Liverton Security wins CREST ANZ member company status

Liverton Security has become a CREST ANZ Member Company, placing the Wellington-based cyber security firm among a limited group of approved providers in Australia and New Zealand.

CREST ANZ membership is awarded to information security testing companies that meet requirements covering technical work, governance, methodologies and ethical conduct. Approved companies are also subject to ongoing review.

The recognition adds to Liverton Security's ISO 27001 certification and marks another external validation of its information security management and testing practice. The company provides cyber security consulting, penetration testing, secure communications tools and specialist security products.

Founded more than 20 years ago, the business operates from Wellington and London and serves clients in New Zealand, the UK and other markets. Its products include SHIFT, MailAdviser, SEEMail, SmartGate and DNS services.

Richard Bourne, Chief Executive Officer of Liverton Security, described the move as an important step for the company.

"Becoming a CREST ANZ Member Company is an important milestone for Liverton Security. It reflects the strength of our technical capability, the professionalism of our people, and our commitment to delivering trusted, high-quality security services for our clients. Our customers rely on us to test, advise, and protect with independence and care, and this recognition provides another clear signal that we operate to a recognised industry standard," Bourne said.

The accreditation matters in a market where buyers of cyber security services increasingly seek independent markers when selecting testing providers. CREST ANZ says approved member companies are expected to operate under professional standards that can give customers greater assurance when procuring penetration testing, security consulting and cyber assurance work.

Murray Wills, General Manager of Sales and Consulting at Liverton Security, linked the membership to procurement and governance decisions within client organisations.

"Clients need confidence that their information security testing providers are capable, ethical, and consistent in the quality of service they deliver. CREST ANZ membership reinforces Liverton Security's position as a trusted provider for organisations seeking robust, practical, and independent security assurance. We are now one of only a few suppliers to achieve this recognition, and that gives boards, executives, and procurement teams a stronger basis for choosing a testing partner," Wills said.

Industry scrutiny

The approval process for CREST ANZ member companies examines a firm's skills, tools, testing methods and governance arrangements. It is designed to distinguish providers that can demonstrate a consistent approach to security testing as demand grows for external assurance over cyber risk.

That demand has grown as organisations face pressure from boards, regulators and customers to show that security assessments are carried out by firms with recognised standards and formal oversight. In that context, third-party certifications have become part of how buyers compare suppliers, particularly for work involving sensitive systems and data.

Wills said clients want evidence that service providers can follow established methods and explain risks clearly.

"Cyber security assurance is no longer a tick-box exercise. Organisations want evidence that their suppliers follow proven methodologies, maintain high standards of conduct, and can explain complex risks in a way that supports better decisions. This milestone strengthens the trust our clients already place in Liverton Security and reflects the maturity of our consulting and testing practice," he said.

Broader position

The new status supports a business that spans advisory work, testing and product development. Liverton Security has positioned itself around secure communications, information handling and cyber risk reduction for organisations managing sensitive material.

Its longstanding presence in Wellington and London points to an international footprint, although the CREST ANZ recognition applies specifically to the Australia and New Zealand market. For customers in that region, the approval may carry weight when drawing up supplier panels or evaluating bids for cyber security work.

Bourne said the accreditation was intended to show that the company had put its processes through external examination.

"This is about more than accreditation. It is about accountability. CREST ANZ membership confirms that we have subjected our processes and capabilities to independent review, and that we continue to invest in the standards, people, and practices needed to protect our clients in a fast-changing threat environment," he said.

He also pointed to the internal effect on staff involved in audits, assessments and client work.

"We are proud of the team effort behind this recognition. Every audit, assessment, and client engagement is an opportunity to demonstrate the standards we stand for. CREST ANZ membership gives our people further confidence that the work they do every day is aligned with recognised best practice," Bourne said.