOC providers and integrate them into your environment - so detection, triage and response are wired together. We're transparent about what's in-house versus partnered, in writing, before you sign. Out-of-hours escalation runs through our IT infrastructure support services.

Get started

Know your security gaps before attackers do.

Onel offers a structured security assessment covering your network, endpoints, identity, email, cloud and data protection posture, with a clear, prioritised remediation plan you keep regardless of what comes next.

Book a 60-minute review 1300 609 101