nCrypt Malaysia Corporate Profile
A board-presentable overview of who we are, our accreditations, the sectors we serve and the full cybersecurity service portfolio we deliver across Malaysia.
The full PDF is email-gated. Submit your corporate email on the next screen and we will send the latest version directly.
Who we are
nCrypt Malaysia is a specialist cybersecurity firm headquartered in Malaysia, focused on penetration testing, compliance advisory, managed detection and response and incident response for regulated enterprises. Penetration-testing delivery uses CREST-aligned methodology, and each proposal identifies the named consultants and their verifiable credentials. Our work is structured for the local regulatory environment — Bank Negara Malaysia RMiT, NACSA Cyber Security Act 2024, PDPA 2024, PCI DSS v4.0.1 and ISO/IEC 27001:2022.
We are vendor-neutral, accreditation-driven and accountable on every engagement. Reports are signed off by senior delivery leads, with credential evidence shared during procurement where required. Engagements are scoped by the consultant who will run them. Pricing is transparent and bracketed up-front.
Service portfolio
Offensive Security
Web, mobile, API, network, cloud, wireless, IoT, OT/ICS penetration testing; red team; intelligence-led testing aligned to BNM RMiT 10.49; social engineering and phishing simulation.
Compliance & GRC
BNM RMiT gap analysis, PCI DSS QSA-led assessments, ISO 27001 implementation and pre-audit, PDPA 2024 advisory, NACSA Act 854 readiness, virtual CISO retainers.
Detection & Response
Managed detection and response (MDR), SOC-as-a-Service, incident response retainers, compromise assessment, digital forensics, threat intelligence and tabletop exercises.
Sectors we serve
Financial services
Licensed banks, Islamic banks, investment banks, insurers, takaful operators, DFIs, e-money issuers and digital banks under BNM supervision.
Critical infrastructure
NCII sector lead entities under the Cyber Security Act 2024 across power, water, transport, healthcare, defence and government.
Telecommunications
Mobile network operators, fixed-line providers and major ISPs subject to MCMC oversight.
Technology & e-commerce
PCI DSS in-scope merchants and service providers, SaaS platforms and digital businesses operating across ASEAN.
Accreditations at a glance
- • CREST-aligned penetration testing methodology — firm application status published separately
- • PECB approved partner — ISO 27001 lead-implementer training
- • NACSA Cybersecurity Service Provider licence — applied / in progress
- • ISO/IEC 27001:2022 ISMS — implementation programme in progress
- • PCI Approved Scanning Vendor — in progress
Full status — including effective dates and scope — is published on our accreditations page.
Contact
nCrypt Malaysia
Website: ncryptmalaysia.com
General enquiries: contact form
Scoping calls: request a scope
Get the full PDF
Download the latest corporate profile, including detailed methodology pages, sample report excerpts and case-study summaries.
Request Full Corporate Profile (PDF)Not sure what you need?
Tell us what needs testing and we come back with a fixed fee within 48 hours — no hourly estimates.