Security you can verify. Trust you can build on.

See how Blacklock protects customer data and maintains a strong security posture through independently recognised certifications, robust security controls and industry-leading practices.

Founded in 2021

Blacklock.io is a cybersecurity platform focused on continuous vulnerability management, penetration testing, and security assurance. We combine automated security testing with expert-led penetration testing to help organisations identify, prioritise, and remediate vulnerabilities across their digital environments.

Our security approach goes beyond point-in-time assessments. Blacklock continuously scans applications, APIs, infrastructure, source code, and exposed assets, helping security teams maintain visibility as their environments evolve.

Our Trust Center provides visibility into our security practices, compliance commitments, data protection measures, and approach to risk management. For more information, please review our Privacy Policy and Terms of Service.

Contact Us
Become a Partner
Overview
Compliances
Trusted by
AI Posture
Controls
Subprocessors
FAQ
Your Data

Compliances

Details
ISO 27001
Certified
CREST
Certified
NZ Government Marketplace
Listed
OWASP Tools
Listed
AWS Marketplace
Listed
Microsoft Marketplace
Listed

Trusted by

Details
Vanta
Innovadores
Makinsights
Equipo de ciberseguridad

AI Security Posture

Details
AI Security Approach

Human-led + AI-assisted

AI Validation

Agentic AI

Human Oversight

Yes

Customer Data for AI Training

Not used for model training

Controls

Details
Access Control
User Access Management
Role-Based Access Control
Authentication
Data Security & Privacy
Data Protection
Data Encryption

FAQ

Details
What security certifications and accreditations does Blacklock hold?

Blacklock is ISO 27001:2022 certified and CREST accredited, demonstrating our commitment to recognised information security and penetration testing standards.

How does Blacklock protect customer data?

Blacklock implements encryption, access controls, secure cloud infrastructure, and established security practices to protect customer information from unauthorised access.

Where is Blacklock's customer data hosted?

Blacklock hosts its production platform and customer data on AWS infrastructure in Sydney, Australia, with appropriate security controls.

Does Blacklock conduct regular security assessments?

Yes. Blacklock performs regular vulnerability assessments, penetration testing, and security reviews to identify risks and strengthen its security posture.

Where can I access Blacklock's security and compliance documentation?

Our Trust Center provides information about certifications, accreditations, security practices, compliance commitments, and relevant policies for customer assurance.

Your Data

Details
Want to access or manage your data?

Submit a request to access, correct, or delete your personal data, and our team will review your request.

Raise a request

Compliances (2)

Explore Blacklock’s industry-recognised certifications, professional accreditations, and government marketplace listings, demonstrating our commitment to security, trust, and industry standards.

ISO 27001
Certified

Blacklock has achieved ISO 27001:2022 certification, demonstrating its commitment to information security, risk management, and continuous improvement.

CREST
Certified

Blacklock is CREST-certified for penetration testing, demonstrating our commitment to rigorous security testing, industry best practices, and trusted cybersecurity assurance.

NZ Government Marketplace
Listed

Blacklock is an approved supplier on the New Zealand Government Pae Hokohoko Marketplace, providing trusted source code, application review, and technical testing services.

OWASP Tools
Listed

Blacklock is listed in OWASP’s Vulnerability Scanning Tools directory, recognising its availability as a commercial web application security scanning solution.

AWS Marketplace
Listed

Blacklock is listed on AWS Marketplace, enabling organisations to discover, procure, and deploy our cybersecurity services through AWS's trusted platform.

Microsoft Marketplace
Listed

Blacklock is listed on Microsoft Marketplace, offering organisations access to CREST-accredited penetration testing, continuous vulnerability assessments, and AI-driven vulnerability validation.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Trusted by (250+)

See why organisations trust Blacklock for continuous vulnerability management, penetration testing, and security assurance.

Revolution InfoSec
Decoded.digital
Propagador
CANDA
Experieco
Logical IT
Mclarens
CyberGrape
Soluciones tecnológicas
Gorilla Technologies
Parallo
Crayón
Prestige IT
OptimaTech Limited
Siglas TI
Securecom
Wavelink
Equipo de ciberseguridad
Makinsights
Innovadores
Vanta

AI Security Posture

Blacklock uses AI to strengthen security testing, vulnerability validation, and remediation while keeping security decisions under human control.

AI Security

Overview

AI Security Approach

Human-led + AI-assisted

AI Validation

Agentic AI

Human Oversight

Yes

Customer Data for AI Training

Not used for model training

Data Retention

Contract-based

Core Principles
Security First

AI supports security decisions, not replaces them.

Blacklock uses AI to accelerate vulnerability analysis, validation, and remediation while maintaining security controls and human oversight throughout the process. AI-generated results are treated as security inputs that can be reviewed and acted upon by security teams.

Human Oversight

Humans remain in control.

Blacklock's AI capabilities are designed to assist security professionals rather than make uncontrolled security decisions. Security teams can review findings, assess risk, determine remediation actions, and manage the final outcome.

Evidence-Based Validation

Validate risk before you act.

Blacklock's Agentic AI validation engine helps verify reported vulnerabilities by safely simulating exploit paths and validating whether a finding represents a genuine security risk. This helps security teams reduce false positives and focus remediation efforts on issues that matter.

AI Models
GPT-4o

OpenAI

Access:
API
Use case:

Remediation code snippets for a vulnerability

Model details
GPT-4o

OpenAI

Access:
API
Use case:

2 Describe a software license for software bill of materials

Model details
GPT-4o

OpenAI

Access:
API
Use case:

Package Categorisation

Model details
GPT-4o

Azure_openai

Access:
API
Use case:

Agentic AI vulnerability validation

Model details
Llama-4-Maverick-17B-128E-Instruct-FP8

Meta

Access:
API
Use case:

CVSS 4.0 lookup

Model details
Llama-4-Maverick-17B-128E-Instruct-FP8

Meta

Access:
API
Use case:

Vulnerability kill chain analysis and mapping

Model details
Llama-4-Maverick-17B-128E-Instruct-FP8

Meta

Access:
API
Use case:

Vulnerability validation command

Model details
Llama-4-Maverick-17B-128E-Instruct-FP8

Meta

Access:
API
Use case:

Vulnerability remediation prioritisation

Model details
Llama-4-Maverick-17B-128E-Instruct-FP8

Meta

Access:
API
Use case:

Remediation guidance per SAST finding

Model details
AI Models & Providers
Security Data
AI Processing
AI Subprocessors
Security Data

Blacklock processes security information required to deliver vulnerability scanning, penetration testing, validation, reporting, and remediation capabilities.

Retention: Contract-based / applicable retention requirements

Security Data

Blacklock processes security information required to deliver vulnerability scanning, penetration testing, validation, reporting, and remediation capabilities.

Retention: Contract-based / applicable retention requirements

Security Data

Blacklock processes security information required to deliver vulnerability scanning, penetration testing, validation, reporting, and remediation capabilities.

Retention: Contract-based / applicable retention requirements

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Controls

Here are the security controls implemented at Blacklock to protect customer data, secure our platform, and support our ongoing security and compliance program.

Access Control
User Access Management

Access to Blacklock systems and customer information is granted based on business requirements and the principle of least privilege. Access is limited to authorised personnel whose responsibilities require it.

Role-Based Access Control

Access permissions are assigned according to defined roles and responsibilities. Privileged access is restricted and reviewed periodically.

Authentication

Access to internal and production systems requires appropriate authentication controls. Multi-factor authentication is used for systems and accounts where supported.

Data Security & Privacy
Data Protection

Blacklock implements technical and organisational safeguards to protect customer and company information against unauthorised access, alteration, disclosure, or destruction.

Data Encryption

Data is protected using encryption mechanisms appropriate to the sensitivity of the information and the system in which it is stored or transmitted.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Subprocessors

Here are some frequently asked questions about Blacklock's security posture, testing practices, and approach to protecting customer information.

Google Workspace
IAM Providers
Sentry
Analytics
AWS
IT Infrastructure
Azure
IT Infrastructure
Microsoft Teams
Collaboration & Productivity
Stripe
Payment Processing
Slack
Team Communications
Asana
Product Management & Ticketing
Open AI
Artificial Intelligence
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

FAQ

Here are the security controls implemented at Blacklock to protect customer data, secure our platform, and support our ongoing security and compliance program.

What security certifications and accreditations does Blacklock hold?

Blacklock is ISO 27001:2022 certified and CREST accredited, demonstrating our commitment to recognised information security and penetration testing standards.

How does Blacklock protect customer data?

Blacklock implements encryption, access controls, secure cloud infrastructure, and established security practices to protect customer information from unauthorised access.

Where is Blacklock's customer data hosted?

Blacklock hosts its production platform and customer data on AWS infrastructure in Sydney, Australia, with appropriate security controls.

Does Blacklock conduct regular security assessments?

Yes. Blacklock performs regular vulnerability assessments, penetration testing, and security reviews to identify risks and strengthen its security posture.

Where can I access Blacklock's security and compliance documentation?

Our Trust Center provides information about certifications, accreditations, security practices, compliance commitments, and relevant policies for customer assurance.

Your Data

Please provide details about your data rights request. Let us know what action you'd like us to take, such as accessing, correcting, or deleting your personal data.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Awards & Recognition

Create your own Trust Center
Copyright © 2025. All rights reserved
Derechos de autor © 2025. Todos los derechos reservados | Este sitio está creado con ❤️ por Blacklock Security Ltd.
Cookies
Trust Center
Privacy Policy
Terms of Use
Data Security Policy

¡Antes de que te vayas!

¿Quieres obtener una prueba gratuita?
Sí, lo intentaré.
No, solo estoy navegando.
Vamos a conectarnos para iniciar una conversación.
Gracias por su interés. Nos pondremos en contacto con usted en un plazo de 24 horas.
¡Uy! Algo salió mal al enviar el formulario.
Modal Close Icon
Haciendo clic «Aceptar todas las cookies», acepta el almacenamiento de cookies en su dispositivo para mejorar la navegación del sitio, analizar el uso del sitio y ayudar en nuestras iniciativas de marketing. Vea nuestro Política de privacidad para obtener más información.
PreferenciasDenegarAceptar