incore.com.my

What It Is

Incore Innovation is a Malaysian identity and data security service provider. Its official positioning is to protect the security of identities, data, assets, and transactions. Its capabilities span identity verification, authentication, biometrics, encryption, smart cards, cybersecurity assessment, IT control reviews, and compliance consulting. Rather than a single-purpose security SaaS product, it is closer to a security consulting, custom development, and systems integration vendor for government and enterprise customers.

Core Capabilities and Protection Areas

For identity security, Incore mentions capabilities such as eKYC/eKYB, remote document verification, OCR, liveness detection, document authentication, multimodal biometrics, fingerprint, facial, iris, and palm vein recognition. For data security, it emphasizes encryption, PKI, digital signatures, end-to-end encryption, and compliance-driven data protection. A notable specialty is Java Card smart card Applet development, with support for Malaysia national ID projects, JCOP4, ISO/IEC 7816, ISO/IEC 14443, and GlobalPlatform, as well as integration with personalization systems, key management infrastructure, and card issuance workflows.

Cybersecurity, Management, and Compliance

Its cybersecurity services include IT risk assessment, asset inventory and classification, threat identification, vulnerability assessment, risk prioritization, control implementation, continuous monitoring, and review. IT control reviews cover governance, access control, policy compliance, operational controls, incident response, and recovery planning. The IT Attestation section mentions support for SOC 1/2/3, ISO 27001, HIPAA, PCI-DSS, GDPR, third-party risk assessment, and ITGC. Its management and alerting capabilities are described only at the level of assessments and continuous monitoring; there is no clear information about a dedicated console, real-time alerts, or SIEM integration.

Pricing and Ease of Use

The official website only states “Competitive Pricing” and “Affordable, fair, value-driven,” without publishing plans, unit prices, or SLAs. Because the services are highly customized, procurement will typically require requirement interviews, solution design, and project-based quotations. The upside is that it can fit complex identity systems, embedded devices, smart cards, and government compliance scenarios. The downside is that deployment speed and cost predictability are weaker than with standardized cloud security products.

Pros, Cons, and Best Fit

Its strengths lie in a relatively complete chain of capabilities across identity security, smart cards, biometrics, encryption, and compliance auditing, along with the ability to implement custom software, firmware, drivers, SDKs, and open-source systems. Its weaknesses are limited public information on case studies, customer testimonials, service levels, delivery methodology, and pricing transparency. It is better suited to government agencies, financial institutions, and mid-to-large organizations that need national ID, ePassport, smart card, access control, eKYC, cybersecurity assessment, or compliance audit projects.

China Access and Alternatives

The website does not provide information about access from mainland China, RMB payment, or local support, so its accessibility should be considered unknown. For identity verification, MLPS, ISO 27001, data security, or cybersecurity assessment projects in China, buyers usually also need to consider local compliance requirements, cross-border data transfer, cryptography compliance, and localized services. Alternatives to compare include domestic MLPS assessment providers, cloud vendor security services, eKYC/identity verification vendors, and local cybersecurity consulting firms.