Skip to content

Australia · Security & platform engineering

For CISOs, platform leads, and risk teams under a dated clock

Migration deadlines, regulator evidence, and data in Sydney or Melbourne

Elasticsearch 8.x EOL is dated. Essential Eight ML2 needs evidence, not slides. CPS 234 expects systematic testing your auditors can follow. We deliver all three — with production proof from regulated estates.

Sydney · ap-southeast-2Melbourne · ap-southeast-4AEST/AEDT overlap

Why teams are moving now

Deadlines driving Australian programmes


Start here

Four places to begin

Each tile is a commercial pillar with deep guides, interactive tools, and case proof. Pick the problem closest to your deadline.


Australian delivery architecture

Data residency designed end to end

Australian workloads can stay in ap-southeast-2 (Sydney) or ap-southeast-4 (Melbourne) end to end. Data does not leave the country.

Data plane

Primary storage, replicas, snapshots, queues and DR in ap-southeast-2 or ap-southeast-4.

Engineering access

Controlled administration paths, MFA, session logging, and limits on bulk export.

Privacy review

APP 8 cross-border disclosure assessed where logs may contain personal information.

Read the residency guide →

Measured outcomes

Migration and assurance work with numbers attached

Real programmes from regulated estates — not hypothetical benchmarks.

0detection rules lost
58%ingest cut pre-migration
12×faster search at scale
Tier-1 bank · Observability

End-of-life Elasticsearch migration

  • SSPL risk eliminated
  • 6-week dual-write window
  • Rollback rehearsed before cutover
Read case study →
Financial services · SIEM

Noise-first platform migration

  • SIEM spend halved
  • 0 coverage lost
  • Correlation rules preserved
Read case study →
Ecommerce · Search

OpenSearch catalogue cutover

  • 4.2s → 0.35s latency
  • 5M+ SKU catalogue
  • Zero-downtime cutover
Read case study →

Interactive tools

Classify your estate before you scope the programme

Tell us which path you are on, and we will scope week one in writing

Version audit, Essential Eight evidence map, or CPS 234 test universe. Send context by message or book a call. Either way you get dated risks and a rollback or retest path.

Elasticsearch EOL hub →

Common questions

Australia delivery: common questions

For platform, security and compliance leads scoping migration or assurance work.

Where is AiRAT based, and how do you work with Australian clients?

AiRAT is headquartered in Jaipur, India, with AEST/AEDT business-hours overlap. Engagements use controlled remote engineering access and architectures that keep production data in Australian Regions when required.

Can production data stay in Australia during a migration?

Yes. Source and target clusters, snapshots, replay queues, migration workers and DR can be constrained to ap-southeast-2 (Sydney) and ap-southeast-4 (Melbourne) when the design covers observability exports and support paths end to end.

What Essential Eight services does AiRAT provide?

Gap assessments, evidence-quality mapping, uplift engineering and retest packs mapped to ASD's current ML2 guidance, including tracking the 2026 Essentials transition. IRAP assessments are out of scope.

What CPS 234 work does AiRAT deliver?

Technical control testing, penetration testing, remediation engineering and evidence packs inside a systematic testing programme. Statutory audit and IRAP assurance remain with your appointed functions.

Should I message you or book a call?

Either works. Use the contact form to send your context asynchronously: stack versions, regulator deadline, residency requirements. Book a call if you prefer to talk through scope live. Both routes reach the same engineering team.

Get started

Leave your email - we'll reach out.

Share your work email and we'll follow up with a tailored note on security, AI, or data programmes - usually within one business day.

No spam. We only use your email to respond to this request.

Explore services →