Matt Lowth

Chief Delivery Officer

Matt is an executive and thought leader in the technology and digital space with more than 20+ years’ experience solving business problems and improving customer experience through technology.

Talk to an expert

Highlights

Career highlights

‍

Matt Lowth is the Chief Delivery Officer at Bastion Security Group, a leading cyber organisation across Australia and New Zealand, formed following Bastion’s merger with Astralas in 2026.

‍
Matt is an executive and thought leader in the technology and digital space with more than 20+ years’ experience solving business problems and improving customer experience through technology. Focusing on the business outcome, Matt reverse engineers solutions that drive simplification, efficiency and scale, supporting team capability and business growth.

Working at his best in ambiguous and dynamic roles, Matt is a technology strategist and specialist who interweaves technology solutions through the fabric of an organisation. This has been best demonstrated in his role as CIO of MLC Life Insurance, where he led the company’s digital transformation following its separation from NAB and creation of Australia’s third largest life insurer.

As a founder of Astralas, Matt is passionate about helping customers navigate the shifting landscape of technological disruption. He holds a Master of Business Administration (Business & Law).

‍

Cyber security news

Latest advisories

Stay ahead of emerging threats with our expert blog posts, research, and industry updates.

Silverstripe - Host Header Injection

Silverstripe CMS is affected by a Host Header Injection flaw, which can be exploited to manipulate password reset workflows, potentially redirecting or compromising user data.

FarCry Core Framework - Multiple Issues

FarCry Core contains multiple vulnerabilities that could let unauthenticated users upload arbitrary files and execute remote code on the hosting server.

Silverstripe – Cross-Site Scripting (XSS) Vulnerability

With local organisation admin credentials, an attacker can exploit the API to create, delete, or revert virtual machine snapshots in other organisations’ Virtual Data Centres (VDCs), breaching isolation boundaries.

Discover our services

We have the tools to pinpoint risks

Whether it’s hidden vulnerabilities or patterns you might miss, we help you stay one step ahead and make confident, informed decisions. Understand how our services can help your business uncover critical risks

Talk to an expert

Employee Cyber Training & Awareness

Your people are your first line of defence. Our cyber training builds awareness sharpens instincts and turns everyday staff into assets.

Advisory

When clarity is critical and stakes are high, our advisory services deliver strategic, executive-level security expertise that empowers decision-making and resilient operations.

Are you experiencing a security breach?

Incident Response