Licensed Security Provider Check
Is a pen testing or SOC firm licensed in Malaysia or Singapore?
Each square is one firm licence. Hover for the firm; click a group to filter the table below; click empty space to reset.
Background readingPenetration testingWhat a SOC watches
Every licence
| Licence holder | Country | Service | Status | Licence ID or valid to | Cyber Trust Mark |
|---|
Licensing FAQ
Who needs a licence in Malaysia?
Firms and people providing managed SOC monitoring or penetration testing in Malaysia, under the Cyber Security Act 2024. NACSA licences run for one year.
Who needs a licence in Singapore?
Firms and individuals offering penetration testing or managed SOC monitoring to the Singapore market, under the Cybersecurity Act 2018, licensed by CSA's CSRO.
What does an expired Malaysian licence mean?
No current licence for the firm appears in the register as downloaded. Ask for its current licence letter before you sign.
A firm is not on either list. Is it unlicensed?
Not always. Only pen testing and managed SOC for Malaysian or Singapore clients need these licences. Search the registered company name, since trading names differ.
What is the Cyber Trust Mark tier?
Singapore groups licensed firms by Cyber Trust Mark tier or an equivalent certification, from Promoter (Tier 3) to Advocate (Tier 5). Others sit under Other licensees.
How fresh is the data?
Both lists are rebuilt by hand from the official downloads; each list's date is shown above the results.
Sources: NACSA licence holder list (Malaysia) and CSA CSRO licensed service provider lists (Singapore).