Triskele Labs
Triskele Labs is a founder-led Australian cybersecurity firm, operating since 2014 with a team of over 40 specialists. The company's service portfolio is built on four core technical domains: managed detection and response (MDR), digital forensics and incident response (DFIR), offensive security, and governance, risk and compliance (GRC). This structure suggests a model designed to cover the attack lifecycle - from simulating threats and hardening posture, through to real-time monitoring and post-breach investigation. At the centre of its detection capabilities is a sovereign, 24/7/365 Security Operations Centre. The SOC holds both ISO27001:2022 and ISO20000 certifications, with all data retention handled onshore in Australia. This onshore, certified posture is a specific response to the data sovereignty and compliance requirements of its client base, which operates across financial services, healthcare, government, education, and critical infrastructure sectors. Geographically, the firm maintains a presence across four Australian cities - Melbourne, Sydney, Canberra, and Perth - alongside a footprint in the UK. The operational model pairs offensive testing teams (red teaming, penetration testing) with defensive and response units under one roof, a combination that implies direct feedback loops between simulated attack paths and detection engineering.
Triskele Labs is a founder-led Australian cybersecurity firm, operating since 2014 with a team of over 40 specialists. The company's service portfolio is built on four core technical domains: managed detection and response (MDR), digital forensics and incident response (DFIR), offensive security, and governance, risk and compliance (GRC). This structure suggests a model designed to cover the attack lifecycle - from simulating threats and hardening posture, through to real-time monitoring and post-breach investigation.
At the centre of its detection capabilities is a sovereign, 24/7/365 Security Operations Centre. The SOC holds both ISO27001:2022 and ISO20000 certifications, with all data retention handled onshore in Australia. This onshore, certified posture is a specific response to the data sovereignty and compliance requirements of its client base, which operates across financial services, healthcare, government, education, and critical infrastructure sectors.
Geographically, the firm maintains a presence across four Australian cities - Melbourne, Sydney, Canberra, and Perth - alongside a footprint in the UK. The operational model pairs offensive testing teams (red teaming, penetration testing) with defensive and response units under one roof, a combination that implies direct feedback loops between simulated attack paths and detection engineering.