cystack.net

What It Is

CyStack was founded in 2017 and is a full-stack cybersecurity company headquartered in Vietnam. It combines proprietary technology platforms with the power of a white-hat community to provide Web2 and Web3 businesses with full-lifecycle security protection, from product development to long-term operations. It has served more than 600 enterprise customers to date.

Core Features (by Dimension)

• Protection Types: Covers vulnerability scanning, penetration testing/red team–blue team exercises, endpoint security, password and secrets management, and blockchain security, creating a closed loop from prevention and detection to response.
• Deployment: Primarily offers SaaS-based cloud tools such as VulnScan, while also supporting CLI and SDK integrations such as Locker Secrets Manager. Small and midsize businesses can complete deployment within 1–2 weeks.
• Compliance Certifications: Holds ISO/IEC 27001, ISO 9001, and CREST penetration testing certifications, meeting strict enterprise compliance and standards requirements.
• Management and Alerts: Provides centralized dashboard management through the CyStack Platform, with support for 24/7 real-time monitoring, risk detection, and alert response.
• Integration Capabilities: Enterprise solutions integrate seamlessly with Jira, Slack, SSO, and SIEM. SDK support is available on the development side, enabling shift-left security.

Pricing

CyStack uses a tiered package model. Small and midsize businesses subscribe by tier, while large enterprises can obtain customized services. All commercial service packages currently include a free 1-year Locker Business license, but specific pricing requires contacting sales, so transparency is average.

Pros and Cons

Pros: A well-developed full-stack product ecosystem; highly efficient community-driven bug bounty testing; internationally recognized certifications and strong industry credibility; products that balance developer experience with operational security.

Cons: Pricing is not publicly available; brand reach is currently more concentrated in Vietnam and regional markets, and its global service capabilities still need further validation.

Who It’s For

Small and midsize businesses that need one-stop security management, as well as large enterprises with strict compliance and 24/7 monitoring requirements. It is especially suitable for teams involved in Web3 and blockchain businesses that need smart contract audits.

Access from China

Unknown (the source text does not provide relevant information).