Exclusive: How Cybersecurity startup Blackveil is targetting AI-driven threats
Burns, the founder of New Zealand-based cybersecurity startup Blackveil, spent much of his career working for managed service providers – firms tasked with overseeing the IT infrastructure of other businesses. And time and again, he says, he witnessed companies fall victim to the same avoidable cyberattacks.
"Each time, I saw the same things going wrong," he said. "The industry was missing something critical."
Blackveil was his answer: a company with a mission to protect the "forgotten child of cybersecurity" by focusing on overlooked but essential components of digital defence.
The turning point came last year, after Burns responded to his twelfth cyberattack incident in short succession. Frustrated by the pattern, he decided to act. "I built a little application, a Python crawler, and stuck it on the internet," he explained. "It ran on the .co.nz TLD for six weeks and confirmed that over 50% of Kiwi businesses had critical gaps in their cybersecurity."
The data, drawn from public domain records, validated Burns' suspicion that weak digital hygiene – like unprotected DNS records – was leaving companies wide open to attack.
From there, Blackveil's reach grew beyond New Zealand. The team expanded their scanning to include Australian businesses and even global Fortune 500 companies. The result? Even the biggest players weren't immune.
"These aren't always advanced attacks," Burns said. "It's usually someone forgetting to change a default password, turn on multi-factor authentication, or tidy up an email record."
But the landscape is rapidly evolving, and the rise of AI-powered cyberattacks, particularly tools like Xanthorox, is escalating the threat. Burns described Xanthorox as "ChatGPT for hackers" – a platform capable of generating malware, conducting reconnaissance, and launching tailored phishing campaigns.
"You don't need technical knowledge anymore," he said. "You just talk to it in plain language. If something doesn't work, it evolves and tries something else. It's terrifying."
To counter this, Blackveil developed its own AI assistant: Buck. While it doesn't yet fix vulnerabilities directly, it acts as an intelligent guide for businesses, simplifying complex security insights into accessible language.
"You log in, scan your domain, and Buck breaks it down for you," Burns said. "You don't have to be a technical guru to understand what's wrong."
For now, Buck exists as a standalone agent, but future versions will be fully integrated into Blackveil's platform.
"Our goal is to make cybersecurity accessible," Burns explained. "We're lifting the veil – hence the name Blackveil – on a space that's been out of reach for many businesses."
The company's flagship product, Blackvault, is a domain security platform that focuses on prevention rather than reaction.
Traditional cybersecurity tools often work in a reactive way, alerting users after something has already gone wrong. Blackvault flips that model by proactively securing digital entry points – what Burns calls "shutting the front door."
According to Blackveil's internal data, aligning three critical DNS records – SPF, DKIM, and DMARC – can reduce phishing, spoofing and spam threats by up to 87%. The company promises deployment within two to four weeks for most businesses.
"For a small to medium-sized business, the return on investment is huge," Burns said. "This is one of the most cost-effective ways to secure your business."
Despite its focus on the ANZ region, Blackveil operates globally, and the remote-first company has seen growing demand abroad. Headquartered in Tauranga, the business can support international clients without needing to be onsite, although on-the-ground assistance is available in the Bay of Plenty.
Burns himself relocated from Auckland a few years ago for a slower pace of life, but remains deeply connected to the broader tech world. In addition to Blackveil, he developed KiwiCost, a side project offering real-time cost comparisons for people living in or moving to New Zealand.
"That one was just me scratching an itch," he said. "But it also helped me practice and refine the design direction for Blackveil."
His approach is anything but traditional. "Most IT companies are run by old guys in blue suits," he joked. "I wanted to bring something different – vibrant, creative and approachable."
That includes how the company communicates. On LinkedIn, Burns shares cybersecurity insights with a dose of humour and sarcasm. One of his recent posts – about seemingly mundane email security protocols – went viral, drawing over 100,000 impressions.
"People are clearly looking for plain-English guidance," he said. "And they appreciate a bit of personality."
Asked what advice he'd give businesses unsure how to prepare for the evolving threat landscape, Burns had three clear steps: train your staff, get the basics right, and monitor your systems.
"Every staff member is a risk if they don't know how to spot bad actors," he said. "Their inbox is their digital passport. If you train them properly and secure your fundamentals, 90% of attacks become impossible."
He added: "And after that, monitor everything – because DNS records can be altered by mistake, or worse."
For those in crisis, Blackveil also offers an emergency helpline – 0508 HACKED – designed to provide immediate assistance to compromised businesses.
"That line goes straight to my mobile," Burns said. "It's about being there when people need us most."
Blackvault is still evolving, with plans to become what Burns calls "the Swiss Army knife of domain security."
But his goal remains clear: "We want to make strong cybersecurity achievable for everyone," he said. "Because it's not just big companies under threat anymore – it's all of us."
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
RNZ News
an hour ago
- RNZ News
Supreme Court hear's Uber's case against employment rights
Multi-million dollar ride-share company Uber is arguing its drivers aren't employees at the Supreme Court in Wellington, as the fight over driver's employment rights came to the highest court in the country. It was Uber's second appeal against an Employment Court decision in 2022 to grant four Uber drivers workplace protection. The Court is to decide whether it's drivers should be considered employees. A decision in favour of the drivers could lead to them claiming benefits such as leave entitlements, minimum wage and holiday pay. Uber is arguing drivers were independent providers of transportation services to "riders" and "eaters" with whom they entered into contracts using the app provided by the Uber companies. On Tuesday, counsel for Uber, Paul Wicks, said drivers were fully aware they were not signing up to a traditional employment relationship. Wicks told the court Uber did not dictate the hours that drivers worked, instead the app provided the drivers the service of linking them to the customers. "Uber offers the opportunity for drivers to earn an income anytime, anywhere. The offer is on the table for any fit and proper person with a driver's license, a car and a smartphone. You can use the Uber platform if and when you want to, in the same way as riders do," Wicks said. On Tuesday morning, the judiciary panel queried Uber's characterisation of payments made towards drivers - pointing out an illustration provided by the company appeared to show money flowing directly to the drivers from passengers. Uber's lawyer Nathaniel Walker conceded the funds were held by the company and paid out following the deduction of a service fee. He said the illustration actually depicted the effective contractual arrangement between riders, drivers and the company. "If individual drivers were responsible for collecting the fare into their own bank account, then remitting a services fee to [Uber company] Rasier NZ, matters would get exceedingly complex, exceedingly quickly," Walker said. "That how taxis work," interjected Justice Sir Joe Williams. Uber protest outside the Supreme Court. Photo: RNZ / Samuel Rillstone More than 50 drivers and supporters gathered outside the Supreme Court house on Monday as part of a protest organised by the unions defending the appeal. An organiser for the Wellington Uber drivers network, John Ryall, said the outcome of this case would have implications for other workers across the gig economy, who were employed in the same way. "We just think it's an insult to the workers involved. It's something that needs to be tackled and we're tackling it here," Ryall said. Mea'ole Keil was involved in the original case against Uber. He said there currently was an unfair employment relationship and classifying drivers as employees will have a huge impact on their lives. "The impact for drivers is that they will be treated fairly and with dignity when they go to work. And that they are paid a living wage so they can look after their families," Keil said. Former Uber driver and current Wellington City councillor Nureddin Abdurahman was hopeful the Supreme Court would uphold previous decisions granting drivers workplace protection. "I think it's really important for us. This is the day we've been waiting for a very long time and to see such a support means a lot," Abdurahman said. The appeal would continue on Wednesday and was expected to take two days. Sign up for Ngā Pitopito Kōrero , a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
RNZ News
an hour ago
- RNZ News
Selwyn Water company 'continues local ownership, prevents privatisation'
The Selwyn waste water treatment plant stays in the hands of locals under the new plan, says the mayor. Photo: RNZ / Nate McKinnon Selwyn District Council has become the first in the country to establish a company to manage water and wastewater. Selwyn Water Limited was set up at a cost of $2 million under the government's Local Water Done Well legislation, which let councils create entities that could borrow more than councils were able to on their own. It would provide drinking and wastewater services to about 30,000 households and more than 8000 businesses. Selwyn Mayor Sam Broughton was joined by Local Government Minister Simon Watts and Selwyn MP Nicola Grigg at a formal launch event at the Pines Wastewater Treatment Plant on Tuesday. Photo: RNZ / Nate McKinnon Broughton said it was a milestone for the district and would future-proof its water infrastructure. "A stand-alone CCO [council controlled organisation] to manage our water and wastewater means we have continued local ownership, prevents the privatisation of our water assets, it means we think about a long-term future and brings in governance excellence to the management of our water," he said. The council voted for the model in April, despite about 87 percent of 424 public submissions against the proposal and in favour of keeping water services in-house. Broughton said public conerns about potential higher costs and reduced local control had been addressed. "We take all community feedback really seriously, we had hearings, we had people come and talk to us about what they had written down and during that process it became really clear the community congratulated us as a district for the investment that had already been made and that was part of the reason; 'why change it because you're already successful now'," he said. "Another key factor was that people were scared of privatisation, so we've made sure that has been dealt with too and the primary legislation meant that that couldn't happen as well. The continued local ownership and influence for the community is also taken account in the set-up because this isn't a separation for the community. Selwyn Water will continue to hear from our community to be a part of future decisions." Photo: RNZ / Nate McKinnon Water charges were expected to be higher for ratepayers initially because of set up costs but cheaper after about 10 years. "We put aside $2 million to set up the CCO and that has been paid for and some of that will be repaid through water charges. Our water charges in Selwyn have always been separate from rates and capital values of properties so that will continue with the new organisation being set up," Broughton said. "Anything we do with water needs to be done sensibly and thinking not just about today but for the generations to come as well." An average 14.2 per cent rates rise took effect for Selwyn ratepayers from July. The council said an in-house model would limit its ability to borrow for large-scale infrastructure projects needed to support Selwyn's rapid growth. Photo: RNZ / Nate McKinnon The CCO had the ability to borrow up to 500 percent of its revenue through the Local Government Funding Agency, compared to the 280 percent cap for councils managing water in-house, it said. Local Government Minister Simon Watts said the launch of Selwyn district's water service entity marked a significant milestone of water reform. The council was the the first to get its plan approved by the government ahead of the national deadline on 3 September. "I look forward to seeing similar Local Water Done Well plans progress in the coming months," Watts said. "Selwyn District has demonstrated it has a financially sustainable plan for the delivery of water services that meet health, quality, and environmental standards, along with community expectations. "I will be watching with interest how Selwyn Water manages the projected price increases for consumers during the initial years of their plan. I expect the Commerce Commission, as the economic regulator, will closely monitor to ensure the delivery of forecast levels of capital investment, justify the price." Over the next six months, the council would transfer relevant assets, staff, and systems to Selwyn Water. Stormwater services would remain managed in-house by the council. Photo: RNZ / Nate McKinnon Sign up for Ngā Pitopito Kōrero , a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
RNZ News
3 hours ago
- RNZ News
Christchurch Mayor backs proposal for government-capped rates rises
Phil Mauger envisages a rates cap of around 5 percent. Photo: RNZ / Nate McKinnon Christchurch Mayor Phil Mauger is backing calls for the government to cap rates rises . Cabinet will consider options to control rate rises, including capping, later this year. Finance Minister Nicola Willis has complained of councils' wasteful spending, comparing local politicians to kids in a candy store. "Councils don't always do a great job of spending your money like you would spend it. There are wasteful projects - there is evidence of that," Willis told Morning Report on Monday. "We want councils focusing on the things people expect them to do, which is the rubbish, the roads, the pipes, the basics - and not all the fanciful projects." Mauger told RNZ he could not agree more. "Everyone campaigns 'ohh, we gotta stick to basics', right? And then the first thing some of us do is go away and not stick to basics," he said. "We need to be stronger around the council table to say what's basics. Now ... someone's basic might be someone else's must have ... but it's good to have rates caps. I feel it's good. I really do." Earlier this year, the Taxpayers' Union launched a campaign calling for rates to be capped at inflation levels. Mauger imagined a cap closer to 5 percent and said his council was "very close to what I'd call the rates cap". He conceded it would not be possible to cap rates at inflation. "If it's low as that we would struggle with that," Mauger said. "I think to get down to 2 percent, if the government put a rates cap at 2 percent on it, I think there's a lot of problems." Christchurch City Council had approved average rates increases of 6.4 percent, 9.9 percent and 6.6 percent this term, as a result average rates bills had climbed almost 25 percent in the city this triennium, while inflation had only risen about 8 percent during that time. Willis told Morning Report she expected push back from councils "because when you take candy away from kids in a candy store, they don't really like it. But at the same time, we are on the side of ratepayers". Asked if he was acting like a kid in a candy store, Mauger told RNZ: "No - when it's my own money, it is. But when you're spending other people's money, [rates caps] are good". "If we had money running out of our ears, you'd spend it on other stuff. We haven't got that at the moment," he said. He agreed with Willis that councils had engaged in wasteful spending, and when asked for an example he pointed to cycleway spending. "We've wasted money on how we have designed and built cycleways. Now I'm not against cycleways but we can build them one hell of a lot cheaper - a lot, lot cheaper," Mauger said. The council had budgeted $210.4 million for new cycleways, improvements, and cycleway and footpath renewals over the next decade in its long-term plan. However, that only accounted for 3.2 percent of its budgeted $6.5 billion in capital spending. With major projects, such as Christchurch's new stadium and new sports complex, almost complete, rates pressure would ease in the future. But Mauger said the council still needed to find other ways to cut its cloth. "What we've got to look at is our levels of service now," he said. "Everyone expects when they walk out the door, they expect the footpath to be half-good, they expect the gutter to be falling the right way, they expect the water to be not leaking out of the ground, the grass mowed and rubbish picked up - that's what they expect. "If we backed off and didn't mow the grass as often or didn't pick up the rubbish as often, that's how we could save some money. I can't say that's how you would, but that's how we can do it quicker and easier." Rates caps had been panned by Labour leader Chris Hipkins - who said it would make the problem worse not better - and Local Government New Zealand president and Selwyn District mayor Sam Broughton - who said capping rates could be "disastrous for communities". Sign up for Ngā Pitopito Kōrero , a daily newsletter curated by our editors and delivered straight to your inbox every weekday.
