What Across Verticals does

Across Verticals is a boutique cybersecurity consulting firm founded in 2013 and headquartered in Selangor, Malaysia, with regional entities in Singapore (Across Verticals Pte Ltd) and Australia (Across Verticals Technologies Pty Ltd). The firm delivers end-to-end cybersecurity services through three pillars: CyberNinja Services, which covers penetration testing and IT GRC assessments across web, mobile, network, infrastructure, API, and cloud environments; Cybertronics Lab, an ISO17025-certified testing facility performing Common Criteria evaluations up to EAL7 and IEEE 2621 medical device cybersecurity testing; and CyberNiche Solutions, a portfolio of third-party cybersecurity products distributed through vendor partnerships (Redwolf, SecureKi, IronNet, Recorded Future, AppDome).

The firm serves enterprise and regulated-industry clients across financial services (BNM RMIT, SWIFT CSP), healthcare and medical device manufacturing, and IT product manufacturers seeking Common Criteria certification. Its competitive position rests on a hard-to-replicate stack of accreditations — JSM-accredited Common Criteria Evaluation Facility, CREST OVS for web and mobile application testing, first-in-region IEEE medical device test laboratory status, and SWIFT CSP Certified Assessor registration — backed by a team of certified evaluators and CREST Certified Simulated Attack Specialists with 25+ years of collective experience.

The business operates on a professional services model with bespoke, project-based engagements initiated through a free consultation; pricing is not publicly disclosed. Go-to-market is direct enterprise sales with a consultative approach, supported by content marketing via the company website and LinkedIn, and a recently established digital sales function targeting North America and broader Asia in addition to the existing Malaysia, Singapore, and Australia footprint. The company is privately held with no disclosed funding rounds, parent company, or institutional investors, indicating organic growth funded by operations.

Name

Across Verticals

Legal name

Across Verticals Sdn. Bhd.

Website

https://acrossverticals.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

11–50 employees

Short description

Across Verticals is a boutique cybersecurity consulting firm founded in 2013, offering penetration testing, accredited Common Criteria and medical device security testing, and partner-led cybersecurity solutions to enterprise and regulated-industry clients across Malaysia, Singapore, and Australia.

Ownership category

akta.pro rank

Product category

Cybersecurity Consulting Services

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industry

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF)

Keywords

• Cybersecurity consulting
• Penetration testing
• IT GRC assessment
• Medical device security
• Common Criteria evaluation

Headquarters

HQ city

Selangor

HQ country

Malaysia

HQ region

Asia

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure, Others

Revenue model

1. Professional Cybersecurity Consulting Services: End-to-end cybersecurity services including consultation, assessment, penetration testing, compliance guidance, and training programs. Services are customized to client needs and delivered by expert consultants.

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

Across Verticals is a boutique cybersecurity consulting firm that delivers end-to-end cybersecurity services to enterprise and government clients. Its offering spans technical assessments (penetration testing, vulnerability assessments, source code review), IT GRC and compliance support (BNM RMIT, SWIFT CSP), certified product and medical device security testing (Common Criteria up to EAL7, IEEE 2621), and the distribution of curated third-party cybersecurity solutions through vendor partnerships.

Product overview

Across Verticals operates as a boutique cybersecurity consulting firm offering a three-pillar service architecture: CyberNinja Services delivers comprehensive penetration testing and IT GRC assessments; Cybertronics Lab provides ISO17025-certified testing and evaluation including Common Criteria and medical device testing; and CyberNiche Solutions offers curated third-party cybersecurity solutions through vendor partnerships. The three services are designed to work together to provide end-to-end cybersecurity protection.

Differentiator

Problem solved

Functional benefit

Brands

• CyberNinja Services: Comprehensive penetration testing and IT GRC assessments covering web applications, networks, infrastructure, APIs, with services including web app pentesting, mobile app pentesting, thick client pentesting, source code review, network VAPT, wireless network pentest, phishing attack assessment, DDoS testing, intelligence-led penetration testing, Red/Purple/Blue team exercises, configuration review, and critical infrastructure security.
• Cybertronics Lab
• CyberNiche Solutions

Products and services

• CyberNinja Services Comprehensive penetration testing and IT GRC (Governance, Risk, and Compliance) assessments covering web applications, networks, APIs, infrastructure, and compliance support. Includes web and mobile application pentesting, thick client pentest, source code review, network VAPT, wireless network pentest, phishing attack assessment, DDoS testing, intelligence-led penetration testing, red/purple/blue team exercises, configuration review, critical infrastructure security, cloud security assessment, secure SDLC assessment, IT audit readiness, SWIFT CSP assessment, cybersecurity awareness training, cyber capability maturity assessment, cyber compromise assessment, data centre risk assessment, and network resiliency assessment. Targeted at enterprise and government clients requiring technical security assurance.
• Cybertronics Lab ISO17025-certified testing and evaluation laboratory providing Common Criteria Evaluation (ISO/IEC 15408-1) up to EAL7 and Medical Device Testing and Evaluation (IEEE 2621) as an Authorised Medical Devices Test Laboratory accredited by IEEE. Targeted at IT product manufacturers seeking Common Criteria certification and at medical device manufacturers and regulators requiring certified cybersecurity testing.
• CyberNiche Solutions Portfolio of third-party cybersecurity solutions delivered through partnerships with vendors including Redwolf (DDoS simulation), SecureKi (Privileged Access Management), IronNet (Network Detection and Response), Recorded Future (Threat Intelligence), and AppDome (Mobile Application Security). Targeted at enterprise clients that want curated, partner-backed cybersecurity products integrated with advisory services.

Quantifiable outcome

• Conducted numerous SWIFT CSP assessments for financial institutions including regulatory banks
• +1 more outcomes

Named customers1 record

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Nine partnerships are on record, tiered core.

• RedwolfcoreTechnology or IntegrationPartnership with Redwolf for Distributed Denial of Service (DDOS) assessment solutions. Redwolf's DDOS simulation platform helps organizations conduct extensive assessments by simulating real-world DDOS attacks in a controlled environment to evaluate system resilience.
• SecureKicoreChannel Partner/ Reseller/ DistributorPartnership with SecureKi as a distributor for their Privileged Access Management (PAM) Solution. Key features include Automated Credential Security, Advanced Session Monitoring, and Real-Time Threat Detection for smooth management of privileged credentials.
• IronNetcoreChannel Partner/ Reseller/ DistributorPartnership with IronNet as a distributor of their Network Detection and Response (NDR) solution through the Collective Defense platform. IronDefense provides advanced NDR with 24/7 security team support, behavioural detection, and end-to-end visibility across hybrid and cloud environments.
• Recorded FuturecoreTechnology or IntegrationPartnership with Recorded Future for threat intelligence solutions. Their platform provides extensive capability to collect, analyze, and disseminate information about potential or active cybersecurity threats, offering actionable intelligence on TTPs used by cybercriminals.
• AppDomecoreTechnology or IntegrationPartnership with AppDome for mobile application security solutions. AppDome's platform ensures mobile apps are secure through every stage in the pipeline with proper compliance to industry standards, including Certified Secure App and App-Specific Security Certification.
• CRESTcoreStrategic or Co-development PartnerCREST (Council of Registered Ethical Security Testers) certification body providing international accreditation for penetration testing and security assessment organizations. Across Verticals is a CREST OVS certified supplier.
• Standards Malaysia / Jabatan Standards Malaysia (JSM)coreStrategic or Co-development PartnerNational standards body that provides ISO17025 accreditation for Cybertronics Lab and Common Criteria evaluation facility accreditation. Enables international standard compliance certification for products and systems.
• IEEEcoreStrategic or Co-development PartnerInstitute of Electrical and Electronics Engineers that provides accreditation for medical device cybersecurity testing laboratories. Across Verticals is the first in Asia Pacific and Oceania region to be accredited as Authorised Medical Devices Test Laboratory by IEEE.
• SWIFTcoreStrategic or Co-development PartnerSWIFT Partner Programme member providing SWIFT Customer Security Programme (CSP) assessments. Registered CSP assessment provider on the CSP Certified Assessors Directory, conducting independent assessments for financial institutions as per CSCF requirements.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Bishop Fox: Boutique offensive security firm specializing in penetration testing, red teaming, and vulnerability research. Directly comparable to Across Verticals' CyberNinja Services high-end testing practice.
• NCC Group: Global cybersecurity consulting and assurance firm with a strong Common Criteria evaluation practice (NCC Group) and penetration testing services. Closely comparable to Across Verticals' combined advisory + accredited lab model.
• atsec information security: Specialist cybersecurity testing firm focused on Common Criteria evaluations, FIPS 140 validation, and related consulting. Directly comparable to Across Verticals' Cybertronics Lab accredited assessment offerings.
• SEC Consult: European cybersecurity consultancy with penetration testing, compliance, and product security testing (including Common Criteria). Comparable across the same testing and assurance service mix.
• Coalfire: US-based cybersecurity advisory firm with strong Common Criteria testing, FedRAMP, and penetration testing practices. Comparable in offering breadth across CyberNinja (pentest/GRC) and Cybertronics Lab (certification) capabilities.

Broad incumbents

• Mandiant (Google Cloud): Global incident response and cybersecurity consulting firm (now part of Google Cloud) covering penetration testing, red teaming, and GRC. Comparable at the high-end of incident response and assurance work.
• Trustwave: Established MSSP and cybersecurity consulting firm offering managed detection, penetration testing, and compliance services. Comparable as a broad incumbent in the cybersecurity services space Across Verticals competes in.
• KPMG Cybersecurity Services: Big Four cybersecurity advisory practice offering GRC, penetration testing, and compliance assessments (including SWIFT and BNM-related work). Comparable as a broad incumbent competing for the same regulated enterprise buyers.

Regional players

• Tesserent (Thales Australia): Australian-headquartered cybersecurity services firm (now part of Thales) providing advisory, testing, and managed security across APAC. Comparable as a regional peer serving Australian and APAC enterprise buyers.
• CyberCX: Largest Australian cybersecurity services firm with broad advisory, testing, and managed services. Directly comparable as a regional peer operating in Australia where Across Verticals maintains an office.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/acrossverticals

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Across Verticals