A boutique Australian cybersecurity firm, senior-led and built to hand control back to you.
"After two decades of long tenders and longer sales cycles, I wanted to put that experience where it actually mattered, and to do it with someone I trusted beside me."
Shaun spent more than twenty years inside government, defence and billion-dollar enterprises. The problems were real and the stakes were high, but too often the work that mattered got buried under procurement: tenders that ran for years and sales cycles that never seemed to end.
He wanted to spend that experience where it would actually land, with the growing organisations that carry genuine cyber risk but have no dedicated CISO and no clear plan. Solving those problems in plain language, at a pace a business can feel, is the part of the work he has always loved.
He also knew it would be done better with the right person beside him. David brings the project discipline of large-scale infrastructure across health, defence and government, and the rarer skill of making customers feel genuinely looked after while the work gets delivered. Shaun makes sure Cornerstone is designed correctly. David makes sure it is experienced well.
That is the firm we built: senior-led, project-based and outcome-focused. We design, build, integrate and hand over, so you stay in control of your environment, not locked into another long-term dependency.
Shaun brings more than two decades across IT, cybersecurity and enterprise architecture, the kind of large-scale experience rarely found in mid-market consulting. He has designed and delivered security strategies for government, defence and billion-dollar enterprises. His strength is translating complex security requirements into clear, scalable solutions that fit real business constraints.
Connect on LinkedIn
David's career began in large-scale infrastructure projects across health, defence, education and government, environments where precision, compliance and risk management are non-negotiable. He brings that same project discipline into cybersecurity: clear communication, structured delivery, rigorous planning, and systems that work right the first time.
Connect on LinkedInThrough practical, outcome-driven cybersecurity, not fear, jargon or lock-in.
Direct answers, no hedging.
Small and senior by design. Every engagement is led by an experienced practitioner, not handed to a junior. We grow the team deliberately so quality holds.
We have deep expertise across Microsoft, Netskope, CrowdStrike, Cyera, Mimecast and others, and we recommend what fits your business, not what pays the highest margin.
No. We design, build and hand over. You own what we build, the credentials and the choice to bring us back. We do not lock you in.
Australia. We work with clients across the country.
A broad mix of mid-market and enterprise clients. The pattern is consistent: business outcomes matter more than the framework, and an in-house team that wants to own what they run.
Book a short call through our contact page. No commitment, no scoping fee.
Cybersecurity shouldn't be chaotic.
It should be clear, owned and built to last. We design, build and hand over, then step back, because the goal is your confidence, not your dependency.