WHITEHAWK LIMITED — Investor Presentation 2021

Sep 26, 2021

DISRUPTING THE B2B CYBER SECURITY MARKET

==> picture [720 x 401] intentionally omitted <==

27 September 2021

1

www.whitehawk.com

DISRUPTING THE B2B CYBER SECURITY MARKET

SAFE HARBOUR STATEMENT

This information is given in summary form and does not purport to be complete. Information in this presentation, including financial information, should not be considered as a financial projection, advice or a recommendation to any particular or potential investors in relation to subscribing for securities in WhiteHawk. Before acting on any information you should consider the appropriateness of the information having regard to these matters, any relevant offer document and in particular, you should seek independent financial advice. All securities involve risks, which include (among others) the risk of adverse or unanticipated market, financial or political developments and, in international transactions, currency risk. This presentation may contain forward looking statements including statements regarding our intent, belief or current expectations with respect to our businesses and operations, market conditions, revenues, market penetration, and results of operations. Readers are cautioned not to place undue reliance on these forward looking statements. WhiteHawk does not undertake any obligation to publicly release the result of any revisions to these forward looking statements to reflect events or circumstances after the date hereof to reflect the occurrence of unanticipated events. While due care has been used in the preparation of forward looking information, actual results may vary in a materially positive or negative manner. Forecasts and hypothetical examples are subject to uncertainty and contingencies outside WhiteHawk's control.

27 September 2021

2

www.whitehawk.com

R I S K I N T H E D I G I T A L A G E

Digital Age Impact:

Global Threat

• Everyone is a Target – Everyone has Data that is worth $

• Online Crime, Fraud & Disruption is lucrative, low cost of entry, easy to scale across the many, hard to investigate/prosecute

• Cybersecurity Market is Complex with No Silver Bullet

Know Your Digital Footprint

Criminals have a breadth of insight & access to your Company & Individual Info across an open WWW

Risk to Revenue, Reputation, Operations

• Identify, Prioritize & Mitigate Key Risks as a Company Team - Team Sport

• The Cumulative Effect of Legacy IT/HW/SW

==> picture [399 x 428] intentionally omitted <==

Majority of Countries are Losing 1-2% of GNP Annually

27 September 2021

3

www.whitehawk.com

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Information Security & Risk Management Market

Market Segment	2020	2021	Growth (%)
Application Security	3,333	3,738	12.2
Cloud Security	595	841	41.2
Data Security	2,981	3,505	17.5
Identity Access Management	12,036	13,917	15.6
Infrastructure Protection	20,462	23,903	16.8
Integrated Risk Management	4,859	5,473	12.6
Network Security Equipment	15,626	17,020	8.9
Other Information Security Software	2,306	2,527	9.6
Security Services	65,070	72,497	11.4
Consumer Security Software	6,507	6,990	7.4
	$133,776B	$150,409B	12.4%

Total

End User Spending by Segment 2020-2021 ($M USD)

27 September 2021

www.whitehawk.com

4

E M P O W E R I N G A F E A R L E S S I N T E R N E T

WhiteHawk Cybersecurity Exchange

Problem: How to enable all businesses and organizations to continuously Identify and Mitigate their key Digital Age Risks in near real-time and within budget

Solution: The Only Online Cyber Risk Platform with end-to-end service, from Virtual Consult to Maturity Model to Automated Action Plan to Smart Risk Mitigation Options

Key Online Account Features Include:

• Fast tracks all risk discovery, prioritization and mitigation

• Saves limited manpower and resources

• Delivers comprehensive action plans to address key cyber risks

• Easy to select impactful, easy to implement, cost-effective solutions via marketplace

Provides decision makers with executive level risk context & solution options

27 September 2021

www.whitehawk.com

5

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Virtual Consult: Advanced Cyber Risk Journey

==> picture [353 x 369] intentionally omitted <==

==> picture [333 x 369] intentionally omitted <==

27 September 2021

6

www.whitehawk.com

Next Generation Online Marketplace

==> picture [720 x 421] intentionally omitted <==

27 September 2021

www.whitehawk.com

7

E M P O W E R I N G A F E A R L E S S I N T E R N E T

Cyber Risk Scorecard Features

Cyber Risk Identification, Prioritization, Compliance Maturity Baseline & Mitigation Strategy	Cyber Risk Identification, Prioritization, Compliance Maturity Baseline & Mitigation Strategy	Cyber Risk Identification, Prioritization, Compliance Maturity Baseline & Mitigation Strategy
	Snapshot	In-Depth
1 Hour Virtual Consultation and Cyber Risk Review	✓	✓
Cyber Risk Profile – Identification of Key Risks to Revenue and Reputation	✓	✓
Cyber Risk Maturity Roadmap and Action Planning	✓	✓
Path to CMMC Review with CMMC Registered Practitioner	✓	✓
Tailored Solution Options Review	✓	✓
Security Rating and Risk Vector Analysis Results		✓
NIST 800-53, NIST 800-171, CIS, and CMMC Compliance Overview		✓
FAIR Overview of Cyber and Operational Risks in Financial Terms.		✓

27 September 2021

8

www.whitehawk.com

D I S R U P T I N G T H E B 2 B C Y B E R S E C U R I T Y M A R K E T

Cyber Risk – Compliance

Estimation of an Entity’s Overall Compliance Health

• Compliance: The overall compliance

score is how much of the specified framework we believe you are following, based on platform validation and selfattestation.

• Completeness: The level of

confidence in the estimation. Without access to internal systems and processes, only able to provide a score based on the information available and how much it aligns with the controls in the framework.

• Confidence: The degree to which the

compliance requirements can be measured with the collected information. This score is generated by matching collected artifacts to framework control areas. Each area of the framework has requirements that can be met by policy or configuration

==> picture [433 x 356] intentionally omitted <==

27 September 2021

9

www.whitehawk.com

S A A S e r v i c e I m p r o v e m e n t D i s c u s s i o n

Cyber Risk Scorecard Added Features

FAIR Analysis enables you to understand your cyber risk exposure or that you are taking by working with a particular vendor or supplier.

==> picture [642 x 355] intentionally omitted <==

27 September 2021

10

www.whitehawk.com

Cyber Risk Scorecard Results Summary

We are pleased to present the results of the WhiteHawk Cyber Risk Scorecard. This section is an executive overview. Subsequent sections provide associated descriptions and context to our findings and solution options.

Company	Company	Company	Company	Company	Domain	Domain	Domain	Domain	Domain	Domain
mongodb					mongodb.com
Security Rating Ratings measure a company's relative security effectiveness.					Risk Vector Performance Risk Vector grades show how well the company is managing each risk vector.
C(76.0/100)		Advanced: Intermediate: Basic:		100 – 80 79 – 70 60 – 0	Compromised Systems: Communications Encryption: Attack Surface:		B B A		System Patching: Application Security: Email Security: Public Disclosure:	B F A B
Factor Analysis of Information Risk (FAIR) - Annualized Risk Forecasted annualized loss magnitude risk of a potential loss to your company.					Prioritized Areas of Focus WhiteHawk Cyber Analyst has identified top-3 Focus Areas the company should consider.
Most Likely:	$87,482.95				Focus Area 1:			Application Security
Minimum:	$6,107.19				Focus Area 2:			Compromised Systems
Maximum:	$2,996,895.97				Focus Area 3:			Communications Encryption
Solution Options Solution options that address primary business risks identified in the Cyber Risk Scorecard. Alternatives for each are included in the product details section.
Essential Bundle − Flexera Software: FlexNet Manager for Engineering Applications − Micro Focus Software Inc.: Identity Administration 12 Month			Balanced Bundle − ClearNetwork Services: SOC-As-A-Service − Juniper Networks: SRX Series Services Gateways − Trend Micro: Deep Discovery Analyzer			Premier Bundle − Trend Micro: Trend Micro 24/7 Support − Micro Focus Software Inc.: Sentinel Enterprise − Cyber BDA: Cyber Sales Force TRAINING − Micro Focus Software Inc.: Aegis Adapter for AppManager
For more solution options, visitwww.whitehawk.com/marketplace

27 September 2021

11

www.whitehawk.com

Global Business Risk Co-Sell Agreement

WhiteHawk Sales Objective 1: Roll-out to their/our Public Sector & Contractor clients via integration of a “Cyber Vulnerability Assessment Powered by WhiteHawk” – Focus on Vendor/Supply Chain Risk Management

WhiteHawk Sales Objective 2: Embed the Cyber Risk Scorecard as part of global commercial subscription base

• ⏤ Working with Commercial Sales Leads across Financial, Insurance, and Managed Service Providers

WhiteHawk Sales Objective 3: Utilize Cyber Risk Scorecard data as part of internal business risk data and intelligence analysis

Activities to support Objectives:

• ⏤ Partnership Agreement - Completed

• ⏤ Supplier Onboarding – Completed

• ⏤ Development of Use Cases – Completed Use Case #1

• ⏤ Tech Integration - Completed

• ⏤ Finalizing Pricing, Marketing, Pipeline, Contracts – September & October

27 September 2021

12

www.whitehawk.com

Member of AWS Partner Network

==> picture [621 x 360] intentionally omitted <==

No Contract Vehicle Required by Government nor Industry Clients

27 September 2021

13

www.whitehawk.com

Member of AWS Partner Network (APN)

WhiteHawk Sales Objective 1: Make available the Cyber Risk Scorecard on AWS Marketplaces - Completed

⏤ Activities:

• ⏤ Integration Testing - Completed

• ⏤ Finalize APN onboarding - Completed

• ⏤ Meeting/demo with Federal Sales Team – late September 2021

WhiteHawk Sales Objective 2: Develop a new Cyber Risk Scorecard focused on maturity of AWS Federal Enclave Platform/Services. AWS has the raw security controls data but not in their business model to develop/deliver comprehensive, automated reports.

⏤ Activities:

• ⏤ Initial meetings held

• ⏤ Specifics being of AWS approach being developed in 2021

• ⏤ Potential to kick-off channel early 2022

https://aws.amazon.com/marketplace/pp/prodview-t7qm4zw4kiovi

27 September 2021

14

www.whitehawk.com

Active 2021 Sales Opportunities (USD)

Opportunity	Quote Name	$ Range	Progress	Target
Global Manufacturer	Cyber Risk Radar	$$$	Quote	Q3
Social Media Company	Cyber Risk Radar POC	$	Request POC	Q3
Government	Cyber Risk Radar	$	Request	Q3
Insurance Sector	Cyber Risk PaaS	$	Request	Q3
Defense Contractor	Cyber Risk Radar - 1000	$$	Request	Q3
Financial Institution	Sontiq & WH SMB Suite	$$$	Proposal	Q4
Financial Institution	Sontiq & WH SMB Suite	$$$	Quote	Q4
Bank	Cyber Risk Radar	$	Request	Q4
Bank	Cyber Risk Program	$	Quote	Q4
Large Retail	Cyber Risk Program	$	Proposal	Q4
Government	Cyber Risk Partners	$$$	SB RFP	Q4
Social Media Company	Cyber Risk Radar Program	$$$	Request	Q4

$<150K $$>200K $$$>1M USD

Majority Also Map to Mutual Pipeline with AWS Federal/Public Sector

27 September 2021

15

www.whitehawk.com

DISRUPTING THE B2B CYBER SECURITY MARKET DISRUPTING THE B2B CYBER SECURITY MARKET

Corporate SnapshotCorporate Snapshot

==> picture [531 x 279] intentionally omitted <==

----- Start of picture text -----

||||||||||
|---|---|---|---|---|---|---|---|---|
|Top 5 Shareholders|% Shares|
|Outstanding|
|Top 5 Shareholders|% Shares|
|Outstanding|
|Terry Roberts|9.81%|
|Terry Roberts|9.81%|
|ASX Ticker|WHK|ASX Ticker|Shares on issue|Shares on issue227 m|Last share price|Last share price$0.295|Vivien Enterprises Pte LtdBNP Paribas Nominees Pty Ltd ACF Clearstream|7.49%6.90%|
|WHK|227 m|$0.19|
|BNP Paribas Nominees Pty Ltd|2.78%|
|BNP Paribas Nominees Pty Ltd|3.26%|
|Mr Amilcar Albino Moreno|2.47%|
|Mr Amilcar Albino Moreno|2.86%|
|J P Morgan Nominees Australia Pty|2.21%|
|Ltd|
|Undiluted Market cap|Net Cash|Listing Date|Aymon Pacific Pty Ltd|2.76%|
|Undiluted Market capA$66.97m|~ A$3.740 mNet Cash|24 Jan 2018Listing Date|
|A$43.13m|as of 31 Dec 2020|~ A$2.644 m|24 Jan 2018|Top 5 Shareholders|24.76%|
|Including receivables|as of 30 June 2021|
|Top 5 Shareholders|25.60%|
|Top 20 Shareholders|37.71%|
|Directors & AssociatesTop 20 Sharehold|rs|11.63|7|%.61%|
|All figures are as of 22 March 2021 unless otherwise noted|
|Directors & Associates|11.42%|
|All figures are as of 10 Sep 2021 unless otherwise noted|

----- End of picture text -----

27 September 2021

16

www.whitehawk.com

For More Information

https://www.whitehawk.com/whitehawk-limited

Ø Whitehawk Cyber Risk Journey: https://www.whitehawk.com/cyber-risk-journey

Ø WhiteHawk Cyber Risk Radar: https://www.whitehawk.com/cyber-risk-radar

Ø WhiteHawk Cyber Risk Scorecard: https://www.whitehawk.com/cyber-risk-scorecard

Ø WhiteHawk Cyber Risk Program: https://www.whitehawk.com/cyber-risk-program

Ø WhiteHawk Cyber Risk PaaS: https://www.whitehawk.com/cyber-risk-paas

WhiteHawk Innovative Vendor Partners: https://www.whitehawk.com/innovative-vendors WhiteHawk Business Risk Suite : https://www.whitehawk.com/business-risk-suite WhiteHawk CMMC: https://www.whitehawk.com/cmmc

27 September 2021

17

www.whitehawk.com

==> picture [720 x 406] intentionally omitted <==

27 September 2021

18

www.whitehawk.com