Cognisn Pty Ltd, Australia

Forensic evidence, expert testimony and incident response leadership when it counts.

Independent digital forensics, eDiscovery and expert witness services for solicitors, insurers and the courts. Incident command, coordination and threat actor negotiation for organisations under attack.

Advisory and expert services open October 2026. Open source tools are available now.
Who this is for

Three kinds of work, one practice

Legal and insurance

Evidence that survives scrutiny

  • Expert witness and expert reports
  • Forensic examination of devices and systems
  • eDiscovery collection, processing and review support
  • Independent review of opposing expert evidence
Enquire about instructions
Organisations under attack

Incident response leadership

  • Incident command, coordination and executive support
  • Threat actor negotiation and ransom decision support
  • Regulator and insurer notification management
  • Virtual CISO and board advisory after the incident
Enquire about engagements
Software

Built for the work above

  • Evidence handling and large data set tooling
  • Cloud security scanning and inventory
  • AI and MCP frameworks used on engagements
  • Open source now, licensed products to follow
Browse the GitHub organisation
Open source

Available now

github.com/Cognisn
About

Matthew Westwood-Hill

Cognisn is the independent practice of Matthew Westwood-Hill, a Cyber Security practitioner with more than twenty years in digital forensics and incident response. He led the Privacy and Cyber Response, Computer Forensic and eDiscovery practice for Oceania at EY, was Principal Investigator at CyberCX, led the security function at SBS, and currently holds a Global CISO role.

He has led the first hours of incidents, negotiated with threat actors, given evidence, and built the tooling to handle large evidence sets when commercial products fell short. The software published here is the same software used on engagements.

Background
Digital forensics and incident response, 20+ years
Current role
Global CISO
Speaking
Australian Cyber Conference 2026, Melbourne
Based
Australia
Contact

Get in touch

Leave an address and you'll hear from us when advisory and expert services open in October 2026. Nothing else, no list sharing.

For instructions or engagements now, email hello@cognisn.com.