Fortitude Valley, Brisbane

AI, security and hosting for organisations that have outgrown guesswork.

Ey3 is a Brisbane consultancy for organisations whose website and systems stopped being optional some time ago. We put AI to work inside the business, secure what you already run, host it on our own hardware in Sydney, and build what is not on the shelf.

Websites since 1996Every version of the web, from the first one
35 yearsData, web and cyber security
Fortitude ValleyBrisbane. Our own server in Sydney.
BBC. Red Cross. Queensland Government.Where the experience was earned

Who we work with

Built for organisations that already depend on the web.

Our clients are not starting out. They run a firm, a practice, a manufacturer, a not-for-profit or a group of brands, and somewhere between twenty and a few hundred people rely on what the systems do each day. The website takes the enquiries, the bookings, the payments or the members. And something behind it has been bothering someone for a while.

Usually one of these

  • An existing WordPress build that has grown past the people who made it.
  • A security incident, or a near miss nobody has properly explained.
  • A board, an auditor or a regulator asking what the organisation’s position on AI is, and no answer yet.
  • Hosting that was cheap, right up until the day it mattered.
  • A backlog a small team cannot get to, and a sense that AI should be doing some of it by now.

If you are a one or two person business looking for a first website, we are probably not the right fit, and we would rather say so now than after an invoice. A good local freelancer will serve you better and cost less. If you are past that stage and something is not right, ring us.

What we do

Four practices. One standard.

01AI for business

AI that does a defined job, with a person holding the pen.

We put AI into the way your organisation already works: intake, reporting, reconciliation, drafting, and finding the one document in ten years of files that actually matters. Agents built to do one job well and stay inside it. AI policy and governance written for your board rather than copied from a template, including what the Privacy Act will ask of automated decisions from 10 December 2026. And a fractional CTO for when the decisions are bigger than the team.

Scoped per engagement.
AI at Ey3 →
02Security

Security for the internet as it is, not as it was.

Small targets are still targets. We audit what you run, from the site to the server to the logs to the edge, fix what we find, clean up when it has already gone wrong, and keep watching afterwards through our own Ey3 Sitrep monitoring: people looking at real signals, not a plugin with a green tick.

03Secure hosting

Our own server in Sydney, and backups we have actually restored.

Your site runs on hardware we control, not a reseller account three layers deep. Backups are kept in three copies across two locations, one of them off-site, and restores are tested on a schedule rather than assumed. Monthly maintenance keeps the software current so that audit findings stay fixed.

Hosting and maintenance are priced in the shop.
Hosting →
04Custom builds

When it is not on the shelf, we build it.

WordPress development, migrations off platforms that have become a liability, custom plugins, and the integrations between the website and the systems behind it. Built properly, documented, and handed over in a state somebody else could maintain. We have been doing this since 1996 and, oddly, we still like it.

Quoted after a conversation.
Web development →

AI Human Love

AI does the drudgery. People keep the judgment.

Every person at Ey3 works AI first. The first draft, the first pass over the logs, the first read of a contract, the first cut of the code: a model does it, quickly, and a person who has seen thirty years of the same mistakes decides whether it is right. That order matters. AI without judgment is a liability with a monthly subscription. Judgment without AI is slow and expensive, and in 2026 it is also a choice.

Most people are afraid of the machine. We are not, and we do not think you should be. What we teach clients is not how to use a chatbot. It is where to put the human.

The era of easy security is over. That suits us.

For twenty years an Australian business could get by on a cheap host, a firewall plugin and luck. That has finished. The attacks are automated, they do not care how big you are, and the first you hear of one is a customer, a bank or a regulator. Security through obscurity is dead.

So we do the unglamorous things properly, on a schedule: patch, harden, back up, restore, watch. The watching is done with our own tooling, Ey3 Sitrep, by people who know what the signals mean. We do not publish how any of it is defended. Not because secrecy is the defence, but because there is no reason to help.

Where the judgment comes from

Thirty years of watching the same mistakes.

Ey3 is led by Luke Elin. The organisations below are where he did the work that shapes how we do ours. They are his history, not our client list, and we say so because the difference matters.

1996
The first websites
Built when most Australian businesses were still deciding whether they needed one. We have been through every version of the web since.
2001 to 2003
BBC Weather, web developer
Public systems at national scale, where an outage makes the news rather than a support ticket.
2004 to 2005
Australian Red Cross, Boxing Day tsunami response
Web infrastructure under the load and scrutiny that only a disaster produces.
 
Cyber security teaching and red teaming
Teaching defenders, and being paid to think like the attacker.
 
Queensland Government, generative AI engineering
Building working AI inside a government department, with the governance that has to come with it.
 
Ey3 Sitrep
Our own monitoring tooling, built because nothing off the shelf watched the way we wanted to.

Client work is under agreement or is not ours to name. Ask on the phone and we will tell you what we can.

Straight answers

The questions we get before the phone call.

Do you work with sole traders and one-person businesses?
Rarely, and only where the systems are already serious. If you need a first website, a good local freelancer will do it better and cheaper than we will. We would rather tell you that now.
Our site was built by someone else. Will you take it on?
Yes. Most of our work starts with a site someone else built. We audit it first so that both of us know what we are taking on, then we fix, host and maintain it, or rebuild it if that is the honest answer.
Where is our data, and who can see it?
On our own server in Sydney. Backups are kept in three copies across two locations, one off-site, and restores are tested on a schedule. We do not publish how the environment is defended, and we would be wary of anyone who did.
You work “AI first”. Does our data go into a model?
Not without an agreement that says so. AI first describes how our people do their own work. What AI touches on your engagement, and where, is set out in writing before it starts. Our AI policy and governance service exists so you can give your board the same answer.
What does the first conversation cost?
Nothing. Twenty minutes on 1300 856 393. If you want the full picture in writing, a Security Audit is a one day block at $1,000 inc GST. AI, hosting and custom work are scoped after we have talked.

Writing

Notes from the field.

16 September 2026Your WordPress Site Is Probably Already a Problem. Here Is How to Tell.

Why cheap hosting and abandoned plugins put Brisbane businesses at risk, and three questions to ask your provider this week.

19 August 2026The Same Seven Mistakes

Thirty-five years of watching Australian businesses repeat themselves.

18 August 2026What a Fractional CTO Actually Is, and Why Australian Mid-Market Firms Have Until 10 December

What the Privacy Act changes ask of you, and who in your organisation is supposed to answer.

Next step

Start with a phone call.

Twenty minutes with someone who has seen it before. No deck, no discovery workshop, no obligation. If we are not the right fit we will say so and point you somewhere better.

1300 856 393

Or send a note

Ey3, PO Box 69, Fortitude Valley QLD 4006. [email protected]