AMARU Auditor Profile
AMARU is a New Zealand-based cybersecurity and compliance firm helping ANZ technology companies achieve international compliance certifications. They combine CREST-certified penetration testing with compliance consulting, ensuring that security programs are technically sound as well as compliant with framework requirements.
Founded in 2018, AMARU has positioned itself as the go-to compliance partner for New Zealand technology companies looking to expand into US, European, and Asian markets. Their team understands the unique challenges of ANZ companies entering markets where SOC 2 or ISO 27001 certifications are table stakes for vendor selection.
What AMARU Does Well
- ANZ market specialist — Deep understanding of New Zealand and Australian regulatory landscape alongside international frameworks.
- Global market preparation — Helps NZ companies achieve SOC 2 and ISO 27001 for US and European market entry.
- Technical security combined — CREST-certified penetration testing alongside compliance means real security, not just paperwork.
Engagement Process
- Discovery session to understand business goals and target markets
- Security maturity assessment and framework recommendation
- Gap analysis against chosen framework(s)
- Remediation and implementation support
- Technical security testing (penetration testing, vulnerability assessment)
- Audit readiness review and certification support
Pricing Expectations
AMARU offers ISO 27001 certification support starting from NZD $15,000 and SOC 2 readiness programs from NZD $25,000. Their combined security and compliance packages can reach NZD $50,000 for comprehensive engagements including penetration testing, compliance implementation, and audit coordination.
Who Should Choose AMARU
New Zealand and Australian technology companies that need international compliance certifications to access US or European markets should consider AMARU. They are particularly well-suited for startups and SMBs that want both genuine security improvements and compliance certification from a single provider, rather than engaging separate firms for penetration testing and compliance consulting.