RIPOSTE · Australia

Cyber risk, managed like it matters.

RIPOSTE builds and operates its own cyber-risk systems — human-AI fusion, an analyst always in the loop. We don't defend your systems for you; we identify the threat that actually matters to you, expose the pathways it could use to reach you, and give you what you need to close them off. For those responsible for many organisations, and for each organisation defending its own.

Explore ForgeScore DarkSuite

adversary-informed — risk read from the attacker's sideresilience scoped to the threat that's real for you — never morehuman-AI fusion — AI at scale, human judgement where it countsintelligence-grade — calibrated likelihood on every assessmentthe working shown for every judgementauthorised, scoped, audited — never beyond the mandateour own systems — no rebadged scannersone shared intelligence behind them all — DarkRoseadversary-informed — risk read from the attacker's sideresilience scoped to the threat that's real for you — never morehuman-AI fusion — AI at scale, human judgement where it countsintelligence-grade — calibrated likelihood on every assessmentthe working shown for every judgementauthorised, scoped, audited — never beyond the mandateour own systems — no rebadged scannersone shared intelligence behind them all — DarkRose

Select your mission

Built by us. Run for you.

Not resold scanners, not rebadged reports — systems we designed, built and operate ourselves, each powered by the same intelligence, with the working to show for it.

ForgeScore

Portfolio cyber-risk intelligence

One intelligence-led risk score for every organisation you oversee — read from the outside and recalibrated as threat and risk trends emerge. See who is exposed, act where it counts, and measure improvement.

Explore →

DarkInsight

Web-facing security assessment

A thorough assessment of your internet-facing servers and apps — everything they expose, tested to the adversary tier we scope with you. With the grey-box clone we prove what's exploitable, apply the fix and re-run the attack to prove it's closed — no destructive test run against your live site.

Explore →Coming soon

DarkAnatomy

Attack-surface anatomy

Maps your whole environment — assets, systems and exposure, inside and out. The complete picture an attacker would build of you, so you can act on what you actually have.

Explore →Coming soon

DarkRapier

Mapped proof of impact

Our offensive security, for those who need more: every viable attack pathway mapped to ATT&CK and scoped for threat relevance — inert proof of impact, not a lucky way in. Authorised, human-gated, hard-scoped.

Explore →

DarkRose

Threat & risk intelligence fusion

The fusion of threat and risk intelligence that powers the suite — real threat activity brought together with your vulnerability profile, so you can tell whether a finding is a real risk in your organisation's context, not just that a port is open.

Explore →

GovernanceHub

Applied governance

Security derived from governance — scoped to your actual obligations. It works out what you genuinely need to consider, then turns vague policy into concrete action and the evidence you can stand behind.

Explore →

Two ways in

Who are you responsible for?

For portfolios

You watch over many.

You carry cyber risk across hundreds or thousands of organisations you don't control and can't see into — and you still have to measure it and manage your exposure. Regulators and peak bodies contending with sector-wide risk and compliance; enterprise risk managers exposed through their supply chains; insurers who need to know whether the risk they've taken on has been treated, or transferred to them raw. ForgeScore turns that blind spot into one living risk picture — who is exposed, who is improving, where to act next.

ForgeScore →

For your organisation

You defend your own.

Not every organisation needs to be resilient against nation-state actors — and knowing which threats are actually relevant to you is the difference between sound risk management and wasteful expenditure. DarkSuite scopes to what you genuinely need: securing a single web-facing asset, protecting sensitive data, or safeguarding the systems that keep your operations running — whether as risk management or a regulated requirement. Wherever you're starting from, we'll help you find what actually matters — and what to do first.

DarkSuite →

The intelligence workspace · ForgeScore

This is what intelligence-led looks like.

A live window into how RIPOSTE reads risk — ForgeScore's Intelligence Workspace, the same console our analysts work in. A whole portfolio at once: scores, risk bands, and the assessed risk clusters across the entire portfolio.

forgescore — intelligence workspace · all portfolios · … organisations

Portfolio ForgeScore0.0across … organisations

Risk-band distribution

BEC exposure distribution

Proven at scale · ForgeScore

A whole portfolio, measured in one pass.

Not a prototype. ForgeScore has assessed organisations across multiple continents and industry sectors, and runs a full portfolio in a single pass — thousands of organisations down to one, on one system, with no one asked to lift a finger.

Assessed to date

14,000+ organisations

across multiple continents and industry sectors.

Proven scale

10,000-org portfolios

run in a single pass — thousands down to one, on one system.

Zero participant burden

No one lifts a finger

Every organisation assessed from the outside — including the ones that would never return a survey.

Take control of your cyber risk.

Start the conversation — tell us who you are responsible for, and we will show you where you stand and how we partner to close the gap.

Start the conversation