Slide 1: Next Generation Cyber Risk to AI-Attack Resilience
For personal use only Next Generation Cyber Risk to AI-Attack Resilience Across all Federal, S&L Government, Critical Infrastructure & Their Supply Chains Validated 79.5% Vulnerability & 60% Compliance Visibility at Scale AGM 29MAY26 w w w.w h it eh aw k .c o m
Slide 2: 2025 U.S. Critical Infrastructure Threat Landscape
2025 U.S. Critical Infrastructure (CI) Threat Landscape FBI IC3 Report on 2025 – Reported U.S. Losses, to include: For personal use only • Business Email Compromise – $3.05 B • Phishing/Spoofing Victims – 191,561 • Personal Data Breach – 67,456 • 3,611 reported ransomware, losses $32M • The 2025 IC3
Slide 3: Open-Source Cyber Risk & Threat Intelligence (OSINT)
EMPOWERING A FEARLESS INTERNET Open-Source Cyber Risk & Threat Intelligence (OSINT) Easy to Implement, Non-Intrusive (Legal Name/URL), Cost-Effective, AI-Based Automation For personal use only Networks OT Systems Reconnaissance Scanning Gaining Access Maintaining Access Clearing Tracks Software Phys
Slide 4: Proven SaaS Solutions – Annual Subscriptions
Proven Software as a Service (SaaS) Solutions – Annual Subscriptions: Cyber Risk Program, Radar & Analyst Platform as a Service (PaaS) For personal use only Tailored to Client Requirements 4
Slide 5: 2026/27 Strategy, Pipeline & Projections
2026/27 Strategy, Pipeline & Projections EMPOWERING A FEARLESS INTERNET Revenue Projections Customer Renewal For personal use only 2026 revenue projections now on track with current contracts, • 75% active, broad Commercial Pipeline and Federal, State, Local • Retaining Clients on average for 2-3yea
Slide 6: WHK Business Strategy Priorities 2026-2027
WHK Business Strategy Priorities 2026-2027 For personal use only Grow Client Base across In Partnership with Continue to advance Sign next phase of Cyber advanced product lines: Carahsoft, Evolver, Consulting Firm Resilience Moonshot 1- AI-Based Critical Leidos, Novera, Adisyn Partnerships – Adisyn
Slide 7: Corporate Snapshot
Corporate Snapshot For personal use only Top 5 Shareholders % Shares Mr Giuseppe Porcelli & Associates 7.17 Lavya Pty Ltd 5.91% ASX Ticker Shares on issue Last share price WHK 1.133 bn A$0.005 Mr Aslam Mohammad 4.26% Terry Roberts 3.31% Mr Antanas Guoga 2.70% Undiluted Market cap Listing Date A$5.66
Slide 8: 2026 Bids, Quotes & Wins
2026 Bids, Quotes & Wins Account Name $USD Award Date Stage PWIN $31.6K 16FEB26 U.S. State Cyber Clinic Grants Contracted Won $75K MAY26 For personal use only Georgetown University – Cyber Risk Program Renewal w/ CMMC 1 $42K R&D Enclave CMMC 2 & Vendor Risk Baseline $50K MAR26 PO Received Won Reques
Slide 9: U.S. Federal State/Local Pipeline
U.S. Federal State/Local Pipeline • GSA SCRIPTS BAA (Supply Chain Illumination Program, Tools & Services) 10 Year Contract Vehicle, $99M a year for 10 Years 16SEP24 Submission - 2 Task Orders Released in OCT25: For personal use only • Dept of Navy Sole Source to Interos, Special Ops Command 50 Licen
Slide 10: Quixxi Potential Acquisition
Quixxi Potential Acquisition ❖ Quixxi brings a proven cybersecurity technology heritage, in API security, mobile and application protection, threat detection, digital asset resilience, and cyber breach monitoring - directly aligned For personal use only to the layer of the digital stack were most mo
Slide 11: Unlocking Cyber Risk Visibility
For personal use only Unlocking Cyber Risk Visibility Cyber Risk Intelligence vs. Validated Cyber Security Reality Fortune 500 Manufacturer | 7 Business Units | 4-Year Analysis 31MAR26 w w w.w h it eh aw k .c o m
Slide 12: Inside Team vs OSINT View – Global Manufacturer Client
Inside Team vs OSINT View – Global Manufacturer Client: Cyber OSINT Validated Findings Rate: 79.5% Cyber Vulnerabilities Identified: For personal use only Client Internal Validated Findings Rate: 91.4% Validated: 153,534 IT Assets Identified: Validated: 5,776 12 KEY RISKS: Misattributed Assets | Sha
Slide 13: Key Cyber Risk OSINT Findings Not Identified by Manufacturer Team
Key Cyber Risk Open-Source Intelligence Findings Not Identified by Global Manufacturer-Fortune 500 Cybersecurity Team For personal use only Asset Visibility Configuration Encryption & Application Risk Gaps Weaknesses Protocol Failures • Misattributed or • Unencrypted • Insecure • Weak or outdated un
Slide 14: RiskWise Cyber Risk Snapshot: Novera & WHK Joint Venture
RiskWise Cyber Risk Snapshot: For personal use only Novera & WHK Joint Venture 14
Slide 15: Fast Track Cyber Compliance for Frameworks (AU E8 & CMMC)
Fast Track Cyber Compliance for 15 Frameworks (AU E8 & CMMC) Reduce Time & Cost by 25-30% Across Enterprises & Their Supply Chains For personal use only
Slide 16: Cyber Security Maturity Model Certification (CMMC)
Cyber Security Maturity Model Certification (CMMC) CMMC Compliance Solution (M365) ❖ Automating end-to-end CMMC For personal use only Level 1 and Level 2 compliance for Microsoft 365 environments. ❖ Traditional path is months of consulting with persistent gaps. ❖ A four-stage model: Assess, Deploy,
Slide 17: Global Critical Infrastructure Entity Illumination
Global Critical Infrastructure Entity Illumination For personal use only WhiteHawk’s Approach for Adversary & Critical Infrastructure Mapping of the Digital Terrain. Starting at $10 per Global Legal Entity by Region, Sector Our approach, utilizes data markers and relevant characteristics of known en
Slide 18: Armis Centrix & WhiteHawk
For personal use only Armis Centrix & WhiteHawk Smartly Retain DOD Contracts, Win New Work, While Being CMMC Cyber Resilient as Prime & Across All Suppliers/Partners The Cyber Exposure Management Platforms for Federal Contractors © 2 025 Armis Fede ral LLC | 18
Slide 19: Cyber Resilience Moonshot Business Case
Cyber Resilience Moonshot Business Case When Sponsored by Government or Corporation working with Cyber Academic Centers of Excellence How many Critical Infrastructure (CI) entities How many Cyber Degree Graduates Per YR For personal use only across your City, State, Region? (across all specialties)?
Slide 20: Cyber Risk to Resilience Service of Common Concern
Cyber Risk to Resilience Service of Common Concern For personal use only Cyber & Business Risk Monitoring Across All Stakeholders Publicly Available Network Threat Datasets On-Demand Risk/Maturity Reports Provide Sector-Region Wide Trend Reporting Cyber Interns Provide Virtual Consulations Targeted
Slide 21: The Leadership Team
The Leadership Team C HI E F E X E C U T I V E O F F I C E R, P R ES I DE N T & F O U N DE R Terry Roberts A global risk analytics, cyber intelligence and national security professional with over 20 years of Executive level experience across government, For personal use only industry, and academia.
Slide 22: The Board
The Board Melissa King, Non-Executive Director Melissa King brings more than 20 years global experience as a senior executive, including her roles as Chief Executive Officer for the Australian Veterinary Association, FIBA Women’s Basketball World Cup 2022 Organising Committee and Surf Life Saving Au
Slide 23: Proposed Board Structure
Proposed Board Structure* The Board is considering the composition of its members in light of the current activities of the Company, regulatory requirements, and the Company’s finances: For personal use only AU-based Chair 1 AU Board Member 1 US Board Member In accordance with, clause 15.3 of the Co
Slide 24: For personal use only
WHITEHAWK. Ajuo asn seuossad JOS