Rivanorth

Rivanorth is an Australian-owned offensive cybersecurity firm founded in Sydney, Australia. The company is built around a passion for hacking, cybersecurity research, and technology, led by founder Alexander Wilczek — a seasoned ethical hacker with over a decade of experience, holding a BSc in Computer Engineering, an MSc in Information Security from Royal Holloway, and OSCP certification.

Core Products/Services

Rivanorth offers two distinct lines of cybersecurity protection:

Rivanorth Oko is the company's flagship SaaS product — a dark web and third-party monitoring platform that provides 24/7 real-time surveillance of dark web marketplaces, hacker forums, Telegram channels, paste sites, and other cybercrime-relevant sources. Oko detects data leaks including passwords, password hashes, API keys, exploits, PII, usernames, intellectual property, and confidential business data. Beyond first-party monitoring, Oko extends coverage to an organisation's entire vendor, supplier, and partner ecosystem, providing threat scores based on each third party's dark web footprint. The platform supports continuous compliance with major frameworks including ISO 27001, SOC 2, APRA CPS 230, and GDPR.

Offensive Security Services encompass a suite of human-delivered assessments:

• Advanced Penetration Testing — expert-led ethical hacking across web applications, dApps, APIs, mobile applications (Android and iOS), internal and external infrastructure, Wi-Fi, and thick client environments.
• Blockchain Security Assessment — comprehensive smart contract audits, dApp penetration testing, Web3 cloud infrastructure assessments, Web3 API penetration testing, L1 and L2 blockchain audits, and on-chain monitoring and investigations for DeFi protocols and blockchain-based applications.
• Cloud Security Assessment — in-depth analysis of misconfigurations, access controls, and compliance gaps across AWS, Azure, Google Cloud Platform, Microsoft 365, Google Workspace, and Alibaba Cloud.
• OSINT Investigation — open-source intelligence gathering for executive and key-figure risk assessments, pre-M&A due diligence, partnership evaluations, and breach investigations.

Key Strengths

Rivanorth applies an "offensive security mindset" across all its offerings — seeing systems the way attackers do. The Oko platform eliminates alert fatigue through an intuitive dashboard with step-by-step remediation instructions backed by evidence, removing the need for dedicated threat intelligence analysts. The firm's blockchain security work is recognised in the wider Web3 community, having been featured in Rekt and Blockchain Threat Intelligence publications. Their research output includes original threat intelligence on ransomware groups and dark web actor behaviour.

Notable Clients/Projects

Rivanorth serves a range of B2B clients including Betts Group, Uptick (a property inspection SaaS), TempleDAO/Origami Finance (a DeFi protocol), Investa, Zen Energy, and Stuff.co.nz. The company has received testimonials praising its actionable reporting, thoroughness, and ability to identify previously undetected vulnerabilities.

Why Choose Rivanorth

Rivanorth combines a boutique, research-driven approach with enterprise-grade tooling. The Oko platform offers continuous, real-time dark web monitoring that goes beyond point-in-time security questionnaires, while its professional services bring the hacker mindset directly to bear on clients' systems. For Web3 and DeFi projects in particular, the blockchain security assessment service provides full-spectrum defence-in-depth, covering smart contracts, dApps, infrastructure, and on-chain activity. Proudly Australian built and owned, Rivanorth operates remotely and asynchronously.