WhiteHawk completes Quixxi acquisition, entering AI governance and AI cyber security
WhiteHawk Limited (ASX: WHK) has completed the WhiteHawk Quixxi acquisition, having met the completion requirements of the share sale agreement announced on 13 April 2026. The deal extends the company into two new markets: AI Governance and AI Cyber Security.
Shareholders approved the transaction at the Extraordinary General Meeting on 8 October 2026. All resolutions were passed by poll, each receiving more than 95% of votes cast in favour by non-associated shareholders.
Adrian Vallino, Group CEO
“I thank shareholders for their support of the Quixxi acquisition. With that approval, our focus moves from the case for the transaction to delivering on it…”
The deal now moves from approval to execution, and WhiteHawk’s addressable market widens beyond its existing cyber resilience business.
When big ASX news breaks, our subscribers know first
What Quixxi adds to the WhiteHawk platform
Quixxi has an established international customer base spanning central banks, commercial banks, insurers, fintechs, telecommunications providers and government entities. It generated approximately A$575,000 in FY25 revenue, and its platform is built on SOC 2 Type II foundations.
Its products complement WhiteHawk’s existing Cyber Risk Program, Cyber Risk Radar and Cyber Analyst Platform as a Service.
| Quixxi capability | What it does | How it extends WhiteHawk |
|---|---|---|
| Clarity AI | AI inventory including AI risk and maturity assessment, governance workflows, AI framework alignment, and Board and regulator reporting | Adds AI risk to the Cyber Risk Program and Cyber Risk Radar |
| PromptGuard | Safeguards how staff use generative AI, keeping sensitive data out of prompts | Extends protection to everyday AI use, mitigating risk and reputational damage |
| Quixxi Scan | Static, dynamic and API vulnerability testing of applications | Complements Cyber Analyst Platform as a Service |
| Quixxi Shield | Runtime protection against app cloning and tampering | New mobile security product line |
| Quixxi Supervise | Continuous monitoring of live threats against apps in the field | Extends continuous monitoring to mobile apps |
Quixxi Scan’s dynamic application security testing (DAST) technology is the subject of one of Quixxi’s two U.S. patent applications.
Early commercial traction
On 1 October 2026, it was announced that Quixxi’s Clarity AI platform was selected for a four-year binding contract with a major Italian industrial group, worth A$635,237.96 from 1 November 2026.
DoxAI Australia led the customer engagement and will provide its automation solutions, while Quixxi will provide Clarity AI. The contract value exceeds Quixxi’s FY25 revenue figure, though the contract runs over four years.
Why AI governance is now a Board issue
AI governance, put simply, means knowing where AI is used, who owns the risk and being able to prove control. According to the announcement, AI oversight is increasingly a Board responsibility, as directors’ duties extend to material business risks and regulators raise expectations around governance, controls and accountability.
Several regulatory drivers are cited:
- ASIC: its October 2024 review of 23 financial services and credit licensees found AI adoption was accelerating faster than governance arrangements, with gaps in areas including consumer risk, bias and third-party AI oversight.
- APRA: its letter of 30 April 2026 called for a step-change in AI risk management and expects Boards of regulated entities to have sufficient AI literacy. CPS 230 also requires effective controls, monitoring, testing and management of operational and third-party risks.
- Frameworks and reforms: the Privacy Act reforms, NIST AI Risk Management Framework, ISO/IEC 42001 and the EU AI Act create clearer expectations for AI governance, transparency, accountability and control.
For investors, the relevance lies in WhiteHawk’s existing customer base. According to the company, AI governance is typically procured by the same risk, compliance and executive buyers who use WhiteHawk’s Cyber Risk Program and Cyber Risk Radar, so AI risk can be added to existing relationships rather than built from a standing start.
Recent Cyber Risk Radar renewals across financial services, education and government totalled A$685,000, which shows the existing customer relationships that management expects to cross-sell AI governance into.
Five scenarios showing the combined opportunity
The announcement sets out five illustrative (fictional) scenarios. They are not customer wins, but show how the combined capabilities could be applied in practice.
- Financial services: Clarity AI builds an AI register and a Board report mapped to APRA’s CPS 230 and CPS 234 expectations.
- Defence and government supply chains: Clarity AI governance signals are added to Cyber Risk Radar, giving each supplier an AI risk profile beside its cyber score.
- Banking and fintech: Quixxi Shield, Scan and Supervise protect a mobile app, supporting obligations under Australia’s Scams Prevention Framework.
- Professional services: a partner-led, monthly subscription offer for mid-sized firms, designed for recurring revenue.
- Education: entry into a sector that is new to WhiteHawk.
The common thread, per the announcement, is that WhiteHawk starts from a capability customers already trust, then adds AI governance or mobile security. The company describes the result as a larger addressable market for WhiteHawk.
Integration roadmap and what to watch
The announcement frames the investment case around three points: relationships WhiteHawk already has, new sectors and use cases, and support for recurring and international revenue. It states that Quixxi’s products suit subscription and partner-led delivery.
The roadmap reflects the integration priorities announced in April 2026:
- Clarity AI brought into the WhiteHawk platform alongside the Cyber Risk Program.
- A unified dashboard across cyber, data and AI risk for executives and Boards.
- An AI risk profile for each supplier within Cyber Risk Radar.
- The combined offer distributed internationally through aligned partner channels.
The announcement gives no dates for these items. The terms of the transaction are set out in the Notice of Meeting and the Independent Expert’s Report.
For readers wanting the detail behind the consideration structure, our full explainer on the original Quixxi deal terms sets out the share issue, the performance share milestones and the market size projections that framed the April 2026 announcement.
Get Tech News Before the Market Moves
Join 20,000+ investors receiving FREE breaking ASX tech news within minutes of release, complete with in-depth analysis. Click the “Free Alerts” button at Big News Blast to get market-moving announcements in your inbox the moment they break, so you stay ahead of the next big tech story.