Spentera

What Spentera does

Spentera (legal name Spentera; DBA "Spentera - Secure Wisely") is an Indonesian cybersecurity services firm founded in 2011, headquartered at Talavera Office Park in South Jakarta. The company delivers a portfolio of offensive and defensive security services centered on penetration testing, vulnerability assessment, red team adversary simulation, phishing simulation, managed security operations, incident response, and cybersecurity training. Its product set is organized across a wholly-owned subsidiary group: Spentera for testing, PSG for managed security services, HackTrace for training, and Dwarapala for CSIRT and phishing platforms.

The underlying technology mix blends human-driven offensive security with two proprietary platforms — PhishRanges and PhisWise — for phishing simulation and awareness, and red team engagements that are explicitly mapped to the MITRE ATT&CK Framework. Service delivery relies on credentialed practitioners (OSCP+, OSWE, OSCE, OSEE, EJPT, EMAPT, EWPT) and is reinforced by CREST, ISO 27001:2022 (via BSI), ASPI, and BSSN accreditations, which serve as procurement prerequisites for regulated Indonesian buyers.

The business model is sales-led, quote-based, and oriented to enterprise and government buyers, with revenue streams spanning project-based professional services (penetration tests, red team exercises, compliance audits) and recurring managed security services (24/7 SOC, digital forensics, ISO 27001 certification assistance). Customer reach is claimed at 100+ enterprises across banking, fintech, manufacturing, government, healthcare, e-commerce, logistics, telecom, and FMCG, with a notable concentration among top Indonesian banks (7 of 10 are named clients) and 3,000+ cumulative projects over the company's history.

Name

Spentera

Legal name

Spentera

Website

https://spentera.id

Company type

Private

Founded year

2011

Operating status

Operating

Headcount range

11–50 employees

Short description

Spentera is an Indonesian cybersecurity services firm offering penetration testing, red team assessments, phishing simulation, managed security operations, and training through its PSG, HackTrace, and Dwarapala subsidiaries, serving enterprise and government clients primarily in financial services.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Investigation and Security Services (5616)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Vulnerability Management & Penetration Testing Services (BPAEADAD)

akta.pro secondary industries

Penetration Testing & Red Teaming (BPAKAHAF), Application Security Testing (SAST/DAST/IAST/SCA) (HDADACAC), Endpoint Forensics & Incident Response (DFIR) (HDADAEAJ), Application Security & DevSecOps Services (BPAKAHAJ)

Keywords

• Penetration testing services
• Vulnerability assessment
• Red team assessment
• Managed security services
• Cybersecurity training programs

Headquarters

HQ city

Dki Jakarta

HQ country

Indonesia

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Professional Security Testing Services: One-time and project-based security assessment services including penetration testing, vulnerability assessment, red team exercises, and phishing assessments. Revenue generated through customized engagements with enterprises.
2. Managed Security Services: 24/7 security monitoring, threat detection, and incident response services provided through PSG (Managed Security Services Provider). Includes SOC as a service, PBI/OJK Compliance Audit, ISO 27001 Certification Assistance, and Digital Forensics and Incident Response.
3. Cybersecurity Training: Training programs delivered through HackTrace covering phishing awareness, red team training, blue team training, and cybersecurity lab platform access.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

Spentera is an Indonesian cybersecurity firm that delivers offensive and defensive security services through four operating entities: penetration testing (web, mobile, API, wireless, OT, payment/EDC, core banking, deepfakes), vulnerability assessment, MITRE ATT&CK-driven red team assessments, and a proprietary phishing assessment platform (PhisWise/PhishRanges). These are complemented by 24/7 managed security services and SOC operations through PSG, incident response/CSIRT capabilities through Dwarapala, and structured cybersecurity training through HackTrace.

Product overview

Spentera is a leading cybersecurity company in Indonesia operating as a cohesive group of three companies delivering comprehensive cybersecurity solutions. The core product portfolio consists of Penetration Testing Services (covering API, web app, mobile app, wireless, OT, EDC/payment, core banking, and deepfakes testing), Vulnerability Assessment, Red Team Assessment (powered by MITRE ATT&CK Framework), and Phishing as a Service delivered through the PhisWise/PhishRanges platform. Additional offerings include Managed Security Services (PSG) providing 24/7 SOC monitoring, incident response, and compliance auditing; Cybersecurity Training through the HackTrace platform covering phishing awareness, Red/Blue Team training, and lab environments; and CSIRT services via Dwarapala. The company serves diverse industries including banking, financial technology, manufacturing, healthcare, government, e-commerce, logistics, FMCG, and telecommunication.

Differentiator

Problem solved

Functional benefit

Products and services

• Penetration Testing Services

Quantifiable outcome

• 7 out of 10 Top Banks in Indonesia trust Spentera for cybersecurity services
• +2 more outcomes

Named customers2 records

Segments9 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Two partnerships are on record, tiered core.

• PSG (Professional Security Group)coreOthersPSG is the Managed Security Services Provider subsidiary of Spentera, providing 24/7 security monitoring, threat detection, and incident response services. PSG offers SOC as a service, PBI/OJK Compliance Audit, ISO 27001 Certification Assistance, and Digital Forensics and Incident Response as part of the integrated cybersecurity service offering.
• HackTracecoreOthersHackTrace is the cybersecurity training subsidiary of Spentera, offering training programs covering phishing awareness, red team training, blue team training, and a cybersecurity lab platform. Part of the integrated company group delivering comprehensive cybersecurity solutions.

Scale indicators4 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• CrowdStrike Services: Global cybersecurity firm with an expanding services division offering incident response, red team, and managed detection. Increasingly competing with Spentera in Southeast Asian enterprise accounts.
• NCC Group: Global cybersecurity consulting firm with strong offensive security, penetration testing, and managed detection services. Operates at much larger scale and serves multinationals, but is a benchmark for the type of services Spentera delivers.
• Trustwave: Global managed security services provider and cybersecurity consulting firm with strong presence in Asia-Pacific. Offers MSSP and pentest capabilities that overlap directly with PSG and Spentera's offensive security services.
• SANS Institute: Global cybersecurity training and certification organization. Comparable to Spentera's HackTrace training subsidiary in delivering cybersecurity awareness, red team, and blue team education to enterprises.
• Mandiant (Google Cloud): Global incident response and cybersecurity consulting leader now part of Google Cloud. Comparable to Spentera's DFIR and red team services but operating at vastly larger scale across multiple geographies.
• Deloitte (Cyber Risk Services): Big 4 advisory firm with a large cybersecurity practice spanning penetration testing, red team, managed SOC, and compliance. Competes with Spentera in regulated Indonesian sectors such as banking and financial services.

Direct peers

• Coalfire: US-headquartered cybersecurity advisory firm providing penetration testing, vulnerability assessment, and compliance services. Closely aligned with Spentera's mix of offensive testing and regulatory compliance work.
• Bishop Fox: US-based offensive security specialist renowned for penetration testing, red team engagements, and adversary simulation. Highly comparable in service depth and technical specialization to Spentera's pentest and red team offerings.
• ITSEC Asia: Indonesia-headquartered cybersecurity services firm offering penetration testing, managed security services, and incident response to enterprise clients in Southeast Asia. Closely comparable to Spentera in scale, geography, and service mix.
• Sekuro: Indonesia-based cybersecurity firm providing managed security, penetration testing, and consulting services to large enterprises. Directly competes with Spentera across the same Indonesian buyer base.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/spentera
• Xx.com/spentera
• Facebookfacebook.com/spentera

Compliance11 records

Revenue estimate

Valuation estimate

Number of profiles

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Spentera