Perth cyber security · Protecting websites since 2008
Cyber security for Australian businesses and organisations
Cyberstore secures websites, email and organisations for Perth and Australian businesses, law firms, not-for-profits and industry. We fix the basics that stop most attacks, and you can always get one of us on the phone.
Organisations Noah and the team have built, secured and supported
// Where breaches start
Where most attacks on small organisations start
Most attacks on small and medium organisations start in one of four places: an out-of-date website, an email domain anyone can impersonate, a login without MFA, or AI tools and connected systems nobody has checked.
Who is Cyberstore?
Cyberstore is a Perth cyber security consultancy founded by Noah Greenstone and part of Joomstore Digital. We secure and maintain websites and web applications, repair hacked sites, lock down email with SPF, DKIM and DMARC, assess organisations against the Essential Eight and run vulnerability scans. For office networks and devices, we work with Australian IT partners.
Your website
Out-of-date CMS software and plugins are the most common way small business websites are breached. Automated scanners usually find them within hours of a vulnerability being published.
Your email
Spoofed domains and compromised mailboxes drive invoice fraud and business email compromise, the costliest scams we see.
Your logins
Reused passwords and admin accounts without multi-factor authentication turn one phishing click into a full takeover.
Your AI
Your AI tools and connected systems need to be secure too. We check for data leaks, outdated software, vulnerable API connections and security risks between the platforms your business relies on.
// Services
What we do
Start with one service or combine them. Everything is scoped, priced and explained before work begins.
Website Security & Maintenance
Hardening, daily vulnerability monitoring, tested updates and verified backups for WordPress, Joomla and custom sites.
Hacked Website Repair
Fast investigation, malware and backdoor removal, recovery and hardening so the same hack cannot happen twice.
Cyber Incident Response
Contain, investigate and recover from breaches, ransomware and email compromise, and meet your reporting obligations.
Cyber Security Consulting
Independent risk assessments, compliance, incident readiness and security leadership without a full-time hire.
Essential Eight Assessment
Evidence-based maturity scores across all eight strategies, a risk register and a practical roadmap to your target level.
Vulnerability Scanning & Pen Testing
Find weaknesses before attackers do: external scans, web application testing and penetration tests with fixes and retests.
Email Security & DMARC
SPF, DKIM and enforced DMARC, Microsoft 365 hardening and payment fraud awareness to stop spoofing and invoice scams.
Cyber Insurance Readiness
Answer insurer questionnaires accurately, close gaps before renewal and keep evidence that holds up at claim time.
AI Custom Tools & Agents
Are you drowning in admin?
We build secure AI tools and automations that connect the systems you already use, cut down repetitive work and make everyday processes easier.
Whether you need a custom workflow, a better link between two platforms or an AI agent to handle routine tasks, we can help your team get more done in less time, without opening new security gaps along the way.
// The numbers
The latest Australian figures
The latest figures from the Australian Signals Directorate show the cost and frequency of attacks on Australian organisations still rising.
84,700+
Cybercrime reports to ASD in 2024-25
Every 6 min
A cybercrime is reported in Australia
$56,600
Average self-reported cost per small business report, up 14%
1,200+
Cyber security incidents ASD responded to, up 11%
Source: Australian Signals Directorate Annual Cyber Threat Report 2024-25.
// Why Cyberstore
Why clients use us
30+ years of digital and security experience
Noah Greenstone has worked in digital technology and business systems for more than 30 years, and has been securing and repairing business websites since 2008. That background means practical advice that helps Australian organisations protect their systems and make better use of their technology.
We look at the website and email too
Most IT providers look after laptops and servers. Few look properly at the website, the CMS and the email domain. That is where we began in 2008, and it is still where most small business breaches begin.
We build websites as well as secure them
We have built, maintained and repaired websites and web applications since 2008. When a scan finds a problem, we understand the code well enough to fix it properly.
Independent advice
We do not resell a product stack or lock you into contracts. We will tell you what to fix first, what can wait and what is not worth spending money on.
Partnered for the whole picture
For office networks, devices and Microsoft 365 we work with trusted Australian IT and MSP partners, so you are not juggling providers.
Plain-English reporting
Every engagement ends with clear findings, risk ratings and a one-page summary your board, insurer or managing partner can read and act on.
Local support in Perth
When something goes wrong you call 1300 566 652 and talk to someone who knows your systems. We are based in Leederville.
// How it works
How we work
- 01
Talk
A no-obligation consult about what you run, what worries you and what your insurer, clients or board are asking for.
- 02
Assess
An Essential Eight assessment or vulnerability scan, depending on where you are starting from.
- 03
Fix
We prioritise by real risk and fix what we find, working with your IT provider where that makes sense.
- 04
Protect
Ongoing monitoring, patching, backups and email security, so the fixes stay fixed.
- 05
Prove
Reports and evidence for insurers, tenders, auditors and boards, refreshed as things change.
// Industries
Industries we work with
Client confidentiality, donor trust, operational uptime and growing teams each need a different approach. We know these sectors well because we have worked with them for years.
Law Firms
Protect client confidentiality and trust funds from email compromise, payment redirection and data breaches.
Not-for-Profits & NGOs
Protect donor and member data, secure donation platforms and manage volunteer access on a realistic budget.
Mining, Construction & Industrial
Secure B2B portals and procurement, stop invoice fraud and answer the security questionnaires that win major contracts.
Growing SMEs
Running a growing business with five or more staff?
We help you connect your systems securely, cut repetitive admin and improve the way work gets done, so your team spends less time on routine tasks.
// Free tool
How exposed is your organisation?
Answer 12 quick questions about your website, email, logins, backups and planning. You will get a score, your biggest gaps and what to fix first. Nothing is sent anywhere unless you choose to.
Start the self-check- Website and CMS patching
- Email spoofing protection
- Multi-factor authentication
- Backups and restore testing
- Staff awareness and incident planning
- Cyber insurance readiness
// Reviews
What clients say about Noah and the team
★★★★★
“They have provided secure and reliable hosting. John and Noah are our support people for creative content, highly recommend.”
Christine Johnstone
President, Soroptimist International
★★★★★
“We started working with Joomstore in 2016 and now, 10 years later, are still working on ongoing and new projects with the team. They are reliable, available, responsive and knowledgeable.”
Penny Waterson
MND NSW
★★★★★
“Noah helped me with my domain and email issues after transferring from one provider to another and saved me a massive headache. He spent almost two hours of his Friday afternoon and was so determined to sort it out.”
Poojan Gorasiya
Small business owner
★★★★★
“An extraordinary team who have given exceptional service to the company for which I worked on website and social media roles. Cannot thank them enough for their fast and efficient help over many years.”
Joan Clements
Billings.LIFE
★★★★★
“The requirements were very specific and complex. Noah and John worked diligently to ensure our specifications were met. The end result was fantastic and a key driver of our business success.”
Admiral TK
tk
★★★★★
“Noah is an absolute wealth of knowledge. He understands business needs well, highly highly recommend!”
Anish Ambekar
Advice 360 Financial Planning
Google reviews of Noah’s work at Joomstore Digital, Cyberstore’s parent company.
// Case studies
Clients who have stayed with us for years
Many of our clients have trusted us with their websites and systems for close to a decade.
MND NSW
Inherited legacy sites with security issues, stabilised and secured across five platforms over ten years.
Integrated Industrial
A 200,000-product B2B platform with client logins, per-client pricing and punch-out integration, with security built in from the start.
Clifton Legal Group
Nearly a decade of continuous security monitoring, maintenance and updates for a growing Perth law firm.
// FAQ
Cyber security questions Perth businesses ask us
How much does cyber security cost for a small business in Perth?
It depends on what you need protected. Our first consult is no-obligation. Website security and maintenance plans start at $497 a month, a one-off backup, update and test service is $479, a cyber security baseline assessment starts at $1,500 plus GST, and ongoing consulting and monitoring starts at $789 a month plus setup. We quote fixed scopes before any work starts.
We are a small business. Are we really a target?
Yes. Most attacks are automated and look for weaknesses, not company names. An out-of-date plugin, a mailbox without multi-factor authentication or a spoofable email domain is found by bots within hours. The Australian Signals Directorate received over 84,700 cybercrime reports in 2024-25, and the average self-reported cost for a small business was $56,600.
Is the Essential Eight mandatory for my business?
The Essential Eight is mandatory for Australian Government (non-corporate Commonwealth) entities, not for private businesses. It is still the most practical baseline for Australian organisations, and insurers, government buyers and larger customers increasingly ask about it. We assess where you are and help you reach the maturity level that fits your risk.
What should I do if my website has been hacked?
Do not delete files or restore an old backup straight away, because that can destroy evidence and leave the backdoor in place. Change your hosting and admin passwords from a clean device, note what you are seeing and when it started, then call us on 1300 566 652. We investigate, clean, close the entry point and harden the site so it does not happen again.
Do you replace our IT provider?
No. We focus on websites, email security, assessments and security advice, and we work alongside your existing IT provider or managed service provider. If you do not have one, we partner with trusted Australian IT and MSP firms for office networks, devices and Microsoft 365.
What is DMARC and do we need it?
DMARC is a DNS record that tells receiving mail servers what to do with email that pretends to come from your domain. Combined with SPF and DKIM, it stops criminals sending convincing fake invoices in your name, and Google, Yahoo and Microsoft now expect it from bulk senders. Almost every organisation that sends email should have it, and it should end at a policy that blocks spoofing.
Do we have to report a data breach?
If your organisation is covered by the Privacy Act (generally annual turnover over $3 million, plus some smaller businesses such as health service providers), you must notify the OAIC and affected people about an eligible data breach that is likely to cause serious harm. Businesses with turnover over $3 million must also report ransomware payments to the Australian Signals Directorate within 72 hours. We help you work out what applies and what to do next.
Can you help with our cyber insurance questionnaire?
Yes. Insurers commonly ask about multi-factor authentication, patching, backups, email security and incident response plans. We check what is in place, fix gaps before renewal, and give you evidence you can stand behind, so your answers are accurate and your policy is less likely to be disputed after a claim.
// Get in touch
Get in touch
Tell us what you are worried about. We will reply within one business day and, if it helps, send you a fixed-price quote.
- No-obligation first consult
- Fixed scopes and pricing before work starts
- Clear written findings
- Works alongside your existing IT provider
Written and reviewed by Noah Greenstone, Founder and Principal Consultant. Last reviewed 22 October 2026.
Tell us what is going on
We read every enquiry and reply within one business day. If it is urgent, call 1300 566 652.