Steve Honiss

Head of Governance Risk & Compliance
Steve has worked in law enforcement, intelligence, and security roles for over 30 years.
Talk to an expert
Highlights

Career highlights

He managed NZ Police's Cybercrime Centre, was NZ's delegate to INTERPOL's cybersecurity centre, and the CISO at Parliament. He has led teams of investigators, incident responders, cyber analysts and security consultants responsible for securing some of NZ's most significant organisations. At Bastion, Steve's passion is supporting businesses and agencies to improve their security in a pragmatic and risk-informed way, that enables them to achieve their objectives securely.

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.
Silverstripe - Cross-Site Scripting (XSS) Vulnerability
A Cross-Site Scripting (XSS) vulnerability has been identified in the administrator panel of Silverstripe CMS, specifically in the handling of the user input within the form messages module.
Silverstripe - Host Header Injection
A Host header injection vulnerability in Silverstripe has been identified that allows an attacker to poison the password rese
Statamic CMS
Sam Schroder found a local file inclusion (write only) vulnerability inside of the upload functionality of Statamic CMS. This affects front end components like forms with `assets` fields.
Discover our services

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert
Employee Cyber Training & Awareness
Your people are your first line of defence. Our cyber training builds awareness and sharpens their instincts.
Advisory
When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making.