Cogito Group wins Australian Technologies Competition award for SecureSME

Canberra cybersecurity company Cogito Group won the Disaster, Emergency and Risk Management category at the Australian Technologies Competition finals in Sydney for SecureSME, its subscription service for managing digital certificates and keys. The win comes as AI agents and looming post-quantum deadlines push digital trust from a back-office task to a board-level risk.

Why it matters: - Digital certificates, keys and identity systems sit underneath everyday business operations, from Wi-Fi access to emergency recovery. - Cogito Group is pitching SecureSME as a way for smaller organisations to find, manage and renew those certificates before outages or security failures hit. - Australia’s shift toward AI agents and post-quantum cryptography is raising the stakes for certificate discovery, lifecycle management and migration planning.

What happened: - Canberra-based Cogito Group won the Disaster, Emergency and Risk Management category at the Australian Technologies Competition finals in Sydney. - The award was presented on 15 September at the competition’s live pitch and awards night. - The company won for SecureSME, a subscription service that finds, issues, renews and cancels digital certificates and keys. - Co-founder and Director Bernadette Brown pitched SecureSME to a panel of 16 judges in five minutes. - The Australian Technologies Competition recognizes Australian technology businesses with global growth potential.

The details: - Brown described how removing certificates from a typical 3,000-person organisation would cause internal websites to stop first, then smartcard users to be locked out, then Wi-Fi to fail floor by floor. - The same failure chain would reach the backup console and emergency access, because recovery tools would sit inside the network that had already gone offline. - Richard Brown said many boards treat post-quantum planning as a renewal, but the real task is replacing every key on every device and every signed document. - Richard Brown said discovery is the first step because most organisations have never counted their certificates. - Cogito Group issues hybrid and pure post-quantum certificates in production from its own certificate authority. - The company’s certificate authority achieved Common Criteria certification in April 2026. - The certificate authority is also listed by the United States National Information Assurance Partnership program as one of four products to have achieved this certification. - Cogito Group said its Jellyfish platform can move certificate authorities from other software live and support migration to post-quantum capabilities through 2030. - SecureSME packages the government-built Jellyfish platform into a subscription starting at US$399 a month. - Delivery for smaller organisations runs through managed service providers. - More than 10,000 business and government entities run on the Jellyfish certificate authority. - Cogito Group is Australian owned, holds all three Gatekeeper accreditations from the Australian Government Department of Finance and employs 37 people across Australia and New Zealand. - Organisations can request a discovery scan at SecureSME.

Between the lines: - The award highlights a shift from certificate management as technical maintenance to certificate management as operational resilience. - AI agents create more identities that need certificates, while attackers can use AI to forge messages and impersonate people faster. - Quantum migration deadlines from the Australian Signals Directorate make inventory and planning urgent, not optional. - The outage examples from O2 in 2018 and the Australian Senate in 2026 underline that expired certificates can cause major disruption without any hacking. - Cogito Group is positioning a government-grade platform for a broader market that includes smaller organizations.

What’s next: - Cogito Group will likely use the competition win to expand awareness of SecureSME among smaller businesses and managed service providers. - Organizations facing ASD’s timeline will need to identify their certificates, map expiry dates and build migration plans before 2028 and 2030 milestones. - Customers using Jellyfish can continue discovery and staged migration as post-quantum rollouts advance.

The bottom line: - Cogito Group is betting that certificate discovery and quantum-ready migration will become core infrastructure work, not niche IT housekeeping.