Skip to content

Network Segmentation & Zero Trust

Stop one compromised device or account from reaching everything. Start with a Zero Trust and segmentation strategy, implement it with tested after-hours cutovers, and check how your operational technology is separated from corporate IT.

3 services on this page

Zero Trust & Segmentation Strategy

A Zero Trust and segmentation strategy: how to stop one compromised device or account from reaching everything.

Typical duration: 2–3 weeks

Network Segmentation Implementation

Network segmentation implemented: zones, policies and cutover, with after-hours change windows.

Typical duration: 4–8 weeks

OT / Industrial Network Segmentation Assessment

An assessment of how your operational technology and industrial control networks are separated from corporate IT, and where an attacker could cross between them.

Typical duration: 2–3 weeks

Zero Trust & Segmentation Strategy

A Zero Trust and segmentation strategy: how to stop one compromised device or account from reaching everything.

Who it's for: Organisations with flat networks, or planning a network or security refresh.
Typical duration: 2–3 weeks
Price: typically A$11,150–20,000 ex GST
Backed by: CCIE Security (see what these accreditations mean)

Includes

  • Current-state review of network segmentation and access paths
  • Target Zero Trust architecture and segmentation model
  • Phased roadmap with dependencies
  • One readout session (up to 60 minutes, online)

Size limits

  • Up to 3 sites

Excludes

  • Detailed low-level design (see Network Design & Documentation)
  • Implementation (see Network Segmentation Implementation)

Client provides

  • Read-only access or configuration exports for in-scope systems; a named technical contact; answers to questions within 2 business days
  • Each additional site: A$1,500 ex GST

Fixed price for the scope listed; anything beyond is quoted before it starts.

Discount: 20% of this service's fee credited against Network Segmentation Implementation if ordered within 60 days

Related services: Network Security Posture Assessment · Network Design & Documentation · Network Segmentation Implementation

Most customers follow this with Network Segmentation Implementation.

Network Segmentation Implementation

Network segmentation implemented: zones, policies and cutover, with after-hours change windows.

Who it's for: Organisations acting on a segmentation strategy or audit finding.
Typical duration: 4–8 weeks
Price: Fixed quote after a 15-minute call
Backed by: CCIE Security (see what these accreditations mean)

Includes

  • Implementation of the agreed segmentation design
  • Policy build and testing
  • After-hours cutover and as-built documentation

Size limits

  • Up to 2 sites and 6 zones
  • Up to 2 cutover windows
  • Up to 2 firewalls (an HA pair counts as one) and 8 L3 (core and distribution) devices

Excludes

  • Hardware and licences
  • Application remediation
  • Segmentation design (see Zero Trust & Segmentation Strategy)

Client provides

  • Administrator access to in-scope devices
  • Change windows, and application owners for testing
  • An agreed segmentation design (for example from our Zero Trust & Segmentation Strategy); without one, design is quoted separately

Fixed price for the scope listed; anything beyond is quoted before it starts.

Related services: Zero Trust & Segmentation Strategy · As-Built Network Documentation · Co-managed Security Retainer

Most customers follow this with Co-managed Security Retainer.

OT / Industrial Network Segmentation Assessment

An assessment of how your operational technology and industrial control networks are separated from corporate IT, and where an attacker could cross between them.

Who it's for: Engineering, mining services, utilities, manufacturing and logistics organisations running OT or ICS.
Typical duration: 2–3 weeks
Price: typically A$12,050–21,500 ex GST
Backed by: CCIE Security (see what these accreditations mean)

Includes

  • IT/OT boundary and conduit review
  • Segmentation and remote-access review against IEC 62443 zones-and-conduits principles
  • One on-site visit (one day) for a site walk-down; travel and accommodation charged at cost, agreed before booking
  • Risk-ranked findings and a segmentation roadmap
  • One readout session (up to 60 minutes, online)

Size limits

  • One site
  • Up to 4 OT zones

Excludes

  • Changes to OT systems
  • Active scanning of OT networks
  • Safety-system assessment

Client provides

  • Network diagrams, firewall exports, an OT engineer contact
  • Each additional site (visit and report): A$2,200 ex GST
  • Each additional 4 OT zones: A$3,150 ex GST

Fixed price for the scope listed; anything beyond is quoted before it starts.

Related services: Zero Trust & Segmentation Strategy · Network Segmentation Implementation · Network Design & Documentation

Most customers follow this with Zero Trust & Segmentation Strategy.

Book a 15-minute call

Tell us what prompted the enquiry. We will confirm the scope and give you a fixed price before any work starts.

Prefer email? hello@axiltech.com.au or send an enquiry. Want every service and its scope in one document? Request the service catalogue.