Silas Main
Your business runs on the systems we build. Here is how they are protected.
Silas Main is the local-business systems studio of David Charles Saleh, ABN 17 626 827 646, Adelaide. Booking systems, follow-up engines, customer databases. Your data, and your customers' data, passes through this work, so here is exactly where things stand.
Certifications and training
Cyber Wardens: full training track
Completed 3 July 2026 (Australian Government backed): Foundations, Level 1 Take Action, Level 2 Safe AI, Level 3 Supply Chain, Refresh, and the Cyber Aid Foundations webinar. Certificates on file.
SMB1001:2026 Silver (Level 2) certified
Australian cyber security standard for small business. Issued 3 July 2026, renewed annually.
Verify this certification live
- Self-assessed against the ACSC Essential Eight, working toward Maturity Level One, reviewed quarterly. Current assessment: July 2026.
- Three written, dated security documents on file, reviewed quarterly: a Prevention Plan, an Incident Lockdown Protocol, and a Supply Chain Security Standard (July 2026 editions).
How every build is protected
- Every connection encrypted: HTTPS everywhere, strict transport security enforced on all Silas Main pages. Full security-header hardening is in progress across the stack.
- Your system lives in accounts you own wherever possible. If we part ways, you keep everything.
- One client, one set of infrastructure. Your sending domain, your keys, your data. Never shared, never reused for another business.
- Payments are handled by Stripe. Card numbers never touch our servers, and prices are enforced server-side, not in the page.
- Secrets (API keys, passwords) live in locked environment stores, never in code, never in documents.
- Two-factor authentication on the accounts that hold your systems, authenticator app, not SMS.
- Every client can sign a Service and Data Security Agreement that puts all of this in writing.
If something goes wrong
We keep a written Incident Lockdown Protocol: severity levels, a first-30-minutes lockdown checklist, scenario playbooks, and client notification duties. If a breach ever touches your data: you hear it from us first, fast, with what happened and what we are doing about it.
Privacy
As a small business we are largely exempt from the Privacy Act. We voluntarily follow the Australian Privacy Principles anyway. Full policy: privacy.