What we do
Ten cybersecurity services, one team. From risk assessments and managed monitoring to penetration testing and compliance — all delivered in plain English, with clear pricing and no overselling.
A clear, honest picture of your vulnerabilities — before someone else finds them. Follows NIST CSF 2.0 and NZISM.
24/7 threat detection and response while you focus on running your business.
We try to break into your systems before attackers do — using the same tools and techniques.
Most M365 tenants are misconfigured. We find and fix the gaps in 2–3 business days.
The cloud isn't secure by default. We review your AWS, Azure, or GCP environment and make it so.
82% of breaches involve a human element (Verizon DBIR). We turn your team into your best line of defence.
When it goes wrong, speed is everything. We contain, investigate, and get you back operating fast.
Senior security leadership without the full-time hire — on a flexible, fractional basis.
17 frameworks across security, privacy, and AI. We'll tell you which one you actually need.
Your team is already using AI. We make sure it's not creating risk you don't know about.
Common Questions
What’s the difference between managed monitoring and a risk assessment?
A risk assessment is a point-in-time review — it tells you where your gaps are and what to fix. Managed monitoring is ongoing — it watches your environment 24/7 and responds when something goes wrong. Most businesses start with a risk assessment, then move to monitoring once the critical gaps are addressed.
Do I need a penetration test?
You likely need one if you handle sensitive customer data, have internet-facing systems, process payments, or if a client or insurer has asked for one. If you’re unsure, start with a risk assessment — it will tell you whether a pen test is the right next step for your business
How much does cybersecurity cost for a small NZ business?
Our managed security service starts from $399/month NZD (exc. GST) for small businesses. One-off services like risk assessments and penetration tests are scoped and priced per engagement. We always confirm pricing before any work begins — no surprises.
Which compliance framework does my business need?
It depends on your industry, size, and who you’re selling to. The NZ Privacy Act 2020 applies to almost every NZ business. NIST CSF 2.0 and Essential Eight are excellent baseline frameworks for most SMBs. ISO 27001 and SOC 2 open doors with enterprise and government clients. We’ll tell you honestly which ones are worth pursuing for where your business is right now.
Do we need an internal IT team to work with KIS?
No. Most of our clients don’t have an internal IT or security team — that’s exactly why they come to us. If you do have an IT provider or internal IT, we work alongside them. Either way, we communicate in plain English and never assume technical knowledge on your part.
Start here
A free 30-minute conversation. We’ll tell you honestly what your business needs — and what it doesn’t.