Xcidic

What Xcidic does

Xcidic is a privately held cybersecurity company founded in Singapore in 2015 by defence sector professionals and legally registered in Indonesia as PT Xcidic Teknologi Indonesia. It sells an integrated three-layer security stack: Layer 01 trusted infrastructure delivered through a core partnership with PCCW Global (carrier-grade DIA, MPLS, private network, cloud connect, satellite connectivity, and colocation across 3,000+ PoPs in 150+ countries); Layer 02 network security via Korea-based partner AXGATE — including multi-core next-generation firewalls, KCMVP-certified Quantum VPN with NIST-compliant quantum random number generators, and zero-trust network access; and Layer 03 application security anchored on its proprietary NOXTARA unified platform and MONITORAPP's AI-driven WAAP. NOXTARA provides continuous attack surface management, DAST, SAST/SCA, MAST, AI & LLM security testing, WAF gap analysis, and infrastructure exposure monitoring. The company supplements the platform with professional services: vulnerability assessment and penetration testing (VAPT), secure software development with DevSecOps integration into CI/CD pipelines, and infrastructure deployment services.

The business operates exclusively through a consultative direct enterprise sales motion targeting government ministries, national cyber authorities, financial institutions, NASDAQ-listed technology companies, telecommunications carriers, and SaaS providers across six Asia-Pacific countries plus a LATAM foothold. Revenue derives from managed security services, professional services, and recurring subscription infrastructure services under multi-year contracts with quote-based enterprise pricing; an initial free exposure review serves as the funnel entry point. Xcidic has no disclosed venture funding rounds, parent company, or institutional investors, indicating founder-controlled, bootstrapped growth. Reported customer outcomes include 95% vulnerability reduction and 70% faster remediation for NASDAQ-listed Ollo, 50% speed improvement and 30% latency reduction for Telkomsat, 10× faster threat identification and up to 75% reduction in unplanned downtime for HKCERT, and up to 80% reduction in MTTR for Linknet — supporting a value proposition centred on continuous, defence-grade assurance rather than point-in-time compliance.

Name

Xcidic

Legal name

PT Xcidic Teknologi Indonesia

Website

https://xcidic.com

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

11–50 employees

Short description

Xcidic is a privately held cybersecurity firm founded in Singapore in 2015 that delivers an integrated three-layer security stack — carrier-grade infrastructure, AXGATE network security with quantum-encryption VPN, and the proprietary NOXTARA unified application security platform — to government ministries, national cyber authorities, financial institutions, NASDAQ-listed technology firms, and telecoms across Asia-Pacific.

Ownership category

akta.pro rank

Product category

Cybersecurity Software and Services

NAICS

Computer Systems Design and Related Services (5415), Security Systems Services (56162)

SIC

Services-Computer Integrated Systems Design (7373), Communications Services, Nec (4899)

akta.pro primary industry

Network & Infrastructure Security Services (Perimeter, Segmentation) (BPAKAHAL)

akta.pro secondary industries

Next-Generation Firewalls (NGFW) (HDAFAFAA), Edge Security Delivery (DDoS, WAF, Bot Mitigation at Edge) (HDABAGAH), Network Security Services (Firewall/VPN/ZTNA/SASE Integration) (BPAEAEAG), API Security & Service-to-Service Security (mTLS, Service Mesh Security) (HDABAHAN)

Keywords

• Enterprise cybersecurity services
• Next-generation firewalls
• Application security platform
• Vulnerability assessment testing
• Zero trust network access

Headquarters

HQ city

Jakarta

HQ country

Indonesia

HQ region

Asia

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Security Solutions and Products: Revenue from deploying cybersecurity products including NOXTARA platform, AXGATE NGFW, Quantum VPN, WAAP, and ZTNA solutions. Products are deployed as managed services with carrier-grade infrastructure foundation.
2. Professional Security Services: Revenue from VAPT engagements, secure software development, and advisory services. Engagement model follows Assess-Build-Operate framework with embedded team approach.
3. Infrastructure Services: Revenue from carrier-grade connectivity services including Dedicated Internet Access (DIA), MPLS, Private Network, Cloud Connect, Satellite Connectivity, and Colocation through PCCW Global partnership.

Pricing tiers

Go-to-market motion2 records

Distribution channels1 record

Marketing channels4 records

Core offering

Xcidic curates and deploys a three-layer cybersecurity portfolio for commercial and government organizations. Layer 1 (Infrastructure) is delivered through a PCCW Global partnership providing carrier-grade private networks, DIA/MPLS, cloud connect, satellite connectivity, and colocation. Layer 2 (Network Security) comprises AXGATE multi-core NGFW, Quantum-safe VPN with QRNG encryption, and Zero Trust Network Access. Layer 3 (Application Security) is centered on the NOXTARA unified platform for attack surface management, DAST, SAST/SCA, MAST, AI/LLM security testing, and WAF gap analysis, augmented by MONITORAPP's AI-driven WAAP. Xcidic also delivers VAPT and Secure Software Development professional services under an Assess-Build-Operate engagement model.

Product overview

Xcidic offers a three-layer cybersecurity portfolio: Layer 01 (Infrastructure) powered by PCCW Global providing carrier-grade connectivity; Layer 02 (Network Security) featuring AXGATE NGFW and Quantum VPN with QRNG-based encryption; and Layer 03 (Application Security) centered on the NOXTARA unified platform and MONITORAPP WAAP. Services include VAPT, Secure Software Development, and Infrastructure Solutions. The portfolio ranges from network/firewall products (NGFW, ZTNA, Quantum VPN, WAAP) to platform-based continuous security monitoring (NOXTARA), complemented by professional services for assessment, secure development, and infrastructure deployment.

Differentiator

Problem solved

Functional benefit

Products and services

• NOXTARA Unified application security platform that provides continuous visibility and prioritized risk management across attack surface, code, APIs, mobile, and AI systems, including Attack Surface Management, DAST, SAST/SCA, MAST, AI and LLM Security Testing, WAF Gap Analysis, and infrastructure/network exposure monitoring. Sold to enterprises and government organizations requiring continuous security assurance.
• NGFW (Next-Generation Firewall) Multi-core high-performance next-generation firewall with SSL inspection, application awareness across ~3,000 applications, zero-trust device access control, virtualization capability, and REST API for integrations. Targeted at enterprises and government organizations requiring deep packet inspection and policy enforcement.
• Quantum VPN Quantum-safe VPN utilizing QRNG (Quantum Random Number Generator) hardware module for quantum-randomness encryption, with KCMVP-certified proprietary OS (AOS), support for NIST-compliant QRNGs from IDQ and EYL, and Post-Quantum Cryptography expandability. Targeted at government agencies and critical infrastructure operators needing quantum-ready encryption.
• ZTNA (Zero Trust Network Access) Zero-trust-based secure access solution providing strong authentication, SDP-based security, real-time device posture verification, and application-specific access control through micro-segmentation. Sold to enterprises transitioning from VPN-centric remote access models.
• WAAP (AIWAAP) AI-powered Web Application and API Protection (WAAP) solution built on MONITORAPP's AIOS platform, combining WAF, API Security, Bot Detection, DDoS Mitigation, and ML-based threat detection. Protects web applications and APIs against OWASP Top 10 and OWASP API Top 10 threats with AI-behavioural detection beyond rule-based systems. Sold to enterprises and government organizations with public-facing web properties.
• VAPT (Vulnerability Assessment and Penetration Testing) Professional vulnerability assessment and penetration testing service covering web applications, APIs, mobile applications, network infrastructure, cloud environments (AWS, Azure, GCP), IoT/OT devices, and social engineering. Available in black-box, grey-box, and white-box testing approaches. Targeted at enterprises and government organizations needing security validation before deployment or for compliance.
• Secure Software Development (DevSecOps) DevSecOps services embedding SAST, DAST, and SCA into CI/CD pipelines, including developer upskilling, secure coding standards, secrets scanning, and continuous monitoring via NOXTARA post-deployment. Sold to technology companies and SaaS providers that need security integrated into their software development lifecycle.
• Infrastructure Solutions Carrier-grade infrastructure services powered by PCCW Global providing Dedicated Internet Access (DIA), MPLS, Private Network, Cloud Connect, Satellite Connectivity, and Colocation across 3,000+ PoPs in 150+ countries. Sold as Layer 1 foundation of Xcidic's three-layer security stack to enterprises and government organizations needing resilient, multi-country-sourced connectivity.

Quantifiable outcome

• 95% vulnerability reduction and 70% faster remediation for Ollo (NASDAQ-listed company)
• +7 more outcomes

Named customers10 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature7 records

Partnerships

Three partnerships are on record, tiered core.

• PCCW GlobalcoreTechnology or IntegrationLayer 1 infrastructure partner providing carrier-grade private networks and satellite connectivity. PCCW Global operates one of the world's most extensive networks with 3,000+ PoPs across 150+ countries, delivering the trusted infrastructure foundation for Xcidic's security stack. Provides carrier-grade SLAs, multi-country sourcing to eliminate supply chain risk, and satellite failover capability.
• AXGATEcoreTechnology or IntegrationLayer 2 network security partner from Korea. AXGATE provides military-validated next-generation firewalls with quantum-randomness encryption modules and multi-core high-performance architecture. Products include NGFW, Quantum VPN, and ZTNA solutions. KCMVP certified proprietary OS for quantum encryption.
• MONITORAPPcoreTechnology or IntegrationLayer 3 application security partner providing AI-driven WAAP solutions. MONITORAPP's AIOS platform uses AI-behavioural detection for zero-day threats beyond rule-based systems. Zero-trust, edge-native, cloud-ready architecture. Leading provider in Korean WAF market with over 4,000 customer references across public, finance, and enterprise sectors.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Palo Alto Networks: Global cybersecurity incumbent with NGFW, Prisma (cloud security), and Cortex XSIAM (SIEM/XDR). Direct category overlap with Xcidic's NGFW, WAAP, ZTNA, and continuous-monitoring stack across enterprise and government buyers.
• CrowdStrike: Endpoint and cloud-native security leader with Falcon platform, expanding aggressively into identity, SIEM, and managed detection. Overlaps with Xcidic's NOXTARA attack-surface management and continuous-monitoring positioning.
• Trend Micro: APAC-rooted cybersecurity incumbent strong in Japan, APAC, and government segments. Comparable to Xcidic in APAC regional depth, government/government-adjacent buyer base, and broad platform coverage (network, endpoint, cloud).

Direct peers

• Fortinet: Best-in-class NGFW and secure networking vendor with broad APAC channel. Directly comparable to AXGATE's NGFW and Quantum VPN inside Xcidic's stack and competes for the same telco and government accounts.
• Check Point Software Technologies: Pioneer NGFW and unified security architecture vendor with Quantum line. Competes head-to-head in enterprise and government network security, overlapping with Xcidic's Layer 02 stack.
• Tenable: Vulnerability management leader (Nessus, Tenable One) covering ASM, vulnerability scanning, and cloud security. Closest comparable to NOXTARA's ASM, DAST/SAST, and continuous-monitoring capabilities.
• Qualys: Cloud-based vulnerability management and security posture platform with VMDR, ASM, and WAS. Directly comparable to NOXTARA's unified vulnerability and attack-surface platform positioning.

Emerging players

• Darktrace: AI-driven anomaly detection and autonomous response platform. Comparable to MONITORAPP's AIOS behavioural detection inside Xcidic's WAAP, especially for zero-day and anomaly-based use cases.

Regional players

• Ensign InfoSecurity: Singapore-headquartered cybersecurity services and managed detection firm, deeply embedded with Singapore government and critical-infrastructure clients. Closest comparable regional peer to Xcidic for APAC government and SOE contracts.
• IGLOO Security: Korea-based cybersecurity advisory and managed security services provider. Comparable to Xcidic as a regional, government-anchored cybersecurity services firm with similar APAC enterprise/government GTM.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/xcidiclab

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Xcidic