Luke Elin, founder and CEO of Ey3, black and white studio portrait

Luke Elin · Founder and CEO

Thirty-five years of watching the same mistakes, and learning what actually prevents them.

Luke Elin is a Brisbane technologist working where artificial intelligence and cyber security meet. He founded Ey3 in 1996 and has been building and securing web systems ever since, for Australian small businesses, mid-market firms and government teams.

What Luke works on

  • AI adoption. Where AI genuinely creates value in a specific business, what it costs, and what it puts at risk. Workflow automation, document and quote processing, and assistants built for one organisation rather than for everybody.
  • Sovereign and on-premises AI. Systems that run on local hardware or Australian-hosted infrastructure, for organisations that cannot send data to overseas providers. Luke maintains a local large language model research stack for exactly this work.
  • AI security. Prompt injection, agent blast-radius control, scoped credentials and egress control. An emerging discipline, and one where a security background applies directly rather than by analogy.
  • Cyber security. Penetration testing, security auditing, incident response and malware remediation, including live incident response across a managed fleet of client websites.
  • Web and database engineering. Custom WordPress development, database architecture and recovery, and the integrations between a website and the systems behind it.

Echo, the passion project

Echo is Luke’s passion project: an AI research companion he designs and runs himself, with local models at its core. She reads, remembers and connects ideas across a private research library, and every tag she adds is checked against a quote from its source before it is catalogued.

She is also the proof. The sovereign, local-first approach described above is one Luke runs himself. Echo has even written for this blog: POV: It’s 2026 and your “AI strategy” is just a ChatGPT subscription.

What building Echo proves

  • The whole path, end to end: curating the data, training the model, and running it on hardware he owns.
  • Governance built in, not bolted on: a memory gate, locked agent charters, and approval before any model swap or deploy.
  • Honest numbers: every change measured before and after, with the failures kept next to the wins.
Echo, Luke Elin’s locally run AI research companion: the Loom view, where her reading becomes a map of ideas
The Loom, where Echo’s reading becomes a map of ideas. A screenshot from Luke’s own system, with operational detail left out.

The record

These are where the work was done. They are Luke’s history rather than a client list, and the distinction is worth keeping.

1996
The first websites
Ey3 founded. Every version of the web since, from the first one.
2001 to 2003
BBC Weather, London
Web developer on one of the most heavily used public services on the internet at the time.
2004 to 2005
Australian Red Cross
Web infrastructure for the Boxing Day tsunami response, and one of the largest online donation portals in Australia.
Institute of Data
Teaching cyber security, and red teaming.
Queensland Government
Generative AI engineering for a Queensland government department.
1996 to now
Ey3
Built from web development into a consultancy spanning cyber security, managed hosting and AI. Clients from Australian small businesses to government agencies, here and internationally.

Luke speaks to Australian business audiences on cyber security and AI adoption, including for Brisbane business groups.

Common questions

Who can help a Brisbane business adopt AI?
Luke and the team at Ey3 work with Brisbane and Queensland businesses on exactly this: assessing where AI genuinely helps, building it, and then securing it. Ey3 is based in Fortitude Valley. The assessment comes first, because the honest answer is sometimes that a given process does not need AI at all.
Can AI be run in Australia so that data stays onshore?
Yes, and for a lot of organisations it is the deciding factor. Luke specialises in AI that runs on local hardware or Australian-hosted infrastructure, so regulated or sensitive information is never sent to an overseas provider. If your board has asked where the data goes, this is the conversation.
What is AI security, and why does it need a separate specialist?
Because the failure modes are new. Prompt injection, agents with more reach than anyone intended, credentials scoped too widely, and data leaving by a path nobody mapped. The discipline is young enough that most of the people working in it came from somewhere else. Luke came from security, which is the useful direction to arrive from.
Does Luke work directly, or do you hand it to someone else?
On the work that needs it, directly. Ey3 does not run an account management layer, so the person who examines your systems is the person who explains them to you.
Where is Luke based, and who does he take on?
Fortitude Valley, Brisbane. Clients across Queensland and Australia, and some internationally. In person when it helps, by video when it does not.

Next step

Start with a phone call.

Twenty minutes, no deck and no discovery workshop. If the honest answer is that you do not need us, you will get that answer on the call rather than after an invoice.

Call 1300 856 393 Or send a note