NACSA licence in progress
CREST-aligned · Certified network consultants

Network resiliency assessment
services Malaysia.

Switching, routing, firewall, and endpoint architecture reviews. Our consultants validate resilience by hand, delivering Bank Negara RMiT, PDPA, PCI DSS, and ISO 27001-ready evidence to ensure high availability and robust security.

CONSULTANT CERTIFICATIONS

CREST-alignedCCNPCCIECisco CyberOpsCISSPOSCP
Core Network Architecture Review — Final Report
NCR-2026-0714 · NIST SP 800-53 · CVSS 3.1
RETESTED
2 Critical5 High9 Medium14 Low
BGP hijacking susceptibility via lack of RPKI9.1Fixed
Unencrypted OSPF authentication on core router8.2Fixed
VLAN hopping vulnerability on edge switch7.5Fixed
Mapped to BNM RMiT Appendix 10 · PoC evidence attachedSample report →
6
Network scopes
RMiT
Evidence mapping
Manual
Config review
90-day
Free remediation retest
CHOOSE A SCOPE

What to test, how long it takes, what you get

If you are comparing providers, the difference is not the scanner list. It is whether the team can prove architectural flaws and produce evidence your auditor, board and engineers can all use.

SCOPEBEST FORTYPICAL DURATIONDELIVERABLE
Campus Network AssessmentCorporate offices, wired & wireless networks.4–10 testing daysVulnerability findings, segmentation analysis, and 802.1X review.
Datacenter ArchitectureCore switching, routing protocols, and firewalls.5–12 testing daysHigh-availability assessment, ruleset optimization, and routing analysis.
Cloud Network (VPC) AssessmentAWS, Azure, and GCP network transit and peering.4–10 testing daysMisconfiguration detection, IAM network boundaries, and Transit Gateway analysis.
SD-WAN & Branch SecurityDistributed branch networks and edge firewalls.3–8 testing daysTunnel encryption validation, edge security review, and zero-trust alignment.
EXPAND WITHOUT STARTING OVER

Start with SOC 2. Every other framework gets easier.

One control maps to many frameworks. Test and evidence it once, and the same work counts toward the next standard your buyers or regulator ask for.

SOCSTART HERE

SOC 2

The usual starting point for SaaS and platform teams. One programme covers roughly 70% of what the next framework asks for.

Controls in scope84
Pentest evidenceReusable
Readiness100%
BNM RMiT
Bank Negara Malaysia — Risk Management in Technology
PDPA Malaysia
Personal Data Protection Act 2010
NACSA / Act 854
Cyber Security Act 2024 and NACSA requirements for NCII entities
ISO 27001
ISO/IEC 27001:2022 — Information Security Management Systems
SOC 2
SOC 2 Type I and Type II
PCI DSS
PCI DSS 4.0

Indicative overlap based on shared control coverage · confirmed against your estate during scoping

NINE TESTING SCOPES

Comprehensive resiliency testing

From core datacenter infrastructure to remote branch offices — manual-led architectural reviews across the whole estate.

01

Campus Network

Wired and wireless network segmentation, port security, and 802.1X testing.

Network segmentation802.1X and NAC bypassRogue device detection
Learn more
02

Datacenter Architecture

Core switching, routing protocols, and high-availability architecture.

BGP and OSPF securityRedundancy and failoverCore switch configuration
Learn more
03

Cloud Network Security

VPC peering, Security Groups, Transit Gateways in AWS/Azure/GCP.

VPC peering analysisSecurity Group reviewTransit Gateway security
Learn more
04

SD-WAN & Branch

IPsec tunnels, edge firewall configurations, and branch isolation.

IPsec encryption reviewEdge firewall testingBranch network isolation
Learn more
05

Firewall Ruleset Review

Policy optimization, redundant rules, and overly permissive access.

Redundant rule identificationPermissive access reviewPolicy optimization
Learn more
06

Wireless Security

WPA2/WPA3 enterprise, rogue AP detection, and guest isolation.

WPA2/WPA3 testingRogue AP detectionGuest network isolation
Learn more
07

Endpoint Network Security

VPN configurations, split-tunneling, and zero-trust network access (ZTNA).

Split-tunneling risksVPN gateway securityZTNA policy review
Learn more
08

IoT & OT Network Security

SCADA/ICS network segmentation, embedded device isolation.

ICS/SCADA segmentationIndustrial protocol analysisDevice isolation
Learn more
09

Red Team Network Ops

Adversary simulation focusing on lateral movement and network pivoting.

Lateral movement pathsNetwork pivotingDetection and response
Learn more
METHODOLOGY

NIST 800-115 & CIS Benchmarks — every engagement, same discipline

MITRE ATT&CK for adversary technique coverage, CIS Benchmarks for network appliances. Aligning to recognised standards means findings translate into the control frameworks your auditors already use.

01

Scoping and planning

Define network diagrams, IP ranges, and rules of engagement. Gather target information and obtain authorisations.

02

Architecture Review

Analyze topology design, redundancy, and segmentation against industry best practices.

03

Configuration Analysis

Review switch, router, and firewall configurations for weaknesses, default credentials, and misconfigurations.

04

Vulnerability Assessment

Identify known CVEs in network appliances and validate exposure.

05

Attack Simulation

Safely test segmentation, spanning tree attacks, and routing manipulation to validate resilience.

06

Reporting

Deliver findings with risk ratings, proof of concept, and architecture remediation guidance.

DELIVERABLES

What lands at the end of the engagement

A structured pack, not a scanner export. We walk your technical team through the findings on a debrief call so the architecture fixes are understood, not just documented.

Board-ready executive summary
What was tested, what an attacker could achieve, and what it means commercially.
Technical report with CVSS-scored findings
Reproduction steps for every finding so engineers can confirm the issue themselves.
Proof-of-concept evidence captures
Screenshots and request/response evidence, with personal data masked.
Prioritised remediation guide
Written for the engineering team and ordered by exploitability, not page number.
Attestation letter
Suitable for customers, procurement and regulators.
Retest report
Free verification after fixes deploy, typically scheduled 30–60 days after the final report.

Why teams pick nCrypt

CREST-aligned, Network-certified

Engagements follow strict scoping and reporting discipline; consultants hold CCIE, CCNP, CISSP.

BNM RMiT evidence mapping

Financial-sector findings map into RMiT remediation and board-reporting workflows.

Reports engineers can act on

Clear risk ratings, configuration fixes and architecture remediation, not a scanner export.

Retest included

Free verification testing after remediation, so fixes are proven rather than assumed.

ACCREDITATIONS & TECHNOLOGY PARTNERS

CREST-aligned methodologyCEH certifiedPCI DSSCrowdStrikePalo Alto NetworksFortinetTenableCyberArk
ALL TESTING SCOPES

Network assessment services by scope

Campus Network Assessment
Wired/wireless networks, NAC, guest isolation
Datacenter Architecture Review
Core switching, routing, firewalls
Cloud Network (VPC) Assessment
AWS, Azure, GCP network security
SD-WAN & Branch Security
IPsec tunnels, edge firewalls
Firewall Ruleset Review
Policy optimization, permissive access
Wireless Security Review
Corporate Wi-Fi, rogue AP, WPA enterprise
Endpoint Network Security
VPN, split-tunneling, ZTNA
IoT & OT Network Security
SCADA, ICS, industrial protocols
Red Team Network Operations
Lateral movement, network pivoting
CREST-aligned Penetration Testing
Assurance format for regulated procurement
Intelligence-led Network Testing
Threat-led scopes for higher-risk environments

Questions buyers ask

Pricing is scoping-based rather than packaged, because cost is driven by the number of locations, network complexity, device count, compliance evidence requirements, and retesting needs. A 15-minute scoping call usually produces an accurate proposal within 48 hours of NDA exchange.

nCrypt Malaysia company logo

Tell us the scope.
Proposal within 48 hours.

A free 15-minute scoping call, mutual NDA, then a written proposal covering scope, methodology, testing window, consultant credentials and commercials. Kickoff is typically 5–10 business days after signing.

sales@ncrypt.com.my · Mon–Fri 9AM–6PM MYT · Reply within 1 business day

Rough it out firstNO OBLIGATION

Pick what's in scope. We'll confirm the exact fee after the scoping call.

Targets selected2
Indicative testing days4–6 days
Report + retestIncluded

Typical for this shape: one window, findings raised as they're confirmed, retest 30–60 days after sign-off.

Send this scope

Not sure what you need?

Tell us what needs testing and we come back with a fixed fee within 48 hours — no hourly estimates.