Sri Lanka Cert

What Sri Lanka Cert does

Sri Lanka CERT (Computer Emergency Readiness Team), also operating as CERT|CC, is the national Computer Emergency Readiness Team of Sri Lanka, established in 2006 as a government-owned private company operating under the Ministry of Digital Economy. It functions as the country's National Centre for Cyber Security, providing incident response, threat monitoring, digital forensics, vulnerability assessment, and governance/risk/compliance consulting to citizens, businesses, and government organizations across verticals including healthcare, finance, retail, technology, and utility/energy sectors. Its core technical capabilities include the National Cyber Security Operations Centre (NCSOC) for real-time threat monitoring across critical government infrastructure, the Malware Analysis and Threat Hunting (MATH) Lab for advanced threat analysis, and a 24/7 incident handling service accessible via a 101 hotline and online reporting portal.

The organization's service architecture is delivered as a single integrated offering rather than a modular platform, combining advisory services (network security, application security, GRC consulting) with operational capabilities (NCSOC, MATH Lab, digital forensics) and public awareness programs (trilingual knowledge base, Cyber Guardian newsletter, national annual conference). It is a member of global CERT networks including FIRST, Asia Pacific CERT, Cyber4Dev of the European Union, and World Bank initiatives, enabling international threat intelligence sharing and capacity building.

Sri Lanka CERT is government-funded and delivers its services free of charge as a public service. Its revenue model is effectively a government budget allocation under the Ministry of Digital Economy, supplemented by international donor support. The entity is not commercially structured and has no private equity or venture capital ownership. Its go-to-market is event-driven and mandate-driven, reaching stakeholders through national conferences, public awareness campaigns, incident reporting portals, and the 101 hotline, with direct engagement to onboard critical government institutions onto the NCSOC. Headquarters are located at the BMICH complex in Colombo, Sri Lanka.

Name

Sri Lanka Cert

Legal name

Sri Lanka Computer Emergency Readiness Team

Website

https://cert.gov.lk

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

11–50 employees

Short description

Sri Lanka CERT is the national Computer Emergency Readiness Team of Sri Lanka, providing government-coordinated cybersecurity incident response, real-time threat monitoring via its NCSOC, malware analysis, and digital forensics services to citizens, businesses, and government organizations since 2006.

Ownership category

akta.pro rank

Product category

National Cybersecurity Services

NAICS

Other Computer Related Services (541519), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Operations Center (SOC) as a Service (BPAEADAB)

akta.pro secondary industries

Privacy, Data Protection & Cyber Governance (GRC) (BPAHAFAF), Critical Infrastructure Protection (CIP) & NERC-CIP Compliance (HDADAJAC), Vulnerability Management & Penetration Testing Services (BPAEADAD), Threat Intelligence Services (BPAEADAC)

Keywords

• Incident response services
• Threat monitoring
• Digital forensics
• Vulnerability assessment
• Cybersecurity consulting

Headquarters

HQ city

Colombo

HQ country

Sri Lanka

HQ region

Asia

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure

Revenue model

1. Government Funding: As a government-owned organization established in 2006, Sri Lanka CERT operates as a national cybersecurity centre funded by the government. Services appear to be provided free of charge to citizens, businesses, and government organizations as a public service.

Go-to-market motion1 record

Distribution channels4 records

Marketing channels6 records

Core offering

Sri Lanka CERT operates as the National Centre for Cyber Security for Sri Lanka, providing coordinated computer security incident handling, real-time threat monitoring via its National Cyber Security Operations Centre (NCSOC), advanced malware analysis through its MATH Lab, digital forensics investigation, network and application security advisory, and governance/risk/compliance consulting to government institutions, businesses, and citizens across the country. All services are delivered as a public service free of charge under the oversight of the Ministry of Digital Economy.

Product overview

Sri Lanka CERT is a government-owned Computer Emergency Readiness Team established in 2006, operating as the National Centre for Cyber Security. It functions as a single integrated service offering rather than a platform-plus-modules architecture. The organization provides cybersecurity incident response, handling, and coordination services through its core offerings including Network Security Services, Application Security Services, Governance Risk and Compliance Consulting, and Digital Forensics. Supporting capabilities include the National Cyber Security Operations Centre (NCSOC) for real-time threat monitoring across critical government infrastructure, the Malware Analysis and Threat Hunting (MATH) Lab for advanced threat analysis, and a Knowledge Base for public cybersecurity awareness. All services are delivered through government partnerships and international CERT networks including FIRST, Asia Pacific CERT, Cyber4Dev of European Union, and World Bank.

Differentiator

Problem solved

Functional benefit

Products and services

• Incident Handling Service A government cybersecurity incident response service providing coordinated handling of computer security incidents affecting Sri Lankan digital infrastructure, including threat monitoring and incident response coordination for government institutions, businesses, and citizens.
• Network Security Services Advisory service providing guidance on secure network practices, firewall setup, network segmentation, secure router settings, and implementing layered security measures for organizations.
• Application Security Services Service offering vulnerability assessments, secure coding guidelines, and patch management guidance to secure software applications for organizations.
• Governance, Risk, and Compliance Consulting Consulting service assisting organizations with compliance audits, risk assessments, and policy development to meet cybersecurity standards.
• Digital Forensics Investigation service that analyzes cyber incidents, preserves digital evidence with precision, and provides support to organizations throughout the recovery process.
• National Cyber Security Operations Centre (NCSOC) A centralized facility providing real-time threat monitoring, coordinated incident response, and proactive cyber defence mechanisms across critical government infrastructure, with direct connection services for critical institutions.
• Malware Analysis and Threat Hunting Lab (MATH Lab) A specialized laboratory focused on advanced malware analysis and threat hunting capabilities for identifying and analyzing cyber threats targeting Sri Lankan digital infrastructure.
• Knowledge Base and Awareness Programs Cybersecurity awareness and educational content covering topics such as financial scams, phishing, social media safety, ransomware protection, and data breach prevention, distributed through the website and the multilingual Cyber Guardian newsletter.

Named customers2 records

Segments6 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Eight partnerships are on record, tiered core and major.

• Ministry of TechnologycoreOthersGovernment ministry providing oversight and policy direction for technology initiatives including cybersecurity
• Ministry of FinancecoreOthersGovernment ministry providing budgetary and financial support for national cybersecurity initiatives
• Ministry of Digital EconomycoreStrategic or Co-development PartnerLead ministry under which Sri Lanka CERT operates. The ministry provides strategic direction for national cybersecurity framework and digital economy protection.
• FIRST (Forum of Incident Response Team)coreTechnology or IntegrationGlobal forum of incident response teams enabling international cooperation, threat intelligence sharing, and best practice exchange among cybersecurity response organizations worldwide.
• Asia Pacific CERT (APCERT)coreTechnology or IntegrationRegional CERT network for Asia Pacific enabling cross-border incident response coordination and cybersecurity capacity building.
• Cyber4Dev of European UnionmajorStrategic or Co-development PartnerEU-funded program supporting cybersecurity development and capacity building in partner countries including Sri Lanka.
• ICTA (Information and Communication Technology Agency of Sri Lanka)coreStrategic or Co-development PartnerNational ICT agency providing technical collaboration on digital infrastructure and cybersecurity initiatives.
• NCSOC (National Cyber Security Operations Centre)coreTechnology or IntegrationNational operations centre established by Sri Lanka CERT for real-time threat monitoring and coordinated incident response across critical government infrastructure.

Scale indicators4 records

Recent moves8 records

Expansion highlights5 records

Direct peers

• ThaiCERT (Thailand Computer Emergency Response Team): Thailand's national CERT under ETDA, providing incident response, security advisories, and digital forensics. Direct peer at the national CERT level with comparable service taxonomy and APCERT membership.
• MyCERT (Malaysia Computer Emergency Response Team): Malaysia's national CERT under MyDigital, providing incident handling, malware analysis, and digital forensics. Direct peer offering the same integrated CERT function with similar Asia Pacific APCERT membership and similar service taxonomy (incident handling, GRC, awareness).
• JPCERT/CC (Japan Computer Emergency Response Team Coordination Centre): Japan's national CERT coordination centre, providing incident handling, vulnerability analysis, and malware analysis. Direct peer with equivalent FIRST and APCERT membership and a comparable MATH Lab–style technical analysis function.
• Singapore CSA (Cyber Security Agency): Singapore's national cybersecurity authority operating the national SOC, threat intelligence, and incident response. Direct peer at the national CERT / SOC level with a more mature NCSOC-equivalent and broader mandate; comparable APCERT member.
• CERT-In (Indian Computer Emergency Response Team): India's designated national CERT under MeitY, providing incident response, threat intelligence, and security guidance. Most directly comparable peer — same national CERT mandate, same South Asia geographic context, and overlapping membership in FIRST and APCERT.
• ID-SIRTII/CC (Indonesia Security Incident Response Team on Internet Infrastructure): Indonesia's national CERT, providing incident response, malware analysis, and digital forensics under BSSN. Direct peer at the national CERT level with shared APCERT membership and broadly overlapping service taxonomy.
• CERT NZ (Computer Emergency Response Team New Zealand): New Zealand's national CERT providing incident response, threat intelligence, and advisories. Direct peer operating with the same government-funded national CERT model, similar service taxonomy, and parallel reporting portal.

Broad incumbents

• NCSC UK (National Cyber Security Centre): UK's national cybersecurity authority, providing national SOC operations, incident response, and threat intelligence. Comparable national CERT function but materially larger scope, capability stack, and budget — represents the benchmark 'mature' CERT model Sri Lanka CERT is moving toward.
• ACSC (Australian Cyber Security Centre): Australia's national cyber authority under ASD, providing national SOC, incident response, and threat intelligence. Comparable national CERT function and reporting portal structure, but with substantially broader capabilities and federal scope.
• CISA (Cybersecurity and Infrastructure Security Agency, USA): US federal agency operating as the national cyber defence coordinator for critical infrastructure. Comparable national CERT/CIP function with a much larger mandate and budget; Sri Lanka CERT's NCSOC-to-CGI mandate closely mirrors CISA's federal coordination role.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/sri-lanka-cert-cc

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Sri Lanka Cert