Cythera
Australian managed detection and response provider built through PE-backed acquisitions.
Cythera is mid-roll-up in a market where a much larger rival just went inside Accenture, leaving its own PE owner racing to bolt on scale before that rival looks downward.
Cythera provides managed security services (24/7 monitoring and response) to mid-market companies in Australia. It's hard to differentiate because the work is similar across providers, and Accenture just bought a competitor (CyberCX) to expand in this exact space, plus AI tools like CrowdStrike's Charlotte and Microsoft Copilot are starting to automate the routine work that makes up much of Cythera's labor. The critical question is whether Cythera can successfully combine four Australian acquisitions it made between late 2024 and early 2026 into one strong business before Accenture decides to move downmarket and squeeze it out.
Cythera ships a proprietary Australian government threat-feed integration within 12 months. Would show Cythera building a defensible technical moat rather than relying on scale alone.
ctrl:cyber (Pemba-backed) announces further Australian MSSP acquisitions within a year. Would show a rival PE consolidator matching Bastion's roll-up pace for the same customers.
- Bastion Group headcount over 250 after four AU deals
- CyberCX sold to Accenture for A$1B+
- Cythera itself acquired for A$40M+
- Four Australian acquisitions integrated in just over a year under a new brand and MD.
- Accenture-backed CyberCX could move down-market into Cythera's mid-market segment.
- AI-driven SIEM/SOAR platforms may commoditize tier-1 monitoring services.
- No independently audited revenue or customer counts exist beyond vendor claims.
| Rival | Direction | Evidence |
|---|---|---|
| CyberCX (Accenture) | losing to | Accenture bought CyberCX for A$1B plus in Aug 2025, giving it far greater scale than Cythera |
| ctrl:cyber (Pemba Capital) | contesting | Pemba took a 50% stake in ctrl:cyber in Feb 2025, a parallel PE roll-up chasing the same mid-market |
| CrowdStrike Charlotte AI / Microsoft Copilot for Security | gaining on | AI-native SIEM/SOAR features risk automating tier-1 SOC monitoring Cythera resells |
- Who owns Cythera now?
- Cythera has been owned by New Zealand based Bastion Security Group since December 8, 2024, when Bastion (backed by Quadrant Private Equity) acquired it for a reported A$40 million plus. Founder Euan Prentice stayed materially invested and joined the Bastion board.
- Is Cythera profitable in 2026?
- No audited revenue or profit figures for Cythera are publicly available as of 2026. The clearest financial signal remains the A$40 million plus acquisition price paid by Bastion Security Group in December 2024, not a disclosed profit or loss statement.
- Who is Cythera's biggest competitor?
- CyberCX, Australia and New Zealand's largest pure-play cyber firm with about 1,400 staff, was acquired by Accenture for a reported A$1 billion plus in August 2025, making it a far larger incumbent now competing in Cythera's market.
- Could AI replace Cythera's security analysts?
- AI platforms like CrowdStrike Charlotte AI and Microsoft Copilot for Security can automate tier-1 SOC alert triage, which Cythera's own resold platforms increasingly do, but liability-bearing incident response and compliance work for regulated clients still requires human analysts as of 2026.
- Did Cythera raise venture capital?
- No public reporting shows Cythera raising a venture funding round. Its capital event was a full acquisition by Bastion Security Group in December 2024 for a reported A$40 million plus, backed by Quadrant Private Equity, not a traditional VC raise.
- How big is Cythera's parent company Bastion Security Group?
- Following the Cythera, Seamless Intelligence, Phronesis Security, and Astralas deals, Bastion Security Group's headcount rose to more than 250 cybersecurity professionals across six offices in Australia and New Zealand as of February 22, 2026.
- 2026-02-22Bastion acquired Astralas, its fourth Australian deal, lifting group headcount past 250
- 2026-01-26Jason Whyte appointed MD of Cythera Australia to unify acquired brands
- 2025-12-17Bastion merged with Melbourne consultancy Phronesis Security
- 2025-08-17Accenture acquired CyberCX for a reported A$1 billion plus
- 2025-08-06Bastion merged with Perth based Seamless Intelligence
- 2025-02-04Pemba Capital Partners took a 50% stake in rival ctrl:cyber
- 2024-12-08Bastion Security Group acquired Cythera for a reported A$40 million plus
- 2023-05Quadrant Private Equity first invested in Bastion's NZ businesses
- Cythera Cyber Security
- New Zealand's Bastion Security Group Acquires Cythera (2024-12-08)
- Bastion and Astralas to merge (2026-02-22)
- Cythera Appoints Industry Leader Jason Whyte as MD (2026-01-26)
- Quadrant's Bastion has acquired Astralas (2026-02-22)
- Australian cyber firm CyberCX acquired by Accenture (2025-08-17)
- Pemba Capital Partners locks onto cybersecurity play ctrl (2025-02-04)
- 24/7 Managed Detection & Response services
- Endpoint Protection Australia
- Managed Vulnerability Services
- Cyber Threat Intelligence & Detection Services Australia
- Bastion to broaden its presence in Australia, merges with Seamless Intelligence (2025-08-06)