What SecureMetric Technology does

SecureMetric Technology is a Malaysia-headquartered, publicly-listed digital security company founded in 2007 that delivers a five-pillar cybersecurity platform to governments and large enterprises across ASEAN. The portfolio spans Mobile Trust and App Protection (distributing Zimperium's machine-learning Mobile Threat Defense and Mobile Application Protection Suite), Advanced Digital Identity and Authentication (CENTAGATE and CENTAGATECLOUD FIDO-certified platforms, vFido mobile authenticators, and PKI), Trusted Cryptography and Certificate Management (Utimaco general-purpose and payment HSMs, Keyfactor Command certificate lifecycle, and the AgileSec post-quantum cryptography discovery platform), Data Security and Governance (database encryption, DLP, and the Privacy Enhancing Platform with homomorphic encryption), and Digital and AI Transformation Enablement (AI-enabled business process management, Electronic Document Management System, and the AATL-compliant SigningCloud PKI digital signing service integrated with Singpass, PNPKI, and Malaysian public CAs).

Underlying technologies combine proprietary products (CENTAGATE, AgileSec, PEP, SigningCloud, vFido) with tightly integrated third-party technology from Zimperium, Keyfactor, Utimaco, and Cryptomathic, supported by certifications including FIPS 140-2/140-3, Common Criteria, FIDO2, ISO 9001:2015, and PCI. The company operates wholly-owned subsidiaries across Malaysia, Indonesia, Singapore, the Philippines, and Vietnam, and is recognized as serving 8 of 11 ASEAN mission-critical government initiatives alongside more than a dozen leading banks and eWallet providers.

The business model blends subscription software licensing (PKI, authentication, certificate management), hardware sales (HSMs and tokens), recurring digital signing services, and professional services for PKI deployment, WebTrust certification, and training. Go-to-market relies on direct enterprise field sales combined with a channel partner network, with quote-based enterprise pricing rather than publicly listed rates. The company is led by co-founder and CEO Edward Law, with CFO Kelvin Yong and COO Nioo Yu Siong rounding out the C-suite.

Name

SecureMetric Technology

Legal name

Securemetric Technology Sdn. Bhd.

Website

https://securemetric.com

Company type

Public

Founded year

2007

Operating status

Operating

Headcount range

51–100 employees

Short description

SecureMetric Technology is a Malaysia-based, publicly-listed cybersecurity firm that delivers PKI, authentication, HSM, mobile security, and digital signing solutions to ASEAN governments and large financial institutions across five Southeast Asian markets.

Ownership category

akta.pro rank

Product category

Cybersecurity Solutions

NAICS

Financial Transactions Processing, Reserve, and Clearinghouse Activities (522320), Financial Transactions Processing, Reserve, and Clearinghouse Activities (52232), Security Systems Services (except Locksmiths) (561621), Computer Systems Design and Related Services (54151)

SIC

Services-Detective, Guard & Armored Car Services (7381)

akta.pro primary industry

Compliance Identity & KYC/KYB for Wallets (on-chain identity, reusable KYC, travel rule tooling) (FSAPACAL)

akta.pro secondary industries

Authorization & Permissions (delegation, allowances, capability-based access, session keys) (FSAPACAJ), Privacy, Data Protection & Compliance (zk compliance, GDPR/PII handling) (FSAPAJAM), 3D Secure, Authentication & Access Control (FSAMALAD), Proof of Reserves, Attestations & On-Chain Audit/Assurance (FSADALAK), Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)

Keywords

• Digital security solutions
• PKI infrastructure
• Hardware security modules
• Mobile threat defense
• Digital identity authentication

Headquarters

HQ city

Puchong

HQ country

Malaysia

HQ region

Asia

Offices6 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Software Licenses and Subscriptions: Enterprise software solutions including PKI platforms, mobile security (MTD/MAPS), authentication platforms, and certificate lifecycle management offered through subscription licensing models with recurring revenue from government and enterprise clients.
2. Hardware Sales (HSMs): Sale of Hardware Security Modules including general-purpose HSMs and payment HSMs (Atalla AT1000, CryptoSec) for financial institutions and enterprises requiring certified cryptographic hardware.
3. Professional Services: Implementation, consulting, and advisory services including PKI deployment, turnkey solutions, WebTrust certification guidance, training, and knowledge transfer for sustainable operations.
4. Digital Signing Platform: AATL-compliant digital signing services through SigningCloud, enabling legally binding electronic signatures integrated with regional digital ID systems.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels8 records

Core offering

SecureMetric Technology provides a comprehensive digital security platform spanning Mobile Trust & App Protection, Advanced Digital Identity & Authentication, Trusted Cryptography & Certificate Management, Data Security & Governance, and Digital and AI Transformation Enablement. The company sells proprietary software platforms (CENTAGATE, CENTAGATECLOUD, SigningCloud, AgileSec, Privacy Enhancing Platform), resells and integrates third-party technologies (Zimperium MTD/MAPS, Keyfactor Command, Utimaco HSMs, Atalla payment HSMs), and distributes hardware security tokens (SecureToken ST3) to government agencies and financial institutions across ASEAN.

Product overview

SecureMetric Technology offers a comprehensive cybersecurity platform spanning five core business areas: Mobile Trust & App Protection, Advanced Digital Identity & Authentication, Trusted Cryptography & Certificate Management, Data Security & Governance, and Digital and AI Transformation Enablement. The portfolio includes both proprietary products and integrated third-party technologies. Core identity offerings include CENTAGATE (on-premises) and CENTAGATECLOUD (cloud-based) authentication platforms, complemented by SigningCloud for PKI-based digital signing and vFido FIDO2 authenticators. Cryptographic solutions feature AgileSec™ for PQC readiness, Keyfactor Command for certificate lifecycle management, and Utimaco HSMs (general-purpose and payment variants including Atalla AT1000 and CryptoSec). Mobile security combines Zimperium's MTD and MAPS platforms with professional security assessments. Data security includes database encryption, DLP, cloud protection, and the Privacy Enhancing Platform (PEP) with homomorphic encryption. Digital transformation capabilities comprise AI-enabled low-code business process management, Electronic Document Management System, and legal digital signing. The company also offers hardware tokens (SecureToken ST3) and the CENTAGATE Box PKI appliance.

Differentiator

Problem solved

Functional benefit

Brands

• CENTAGATE: Authentication platform for identity and access management, available as on-premises or cloud-based (CENTAGATECLOUD) solution
• SigningCloud
• CENTAGATE Cloud
• vFido
• CENTAGATE Box
• SecureToken ST3
• PKI in a Box
• CentagateCloud
• AgileSec

Products and services

• Mobile Trust & App Protection Comprehensive mobile security solution protecting mobile devices and applications against evolving threats including malware, phishing, and advanced persistent threats. Includes Mobile Threat Defense (MTD) and Mobile Application Protection Suite (MAPS) for enterprises and government clients.
• Advanced Digital Identity & Authentication Post-quantum-ready digital identity solutions including Public Key Infrastructure (PKI), Identity and Access Management (IAM), FIDO-certified passwordless authentication (Passkey), and multi-factor authentication. Enables eIDAS 2.0 compliance for national digital ID initiatives.
• Trusted Cryptography & Certificate Management Enterprise-grade cryptographic solutions including Crypto Key Management, Certificate Lifecycle Management, and Hardware Security Modules (HSMs). Supports on-premises, cloud, and hybrid environments with FIPS and Common Criteria certified hardware.
• Data Security & Governance Data protection solutions including Database Encryption, Data Leak Prevention (DLP), Cloud Data Security, and Privacy Protection & Data Anonymization. Features homomorphic encryption platform for privacy-preserving data collaboration.
• Digital and AI Transformation Enablement AI-powered digital transformation solutions including AI-enabled business process management (low-code/no-code), Electronic Document Management System, and Legal Binding Digital Signing. Enables rapid digital solution delivery and secure document workflows for enterprises and government.
• CENTAGATE Authentication Platform On-premises authentication platform providing multi-factor authentication, centralized identity management, FIDO support, and scalable architecture for enterprises and government deployments. Supports SAML, RADIUS, RESTful APIs, and FIDO protocols.
• CENTAGATECLOUD Cloud-based authentication platform with same capabilities as CENTAGATE. Enables organizations to deploy scalable, strong authentication without on-premises infrastructure.
• SigningCloud Universal PKI-based digital signing platform, AATL-compliant. Integrates with trusted digital IDs including Malaysian public CAs, Singpass (Singapore), PNPKI (Philippines). Provides legally binding, tamper-evident digital signatures for enterprise and government.
• vFido Mobile Authenticator FIDO2-certified mobile authenticator for Android and iOS. Provides phishing-resistant multi-factor authentication. Supports both FIDO2 and FIDO U2F standards.
• Utimaco General-Purpose HSM FIPS and Common Criteria certified Hardware Security Modules for general enterprise use. Secures cryptographic operations, key storage, and supports crypto-agility with PQC upgrade capabilities. Includes u.trust GP HSM Se-Series portfolio.
• Atalla AT1000 Payment HSM PCI-certified payment Hardware Security Module for financial services. FIPS 140-3 Level 3 certified. Provides superior performance, remote management, multi-tenant support, and native EMV processing for payment transactions.
• CryptoSec Payment HSM PCI-certified payment HSM for banking and fintech. Enables fast, seamless integration and simplified migration for financial institutions globally.
• AgileSec Crypto Discovery & PQC AI-powered cryptographic discovery and Post-Quantum Cryptography readiness platform. Provides comprehensive cryptographic asset discovery, centralized CBOM inventory, proactive risk detection, and PQC migration roadmap. Supports on-premise, private cloud, or SaaS deployments.
• Privacy Enhancing Platform (PEP) Post-quantum proof homomorphic encryption platform enabling computations on encrypted data without decryption. Combined with Secure Multiparty Computation and Zero Knowledge Proofs for privacy-preserving inter-agency and inter-organization data collaboration.
• SecureToken ST3 FIPS 140-2 Level 3 certified cryptographic token. Common Criteria certified. Provides secure key storage and cryptographic operations for enterprise and government use.
• Keyfactor Command (Certificate Lifecycle Management) Certificate lifecycle management platform integrated into SecureMetric's Trusted Cryptography offerings. Provides centralized visibility and control over digital certificates, automated issuance, renewal, and revocation processes, and proactive monitoring to prevent expiry disruptions.
• AI-Enabled Business Process Management Platform AI-enabled business process management platform using low-code/no-code tools with AI capabilities to rapidly design, customize, and deploy turnkey digital systems. AI enables intelligent document processing, workflow optimization, and predictive analytics. Projects can be delivered in weeks instead of months.
• Electronic Document Management System Electronic Document Management System enabling generation, processing, sending, signing, and archiving of documents and emails. Integrates with Microsoft 365, Dynamics for Business Central, Dynamics for Sales, and document management systems.
• Mobile Threat Defense (MTD) Enterprise mobile endpoint security powered by Zimperium's machine learning engine. Provides on-device threat detection for device, network, phishing, and app attacks. Privacy-centric design with detection conducted entirely on-device.
• Mobile Application Protection Suite (MAPS) Comprehensive mobile app protection platform integrating four products: zScan (security/compliance scanning), zKeyBox (white-box cryptography), zShield (obfuscation/anti-tampering), zDefend (on-device threat defense). Managed via central dashboard.

Quantifiable outcome

• Trusted by 8 out of 11 ASEAN Mission-Critical Government Initiatives
• +2 more outcomes

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

AI capability4 records

Feature7 records

Partnerships

14 partnerships are on record, tiered strategic, core and supporting.

• VerichainsstrategicStrategic or Co-development Partner · 17 April 2026Strategic partnership announced on April 17, 2026 for cybersecurity collaboration. Verichains provides blockchain and smart contract security expertise.
• ZimperiumcoreTechnology or IntegrationZimperium is a mobile security company providing Mobile Threat Defense (MTD) and Mobile Application Protection Suite (MAPS). Securemetric serves as Zimperium's APJ VAR Partner of the Year 2025, distributing their machine learning-powered mobile security solutions across Southeast Asia.
• KeyfactorcoreTechnology or IntegrationKeyfactor provides certificate lifecycle management and crypto key management solutions. Securemetric integrates Keyfactor Command for automated certificate management across enterprise and financial institution deployments.
• UtimacocoreTechnology or IntegrationUtimaco provides Hardware Security Modules including the u.trust GP HSM portfolio and Atalla Payment HSMs (AT1000). Securemetric is a Value Added Reseller partner for Utimaco SafeGuard CryptoServer and distributes their HSM solutions across ASEAN.
• CryptomathiccoreTechnology or IntegrationCryptomathic provides cryptographic security solutions. Securemetric partners with Cryptomathic to deliver PKI and cryptographic management solutions for enterprise and government clients.
• PrimeKey (EJBCA)coreTechnology or IntegrationPrimeKey provides EJBCA, an open-source Enterprise PKI solution. Securemetric offers EJBCA implementation and support services across Southeast Asian markets.
• vFidocoreTechnology or IntegrationvFido provides mobile authentication solutions. Securemetric has achieved FIDO2 certification for vFido iOS and Android authenticators and integrates them into their authentication platform.
• FortanixsupportingTechnology or IntegrationFortanix provides confidential computing and key management solutions. Partnership enables Securemetric to offer enhanced data security capabilities.
• FeitiansupportingTechnology or IntegrationFeitian provides authentication tokens and security keys. Partnership extends Securemetric's authentication hardware portfolio.
• SecuGensupportingTechnology or IntegrationSecuGen provides fingerprint recognition solutions. Partnership enables biometric authentication integration capabilities.
• CentagatecoreTechnology or IntegrationCentagate provides CENTAGATE and CENTAGATECLOUD authentication platforms with FIDO-certified solutions. Securemetric owns and distributes the Centagate platform for enterprise authentication and identity management.
• Malaysian Public Certification AuthoritiescoreTechnology or IntegrationPartnership with three major public CAs in Malaysia for SigningCloud digital signature integration, enabling legally binding electronic signatures compliant with Malaysian digital signature regulations.
• Singpass (Singapore)coreTechnology or IntegrationSingpass integration with SigningCloud enables Singapore users to leverage their national digital identity for legally binding digital signatures.
• PNPKI (Philippines)coreTechnology or IntegrationPartnership with Philippines National PKI for SigningCloud integration, enabling Philippine users to use their digital IDs for compliant digital signatures.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Emerging players

• HYPR: Passwordless and FIDO2-based authentication specialist whose phishing-resistant MFA directly competes with SecureMetric's vFido and CENTAGATE passwordless authentication offerings, particularly in enterprise banking and fintech segments.

Direct peers

• DigiCert: DigiCert is a leading certificate authority and PKI platform whose TLS/PKI, document signing and IoT identity products compete directly with SecureMetric's PKI, SigningCloud and Trusted Cryptography lines.
• Keyfactor: Certificate lifecycle management and crypto-agility vendor whose EJBCA roots place it in the same PKI / certificate-management competitive set as SecureMetric's Trusted Cryptography portfolio.
• Cryptomathic: European cryptography and PKI vendor, also a SecureMetric technology partner; directly comparable in PKI/eID and signing solutions for banks and governments.
• WISEKEY: Swiss-based PKI and digital identity / IoT security vendor with roots in secure hardware (smart cards, HSM-style modules) — directly analogous to SecureMetric's SecureToken ST3 hardware and PKI positioning.
• Entrust: Global PKI, digital certificate, and identity management vendor directly competing with SecureMetric's CENTAGATE, SigningCloud and certificate-lifecycle offerings into banks and governments.
• Thales (SafeNet / Imperva): Thales's SafeNet HSM and PKI portfolio competes head-to-head with SecureMetric's Utimaco-resell and proprietary authentication offerings, especially into financial institutions and ASEAN government PKI programs.
• GlobalSign: GlobalSign operates a comparable PKI / digital identity / signing platform and has active APAC distribution, making it a close functional peer to SecureMetric's PKI and SigningCloud offerings.

Broad incumbents

• Utimaco: Independent HSM specialist whose Atalla payment HSMs and u.trust GP HSMs SecureMetric resells in ASEAN; Utimaco's own direct sales channel competes against SecureMetric in the same government and FSI tenders.
• IDEMIA: Large global identity and secure-credential vendor covering government eID, banking cards and authentication — overlaps with SecureMetric on national digital ID and authentication but at materially larger scale across broader verticals.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/user/SecureMetric
• Facebookfacebook.com/securemetric
• LinkedInlinkedin.com/company/secure-metric-technology-sdn.-bhd.
• Instagraminstagram.com/smetric/?hl=en
• Xx.com/securemetric

Compliance13 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Subsidiaries9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SecureMetric Technology