WHITEHAWK LIMITED — AGM Information 2023

May 9, 2023

2 0 2 3 A N N U A L G E N E R A L M E E T I N G

==> picture [193 x 93] intentionally omitted <==

==> picture [211 x 10] intentionally omitted <==

WhiteHawk Online Cybersecurity Exchange 10 May 2023

© 2023 WhiteHawk Limited

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

SAFE HARBOUR STATEMENT

This information is given in summary form and does not purport to be complete. Information in this presentation, including financial information, should not be considered as a financial projection, advice or a recommendation to any particular or potential investors in relation to subscribing for securities in WhiteHawk. Before acting on any information you should consider the appropriateness of the information having regard to these matters, any relevant offer document and in particular, you should seek independent financial advice. All securities involve risks, which include (among others) the risk of adverse or unanticipated market, financial or political developments and, in international transactions, currency risk. This presentation may contain forward looking statements including statements regarding our intent, belief or current expectations with respect to our businesses and operations, market conditions, revenues, market penetration, and results of operations. Readers are cautioned not to place undue reliance on these forward looking statements. WhiteHawk does not undertake any obligation to publicly release the result of any revisions to these forward looking statements to reflect events or circumstances after the date hereof to reflect the occurrence of unanticipated events. While due care has been used in the preparation of forward looking information, actual results may vary in a materially positive or negative manner. Forecasts and hypothetical examples are subject to uncertainty and contingencies outside WhiteHawk's control. Unless otherwise specified all information is stated as at 8 May 2023.

10 May 2023

2

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Overview: Revenue by Year in US$ Thousands

==> picture [946 x 343] intentionally omitted <==

----- Start of picture text -----

⏤
Contracted revenue for calendar year
Total
$3,500 2022 was US$3.2M (~AU$4.78M)
$3,215 Revenues
⏤
$3,000 Recurring 2022 revenue 140% increase over
Revenue
2021
$2,500 $2,303 $2,554
⏤
Current cash balance as of 12/31/22
$1,888 $2,219
$2,000
was $2.171M (~A$3.24M)
$1,500
⏤
Experienced two quarters of positive
$1,029
$1,206
$1,000
cash flow in 2022
$507
$500 ⏤
Average Monthly Run Rate is
$161
$- $- US$230K (~A$350K)
2018 2019 2020 2021 2022
----- End of picture text -----

10 May 2023

3

www.whitehawk.com

Revenue and Pipeline Growth Year Over Year

Throughout the Pandemic, Continued to Grow Even as Government and Commercial Organizations Delayed Acquisitions

• Double digit growth year over year since 2018

• 2023 Pipeline, including RFPs/RFIs/Active Quotes/Sole Source Proposals:

==> picture [392 x 267] intentionally omitted <==

• Cyber Risk Radar: US$12.5M

• Cyber Risk Program: US$1.1M

• WHK Marketplace & SME Services: US$250K

Continuing to generate proposals & contacts via referrals, partners, & sales channel campaigns

10 May 2023

www.whitehawk.com

4

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Corporate Snapshot

==> picture [53 x 47] intentionally omitted <==

==> picture [53 x 47] intentionally omitted <==

==> picture [53 x 47] intentionally omitted <==

==> picture [254 x 140] intentionally omitted <==

----- Start of picture text -----

ASX Ticker Shares on issue Last share price
WHK 248.3 m A$0.035
Net Cash
Undiluted Market cap Listing Date
A$8.69m ~ A$1.517m as of 31 Mar 2023 24 Jan 2018
All figures are as of 05 May 2023 unless otherwise noted
----- End of picture text -----

Top 5 Shareholders	% Shares Outstanding
Terry Roberts	8.98%
Citicorp Nominees Pty Limited	6.21%
BNP Paribas Nominees Pty Ltd ACF CLEARSTREAM	5.94%
Mr Amilcar Albino Moreno	2.62%
Aymon Pacific Pty Ltd	2.26%
Top 5 Shareholders	26%
Top 20 Shareholders	38.97%
Directors & Associates	11.10%

10 May 2023

www.whitehawk.com

5

M A R K E T T R E N D S

2022 U.S. Threat Landscape

==> picture [512 x 393] intentionally omitted <==

FBI IC3 Report on 2022 – US$10.2 B in Reported US Losses, to include:

• Business Email Compromise – US$2.7B

• Phishing Victims – 300,497

• Personal Data Breach – 58.859

• 2,385 reported ransomware, losses of over US$34.3M

• 870 reports from critical infrastructure sector organizations who were victims of a ransomware attack

FBI Report: Internet Crime Report 2022

10 May 2023

6

www.whitehawk.com

M A R K E T T R E N D S

National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates	National Cybersecurity Strategy – 5 Pillar Approach to Cyberspace Resilience – Implementation June 2023 U.S. Cyber Regulatory Updates
Defend Critical Infrastructure 1			Disrupt and Dismantle Threat Actors 2			Shape Market Forces to Drive Security and Resilience 3			Invest in a Resilient Future 4			Forge International Partnerships to Pursue Shared Goals 5
~~Bill/Law/#~~			~~nsor~~						~~tee~~			~~Action~~
H.R. 8956	Rep. Gerry Connolly(D-VA)			FedRAMP Resilience Authorization Act			Government Operations			Signed to Law - 1/11/23
S. 1097	Rep. Ro Khanna (D-CA)			Federal Rotational Cyber Workforce Program Act			Cyber, Innovative Technologies & Info Systems (CITI)			Signed to Law - 6/20/22
S. 2520	Rep. Gary Peters (D-MI.)			State and Local Government CybersecurityAct			Homeland Security and Governmental Affairs			Signed to Law - 6/20/22

10 May 2023

www.whitehawk.com

7

M A R K E T T R E N D S

Australia Threat Landscape

Key findings July - December 2022 reporting period:

• 497 major breaches were reported compared with 393 in January to June 2022 – a 26% increase.

• 41% increase in data breaches resulting from malicious or criminal attacks . Malicious or criminal attacks accounted for 350 notifications – 70% of all notifications.

• Human error caused 123 notifications (25% of all notifications), down 5% in number from 129.

• Of all sectors, health care reported the most breaches (71 ), followed by finance (68).

Contact information remains the most common type of personal information involved in breaches.

==> picture [422 x 224] intentionally omitted <==

==> picture [168 x 200] intentionally omitted <==

==> picture [240 x 200] intentionally omitted <==

10 May 2023

8

www.whitehawk.com

M A R K E T T R E N D S

Australia 2022 Cyber Regulatory Updates

On 12 December 2022, the Office of the Australian Information Commissioner (OAIC) welcomed the passing of the Privacy Legislation Amendment (Enforcement and Other Measures) Bill 2022. This law’s provisions include:

• Commissioner with new and greater powers to quickly share information with other authorities about data breaches (s 33A)

• Commissioner with a new power to obtain information and documents relevant to an actual or suspected eligible data breach (s 26WU)

• Commissioner to assess the ability of an entity to comply with the Notifiable Data Breaches (NDB) scheme, including the extent to which the entity has processes and procedures in place to assess suspected eligible data breaches, and provide notice to the Commissioner and individuals at risk from such breaches (s 33C(1)(ca))

Significantly increases penalties for serious or repeated privacy breaches, which includes non-compliance with the NDB scheme (s 13G).

10 May 2023

9

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

==> picture [834 x 429] intentionally omitted <==

10 May 2023

10

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Product Line Foundations: Automated & Scalable

Annual or Continuous Hacker View of an Enterprise, SME or Suppliers/Vendors/Partners

==> picture [158 x 120] intentionally omitted <==

----- Start of picture text -----

Reconnaissance
Scanning
Gaining Access
Maintaining Access
Clearing Tracks
----- End of picture text -----

==> picture [264 x 154] intentionally omitted <==

----- Start of picture text -----

Networks OT Systems
Software Physical Security
----- End of picture text -----

Open Data Sets AI and Machine Learning Continuously Vetting, Integrating or Offering Next Generation Partner Solutions

==> picture [145 x 14] intentionally omitted <==

----- Start of picture text -----

Cyber SaaS and PaaS
----- End of picture text -----

10 May 2023

11

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

From Cybersecurity Compliance to Automated Resilience

A New Cyber Paradigm

• ü WhiteHawk Cyber Risk Radar: Continuous monitoring, prioritization, and near real-time mitigation of an enterprises' supply chain's cyber risks over time, including the identification and prioritization of a risk mitigation strategy.

• ü WhiteHawk Cyber Risk Scorecard: An executive level view of cyber risks based on open-source data, AI analytics, and custom Cyber Consultant commentary.

• ü WhiteHawk Cyber Risk Program: An outside-in second set of expert eyes monitoring, identifying, prioritizing, validating, and mitigating cyber risks to a company or organizations revenue and reputation.

• ü WhiteHawk Cyber Risk PaaS: An end-to-end Cyber Risk identification, prioritization and mitigation ecosystem that can effectively and affordably service your Business Clients continuously and seamlessly.

• ü WhiteHawk Cyber Risk Journey: Our Cyber Analysts work with you to match solution options to meet business objectives and priorities. From there we develop a maturity plan and adjust over time as your priorities change.

• ü WhiteHawk Innovative Partners: Keep up with the breadth of new innovative cyber vendors that are tailored to Fit your Business Needs.

• ü WhiteHawk Business Risk Suite : Industry-first suite that empowers businesses to guard against fraud and cyberattacks - for both their business and their employees.

Margins Advanced with Automation from 20% to 35% to 40%

10 May 2023

12

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Business Objectives 2023

Retain, advance & grow current Cyber Risk Radar &

Cyber Risk Program contracts across current pipelines as baseline revenue & for product improvement

Maximize Partnerships Re-engaging on Peraton, D&B, AWS on TransUnion SontiqC-SCRM POVs & WHK Business Suite RFPs for Federal, Embed Subscriptions State/Local, Federal for Business Clients of System Integrators & MSP’s, Financial & Critical Infrastructure Insurance Firms

Grow Consulting Group Partnerships focused on Cyber Risk Program, Cyber Risk Radar & Sontiq-WHK Suite

Optimized Company financial position with recurring revenue from SaaS/PaaS annual subscription contracts

10 May 2023

13

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

2023 Objectives, Pipeline & Projections

==> picture [88 x 65] intentionally omitted <==

Projections

• 2023 revenue projections on track with current contracts, active, broad Commercial Pipeline and Government RFPs

==> picture [88 x 65] intentionally omitted <==

Customer Renewal

• 80% or greater

• Retaining Clients for 2-4years

==> picture [88 x 65] intentionally omitted <==

New Sales Bookings

US$22M Pipeline to achieve growth benchmark $5.5M

• Cyber Risk Radar US$9.5M || Cyber Risk Program US$2M

• • Sontiq-WHK Business Suite US$10.5M

==> picture [88 x 66] intentionally omitted <==

Employee Retention

• Maintain current excellent employee retention of 80%-90%

• • Conversion of proven Interns to Full-Time

• Recruiting of new Cyber Interns

==> picture [88 x 65] intentionally omitted <==

Existing Customer Upsell/Cross-sell

• Federal Government CISO US$500K

• Commercial CISOs US$1.5M

• Manufacturers US$1M || Consulting Groups US$250K

==> picture [88 x 66] intentionally omitted <==

Product Roadmap Delivery

• Advancing roadmap w/theme on automation and scalability

• Delivering Integration with advanced cyber risk partners

• Additional automated Compliance Mapping into Action Plans

==> picture [88 x 65] intentionally omitted <==

Enterprise Marketing & Branding

• Go-To-Market Strategy Mapping Product Lines to Target Clients

• MSPs, Banks, Insurance Groups, Federal, State & Contractors

• PR, IR & Digital Marketing Campaigns in U.S. & Australia

• Cyber, Innovation, Zero Trust/CMMC 2.0 Thought Leadership

==> picture [88 x 66] intentionally omitted <==

Customer Needs Alignment

• Tailoring of platforms to meet evolving requirements

• Continuous advancement of platform features and new product lines

10 May 2023

14

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

2023 Sales Pipeline & Sales Channel Overview

1. SALES CHANNEL THROUGH CURRENT ENTERPRISE CLIENTS

• Enterprises – Manufacturing; DIB; Financial Sector; MSP

• Current Global Consulting Group Partners

2. GOVERNMENT RFI’S/RFP’S IN PARTNERSHIP WITH FEDERAL PRIMES PERATON, AWS, D&B (CMMC 2.0 DELAYED)

• Cyber Risk Monitoring Market Survey and Proposal – FRB Awaiting Final Decision

• Cyber Supply Chain Risk Management (C-SCRM) Requests for Information/Proposals – GSA RFI/RFP; DHS CISA RFI/RFP; Army

• Supply Chain Risk Management Sources Sought, Requests for Proposals, IRAD w/ Peraton

3. STATE & LOCAL AND UNIVERSITY PROOF OF VALUE (POV) & PILOTS

• Georgetown University Cyber Risk Program Pilot, Proposal & Contract

• Florida Critical Infrastructure Cyber Risk Radar POV Underway – 145 Entities

• Wisconsin Vendors Cyber Risk Radar POV & Proposal

4. 2023 SONTIQ-WHK BUSINESS SUITE EMBED (DELAYED BY MERGER W/TRANSUNION 2021-2022)

• Financial and Insurance Firms

• MSP’s

5. CONSULTING GROUP PARTNERSHIPS & POV’S FOR NEW PARTNERSHIPS

• BCG Client POV with Transition to Cyber Risk Program

• Lockhaven Solutions, 8 Degrees East, Fellsway Group POV’s

10 May 2023

15

www.whitehawk.com

Cyber Risk Program: Executive/Board Level Cyber Audit

Automated Annual or Continuous Hacker View

Take Control of Your Risks

Fast-Track Risk Discovery and Prioritization

Use Actionable, Prioritized Risk Mitigation Strategies

Automate to Allow Limited Workforce to Focus on the Business

10 May 2023

16

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Cyber Risk Program Features

Tailored to the Business Objectives, Needs, and Size of any Enterprise

CYBER RISK IDENTIFICATION, PRIORITIZATION, VALIDATION & MITIGATION ROADMAP

	Essential	Balanced	Premium
Virtual Consultation	✓	✓	✓
Continuous Cyber Risk Monitoring	✓	✓	✓
Quarterly Cyber Risk Scorecard In-Depth	✓	✓	✓
Dark Net & Cyber Threat Intelligence Monitoring	Annual	Quarterly	Continuous
Pen Testing - Risk & Compliance Validation		External	External & Internal
Internal Network Risk & Threat Monitoring, Instrumentation, Integration & Quarterly Reporting			✓
Real Time Red Team			✓
ADDITIONAL SERVICES
Validated Risks & Mitigation Options Mapped to Resourcing Roadmap
Additional Virtual SME Consults in Support of Executive Communication &	Decision Making

10 May 2023

17

www.whitehawk.com

Cyber - Supply Chain Risk Management (C-SCRM)

• C-SCRM: Ensuring all SW & HW Suppliers, Product Lines & Components are secure, resilient & compliant continuously

• Historically focused on point in time Risk Assessments, Compliance and Audits to meet Regulatory Requirements

• Transitioning to continuous global risk discovery, prioritization & mitigation of Cyber & Business Risks while ensuring compliance

==> picture [421 x 372] intentionally omitted <==

10 May 2023

18

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Cyber Risk Radar C-SCRM Platform Features

Tailored to the Supply Chain Risk Management Business Objectives, Processes & Risk Tolerance

CYBER AND BUSINESS RISK ASSESSMENT AND MONITORING

CYBER AND BUSINESS RISK ASSESSMENT AND MONITORING
	Essential	Balanced	Premium
Virtual Consultation	✓	✓	✓
One-time Cyber Risk Assessment	✓	✓	✓
Continuous Cyber Risk Monitoring		✓	✓
One-time Business Risk Assessment		✓	✓
Continuous Business Risk Monitoring			✓
API Access to Cyber Risk Scorecards			✓
C-SCRM GRC Executive Dashboard and Management			✓
ADDITIONAL SERVICES
Cyber Threat Intelligence Monitoring
SBOM Analysis, Testing and Monitoring

10 May 2023

19

www.whitehawk.com

Cyber Risk Mitigation Platform as a Service Marketplace

Tailorable for All Sectors: MSP/Financial/Insurance Business Clients, Across Critical Infrastructure, Federal or State Sector or Region

==> picture [960 x 362] intentionally omitted <==

----- Start of picture text -----

Focused Areas Aligned to Cyber Risk & FAIR Model
Results
Cloud Based Prioritized Risks Shopping List
Compliance
Maturity Planning
Vendor Vetting Testing Available for Sale
----- End of picture text -----

10 May 2023

20

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Cyber Risk PaaS Features

SCALABLE END TO END CYBER RISK IDENTIFICATION, PRIORITIZATION & MITIGATION CLOUD PAAS

	Essential	Balanced	Premium
White Labeling and Co-Branding	✓	✓	✓
Marketplace	✓	✓	✓
Cyber Threat Readiness Questionnaire	✓	✓	✓
CIS-Based Maturity Roadmap and Action Planning	✓	✓	✓
Cyber Consultation Scheduling	✓	✓	✓
News and Insights	✓	✓	✓
Cyber Risk Assessments (One-time or Quarterly)		✓	✓
Tailored Cyber Threat Readiness Questionnaire		✓	✓
Marketplace Solution Vetting and Onboarding Services		✓	✓
Cyber Consultation Services		✓	✓
Tailored Frameworks for Maturity Roadmap			✓
Revenue Sharing Business Model			✓

10 May 2023

21

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

200+ Innovative Solution Partners & Channels

==> picture [960 x 392] intentionally omitted <==

10 May 2023

22

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

The Team

==> picture [116 x 102] intentionally omitted <==

Terry Roberts, CEO, President and Founder

A global risk analytics, cyber intelligence and national security professional with over 20 years of Executive level experience across government, industry, and academia. Previously the Deputy Director of US Naval Intelligence, TASC VP for Intelligence and Cyber Engineering, and an Executive Director of Carnegie Mellon Software Engineering Institute. https://www.linkedin.com/in/terry-roberts-193493143/

==> picture [117 x 102] intentionally omitted <==

Soo Kim, Chief Operating Officer & Chief Product Officer

Previously the cybersecurity, technology strategy expert at Accenture Federal Services, Hewlett Packard Federal and VP at TASC. Experience in technical and business leadership, tactical execution, business operation, and solutions delivery. Bachelor’s degree in mathematics from Virginia Tech, a Certified Enterprise Architect and Scrum Master. https://www.linkedin.com/in/soo-kim-23655786/

==> picture [116 x 101] intentionally omitted <==

Kevin Goodale, CFO

CFO at Impressions Marketing Group Inc. from 2005 – 2016.

Career Commercial Financial and Contracting Manager with over 20 years at the CFO level, using degrees in accounting and management information science to reduce risk and increase profits. https://www.linkedin.com/in/kevin-goodale-6ba4383b/

10 May 2023

23

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

The Board

==> picture [103 x 102] intentionally omitted <==

Phil George, Non-Executive Director

Phil George has experience as a CEO, managing director and operations manager with a strong background in finance, cybersecurity and technology. Philip has previously worked as a general manager, technical director, global IT manager, team lead and IT manager in other organisations. For the past 16 years, Phil has primarily serviced the finance, technology, mining industries and was recently the Operations Manager for Uber Australia. Phil is the Founder of NURV Consulting, which delivers custom cloud-based solutions to small and medium businesses and the Founder and CEO of Bamboo, a mobile micro-investment platform.

==> picture [106 x 102] intentionally omitted <==

Melissa King, Non-Executive Director

Melissa King brings more than 20 years global experience as a senior executive, including her roles as Chief Executive Officer for both FIBA Women’s Basketball World Cup 2022 Organising Committee and Surf Life Saving Australia (SLSA) and executive roles with Sydney Opera House, Department of the Prime Minister and Cabinet APEC Australia 2007 Taskforce and the Governance Institute. A strategic, agile and innovative leader with extensive transformation, commercial and communications experience, Melissa has advised Boards and Government Agencies on strategy, governance and fundraising, and mentors emerging leaders.

==> picture [109 x 120] intentionally omitted <==

Brian Hibbeln, Non-Executive Director

Brian Hibbeln is currently a venture partner at Sinewave Venture Capital LLC, a venture capital firm with the mission of accelerating new technologies across the public and commercial sector. He was the Director of the US Remote Sensing Center- National Capital Region (Washington D.C.) for almost a decade, being instrumental in supporting the DoD and Intelligence Community with technology demonstrations and operational support to combatant commanders around the world. Brian Hibbeln has advised Boards and Government Agencies on Cyber Technologies, Intelligence Activities, Mergers and Acquisitions and the deep understanding of Government needs or requirements. Mr. Hibbeln’s extensive global networks and experience will open new channels for Whitehawk into the Australian, British and other markets globally.

10 May 2023

24

www.whitehawk.com

The Viewpoint Project with Dennis Quaid: WHK & PBS

==> picture [427 x 372] intentionally omitted <==

• Viewpoint Segment

• The Viewpoint Project provides a unique educational platform for curated content designed to inspire and illuminate.

• The Viewpoint team's goal is to provide innovative and unique content featuring the world's most influential organizations and individuals.

10 May 2023

25

www.whitehawk.com

==> picture [205 x 108] intentionally omitted <==

© 2023 WhiteHawk Limited

www.whitehawk.com