What CyStack does

CyStack is a Vietnam-headquartered cybersecurity firm founded in 2017, operating under the legal entity Vietnam CyStack JSC with offices in Hanoi and Toronto. The company sells a platform-plus-modules security stack anchored by the CyStack Platform for centralized risk detection and tracking, supplemented by specialized products including Locker (a zero-knowledge, end-to-end encrypted password manager), CyStack Endpoint (endpoint protection and DLP), WhiteHub (a bug bounty and vulnerability disclosure platform connecting organizations with 4,000+ security researchers), CyStack VulnScan (automated vulnerability scanning), Data Leak Detection, and the Trust Center compliance profile product. It also delivers professional security services — penetration testing, red teaming, cloud and blockchain audits, 24/7 SOC monitoring, DFIR, vulnerability management, and security training — sold via custom statements of work, with SMB-tier self-service security packages available online. Its customer base spans small and medium businesses, large enterprises, and Web3/blockchain organizations, with named enterprise users including One Mount Group, VinCSS, VietnamCredit, dzcard, and Cellframe.

Revenue is generated through three streams: recurring SaaS subscriptions across Locker, CyStack Endpoint, WhiteHub, VulnScan, Data Leak Detection, and Trust Center (priced from $0 freemium up to $199.99 for Trust Center Business); quote-based enterprise subscriptions; and professional services billed under custom SOWs. Go-to-market is multi-modal: direct enterprise field sales for large organizations, self-service online purchase for SMBs with deployment in 1–2 weeks, and community-led distribution through WhiteHub's researcher network. Distribution is further augmented by international accelerators, including the 2025 K-Startup Grand Challenge in Korea with two signed local IT service partners, and by marketing through security research publications, CVE disclosures, and conference presence at Black Hat USA/Asia and CYBERSEC. The company is privately held, founder-controlled (Trung Nguyen as Founder & CEO and Trần Quang Chiến as Co-Founder and Chairman), with no disclosed venture funding rounds and a stated headcount of 11–50 employees.

Name

CyStack

Legal name

Vietnam CyStack JSC

Website

https://cystack.net

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

CyStack is a Vietnam-based cybersecurity firm that delivers penetration testing, managed security services, a bug bounty platform (WhiteHub) with 4,000+ researchers, and zero-knowledge products like Locker, serving 600+ SMB, enterprise, and Web3 clients across Vietnam, Canada, and Korea.

Ownership category

akta.pro rank

Product category

Cybersecurity Platform

NAICS

Computer Systems Design and Related Services (5415), Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Application Security & DevSecOps Services (BPAKAHAJ)

akta.pro secondary industries

Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI), Secrets Management & Credential Security (HDADACAH)

Keywords

• Cybersecurity platform
• Penetration testing
• Bug bounty platform
• Vulnerability management
• Password management

Headquarters

HQ city

Hanoi

HQ country

Vietnam

HQ region

Asia

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. SaaS Subscriptions: CyStack offers multiple SaaS products under subscription plans including Locker Password Manager, CyStack Endpoint, WhiteHub, VulnScan, and Data Leak Detection. Fees are billed monthly or annually with auto-renewal. Enterprise customers receive custom quotes.
2. Professional Services: Professional security services including penetration testing, red teaming, security audits, SOC, DFIR, vulnerability management, and security training delivered under separate Statements of Work with custom pricing.
3. Trust Center: Security profile management platform offering free tier and Business plan at $199.99 for verified security profiles, consultation, and security support.

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

CyStack builds and operates a centralized cybersecurity platform (CyStack Platform) that powers a suite of standalone products including Locker Password Manager, CyStack Endpoint (DLP), WhiteHub bug bounty platform, CyStack VulnScan, Data Leak Detection, and Trust Center. The company also delivers professional security services — penetration testing, red teaming, cloud and blockchain audits, 24/7 SOC monitoring, DFIR, vulnerability management, and security training — packaged into tiered solutions for SMBs and enterprise customers across Web2 and Web3 environments.

Product overview

CyStack is a Vietnam-based cybersecurity firm offering a platform-plus-modules architecture centered on its core CyStack Platform. The platform provides real-time risk detection and tracking, supplemented by specialized products including Locker Password Manager (zero-knowledge encrypted credential storage), CyStack Endpoint (endpoint protection and DLP), WhiteHub (bug bounty platform with 4,000+ researchers), CyStack VulnScan (automated vulnerability scanning), and Data Leak Detection. Professional services include penetration testing, red teaming, cloud and blockchain audits, SOC monitoring, digital forensics (DFIR), vulnerability management, and security training. The Trust Center module enables businesses to manage security compliance profiles and certifications. CyStack combines AI automation with human security expertise, serving 600+ clients across web2 and web3 environments.

Differentiator

Problem solved

Functional benefit

Brands

• Locker: Zero-knowledge, end-to-end encrypted password manager for individuals and teams, available on web, mobile, and browser extensions.
• WhiteHub
• CyStack Endpoint
• CyStack VulnScan
• Data Leak Detection
• Trust Center

Products and services

• CyStack Platform Centralized security management platform enabling real-time risk detection and tracking across web2 and web3 environments, acting as the orchestration layer for CyStack's product ecosystem.
• Locker Password Manager Zero-knowledge, end-to-end encrypted password manager for individuals and teams, available on web, mobile, and browser extensions. Vault data is encrypted locally on the user's device using a key derived from the Master Password, so CyStack cannot access Master Password or vault data in decrypted form.
• CyStack Endpoint Endpoint protection and data loss prevention (DLP) solution that collects device-level data including device identifiers, OS and software inventory, file activity logs, network connection metadata, and policy compliance status, for organizational use.
• WhiteHub Bug bounty and vulnerability disclosure platform that connects organizations with a community of 4,000+ security researchers to detect and fix vulnerabilities. Researchers can submit vulnerability reports, and program owners can access submitted reports through the platform.
• CyStack VulnScan Automated vulnerability scanning service that scans publicly accessible assets for security weaknesses. Scan results are stored within the customer's account and accessible only to authorized users.
• Data Leak Detection Credential and data exposure monitoring service that scans external data sources for exposed credentials and sensitive information belonging to the organization.
• Trust Center Centralized security compliance management platform that helps businesses create comprehensive, transparent security profiles demonstrating commitment to security compliance. Enables automated security page generation, compliance tracking against standards like ISO 27001, GDPR, and PCI-DSS, and centralized management of security certificates and policies.
• Penetration Testing Professional penetration testing services delivered by security experts, with AI-assisted, human-validated testing capabilities for web, mobile, infrastructure, cloud, and blockchain environments.
• Red Teaming Adversarial simulation and red team operations that simulate real-world attack scenarios to test organizational security posture.
• CyStack Cloud Audit Infrastructure and cloud security assessment services evaluating cloud configurations, deployments, and security controls.
• CyStack Blockchain Audit Smart contract and blockchain protocol security audits for Layer-1 and Layer-2 blockchain platforms, including complex blockchain testing for pre-mainnet deployments.
• CyStack SOC (Security Operations Center) 24/7 security monitoring and response services providing continuous surveillance and incident detection capabilities for organizations.
• Digital Forensics (DFIR) Digital forensics and incident response services for investigating security breaches and conducting post-incident analysis.
• Vulnerability Management Ongoing vulnerability tracking and management services to identify, prioritize, and remediate security vulnerabilities.
• Security Training & Consulting Security awareness training, policy consulting, and technical support services for organizational security education.

Quantifiable outcome

• 3.5x more efficient vulnerability detection compared to traditional security testing
• +2 more outcomes

Named customers5 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration4 records

AI capability1 record

Feature5 records

Partnerships

Two partnerships are on record, tiered core and minor.

• Korean IT Service Partners (2)coreChannel Partner/ Reseller/ Distributor · 1 January 2025CyStack signed two Korean IT service partners as part of its K-Startup Grand Challenge 2025 participation, enabling localized penetration testing services and managed security package distribution in the Korean market.
• DFDLminorStrategic or Co-development PartnerDFDL listed as a solution partner for CyStack's Trust Center product, providing regulatory and compliance expertise.

Scale indicators9 records

Recent moves6 records

Expansion highlights5 records

Regional players

• AhnLab: Korea-headquartered cybersecurity vendor offering endpoint, network, and cloud security products plus services. Comparable regional peer that CyStack is now entering Korea to compete against.

Broad incumbents

• Trustwave: Global cybersecurity services firm offering managed detection/response, pentesting, DFIR, and database security. Overlaps with CyStack's enterprise services portfolio at much larger scale.
• NCC Group: Global cybersecurity and software resilience firm with strong pentest, red team, and source code review practices. Comparable professional services competitor to CyStack's pentest/audit offerings.
• Rapid7: Public cybersecurity vendor offering vulnerability management, SOC/managed services, and penetration testing. Comparable broad-portfolio incumbent that competes across several of CyStack's product lines.

Direct peers

• HackerOne: Global bug bounty and vulnerability disclosure platform with a large researcher community. Most direct competitor to CyStack's WhiteHub in product category, business model, and target enterprise buyer.
• Bugcrowd: Crowdsourced cybersecurity platform offering bug bounty, pentest, and vulnerability disclosure programs. Competes head-to-head with WhiteHub on enterprise crowdsourced security engagements.
• Cobalt: Pentest-as-a-service platform connecting organizations with vetted security testers. Direct competitor to CyStack's penetration testing and red teaming services business line.
• Synack: Crowd-sourced penetration testing platform with AI-augmented testing and a vetted researcher community. Closely comparable to CyStack's AI-assisted pentest positioning and enterprise target customer.

Emerging players

• Bitwarden: Open-source, zero-knowledge password manager for consumers and businesses. Direct competing product to CyStack's Locker Password Manager with a similar zero-knowledge encryption architecture.
• 1Password: Consumer and business password manager with end-to-end encryption. Competes with Locker in the same zero-knowledge password management category at materially larger scale.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/CyStackSecurity
• GitHubgithub.com/cystack
• Facebookfacebook.com/cystackvn
• LinkedInlinkedin.com/company/cystacksecurity
• TikToktiktok.com/@cystack

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CyStack