New insight: Building an actionable exposure program

About Cyberus

A Lao cybersecurity company, founded in 2019, focused on practical and responsible security work.

Our story

A Lao cybersecurity company since 2019

Cyberus was founded in Lao PDR in 2019 with a focus on practical cybersecurity capability and responsible delivery. The company works with customers by defining the question, agreeing the boundary and producing evidence that can support a next decision. Founder and CEO Sengxay Xayachack leads the company and is represented in the published leadership record below.

Founded
2019, Lao PDR
Focus
Practical cybersecurity capability
Delivery
Responsible, scoped and evidence-led
Founder and CEO
Sengxay Xayachack

Practical capability, built through responsible delivery

Cybersecurity work is useful when it helps someone make a better decision. That may mean understanding a system’s exposure, preparing evidence for a requirement, improving how activity is reviewed, coordinating an investigation or helping a team apply security in its daily work. Cyberus approaches those needs as practical operating questions rather than abstract promises.

Responsible delivery begins before technical work. The customer and Cyberus identify the purpose, the people who can authorize it, the systems and data involved, the methods that are acceptable and the conditions that would pause or change the work. That shared understanding protects the customer, the people doing the work and systems outside the intended boundary.

The result should also be usable. Evidence is explained with context, uncertainty is kept visible and recommended next steps are separated from confirmed observations. A report is not treated as the end of the conversation: teams need to understand what the evidence means, who owns the next decision and what should be verified again after a change.

What guides our work

  • Purpose before activity

    The work begins with the decision or learning goal, so methods and deliverables stay relevant to the reason for the engagement.

  • Authorized and scoped

    Systems, people, techniques, timing and exclusions are agreed before testing or investigation begins.

  • Evidence over assumption

    Observations are validated where the scope permits, described in context and distinguished from hypotheses or open questions.

  • Clear handling

    Access, communication and evidence handling are discussed as part of delivery rather than left as administrative details.

  • Useful handover

    Findings, decisions and follow-up work are explained so the customer can assign ownership and continue improving.

Responsible practice is part of the work

Cyberus does not treat access or technical capability as permission. Testing and investigation require an agreed purpose, documented authorization and clear boundaries. If scope, ownership or safety conditions are uncertain, the responsible next step is to resolve them before continuing.

How Cyberus works with customers

  1. Listen and frame

    Understand the environment, the concern, the people affected and the decision the customer needs to make.

  2. Agree the boundary

    Document scope, authority, inputs, constraints, communication and evidence handling before delivery starts.

  3. Carry out the work

    Use the agreed approach, communicate material scope questions and keep observations separate from assumptions.

  4. Explain the evidence

    Present what was observed, why it matters, what remains uncertain and which decisions follow.

  5. Support the handover

    Help the customer identify ownership, sequence follow-up work and define what should be checked again.

Leadership

  • Sengxay Xayachack

    Founder and CEO

    Former ethical hacker who founded Cyberus in 2019, and a mentor in the local cybersecurity community.

Work with Cyberus

Bring the security question you are working through, the environment it affects and the decision that needs evidence.

Talk to a specialist
Talk to a specialist