Solutions
Offensive, defensive and strategic security services, each starting from an agreed scope and the decision you need to make.
Cybersecurity solutions for your business
Cyberus helps organizations in Lao PDR test what an attacker could reach, detect and respond to what is happening now, and plan the security work that comes next. Every engagement starts with an agreed scope and a practical question.
Our solutions fall into three directions: offensive testing, defensive operations, and strategic advice and training. You can begin in any one of them and combine them as your needs change.
Explore our solutions
Offensive Services
Authorized exercises that examine plausible attack routes and how selected controls behave.
Attack Path Mapping
Map how identities, assets and trust relationships may connect into viable attack routes.
Read more about Attack Path MappingAdversary Simulation Services
Explore the Offensive Security practice area for authorized, objective-led testing.
Read more about Adversary Simulation ServicesRed Teaming
Run an objective-led exercise across approved technology, people and physical controls.
Read more about Red TeamingPurple Teaming
Connect controlled attack activity with collaborative detection and response improvement.
Read more about Purple TeamingThreat-Led Testing
Shape authorized scenarios using relevant threat evidence and agreed critical assets.
Read more about Threat-Led TestingCustomised Adversary Simulation
Build a bounded simulation around a specific security question and environment.
Read more about Customised Adversary SimulationEDR Efficacy Assessment
Evaluate selected endpoint controls through safe simulations and telemetry review.
Read more about EDR Efficacy AssessmentPhishing and Vishing Simulations
Examine reporting and verification habits through safeguarded email and voice scenarios.
Read more about Phishing and Vishing Simulations
Defensive Services
Services that improve visibility, control design, response preparation and operational resilience.
Continuous Cyber Reconnaissance
Review the external footprint agreed in a written scope for relevant exposure and threat context.
Read more about Continuous Cyber ReconnaissanceContinuous Attack Surface Management
Review internet-facing assets, ownership and exposure on the cadence set in a written scope.
Read more about Continuous Attack Surface ManagementDark Web Monitoring
Review agreed, lawful external sources for exposed information and digital risk signals.
Read more about Dark Web MonitoringManaged Extended Detection and Response
Operate selected endpoint and cross-domain detection tools as defined in a written scope.
Read more about Managed Extended Detection and ResponseThreat Modelling
Model assets, trust boundaries and plausible misuse to guide design decisions.
Read more about Threat ModellingIncident Response Services
Investigate incidents and support informed containment and recovery decisions.
Read more about Incident Response ServicesBusiness Continuity Planning
Plan critical-service priorities, dependencies and workarounds for cyber disruption.
Read more about Business Continuity PlanningMicrosoft Security Configuration
Review and harden Microsoft settings on applicable systems you authorize in the agreed scope.
Read more about Microsoft Security Configuration
Penetration Testing Services
Authorized testing options for selected systems, applications, environments and attack scenarios.
Penetration Testing Services
Validate exploitable weaknesses across an authorized, time-bounded technical scope.
Read more about Penetration Testing ServicesNetwork Security Testing
Apply penetration testing to an agreed internal or external network scope.
Read more about Network Security TestingWeb Application Testing
Apply penetration testing to an agreed web application and API scope.
Read more about Web Application TestingCloud Security Testing
Apply penetration testing to an agreed cloud tenant, identity and service scope.
Read more about Cloud Security TestingAI Security Testing
Test selected AI application, model interaction, data and tool-use boundaries.
Read more about AI Security TestingPhysical Security Testing
Assess approved physical access scenarios under explicit safety controls.
Read more about Physical Security TestingPCI DSS Scanning
Support PCI DSS readiness with scoped scans and explicit ASV, QSA and compliance limits.
Read more about PCI DSS ScanningManaged Vulnerability Scanning
Review recurring scan results on an agreed service schedule.
Read more about Managed Vulnerability ScanningRed Teaming
Explore a defined objective through a controlled, multi-layer adversary exercise.
Read more about Red TeamingPenetration Testing Resources
Prepare authorization, scope, evidence handling and remediation follow-up.
Read more about Penetration Testing ResourcesThreat-Led Penetration Testing
Use relevant threat context to focus an authorized testing scenario.
Read more about Threat-Led Penetration Testing
Incident Response Services
Preparation, exercising, investigation support and scenario-specific response guidance.
Incident Response Services
Preserve evidence, investigate events and support containment and recovery choices.
Read more about Incident Response ServicesCyber Incident Exercising
Practise cross-functional decisions and communications through a facilitated scenario.
Read more about Cyber Incident ExercisingCyber Incident Readiness
Review roles, evidence, access and dependencies before an incident.
Read more about Cyber Incident ReadinessRansomware Simulation
Exercise ransomware decisions safely without deploying destructive code.
Read more about Ransomware SimulationIncident Response Retainer
Pre-agree support governed only by the availability and coverage in a written service schedule.
Read more about Incident Response RetainerIncident Response Consultation
Arrange a structured discussion of an incident concern and proportionate next steps.
Read more about Incident Response ConsultationBusiness Continuity Planning
Define critical-service priorities and dependencies for a cyber disruption.
Read more about Business Continuity PlanningIncident Response Playbook Development
Create scenario guidance tied to real roles, evidence and decision authority.
Read more about Incident Response Playbook Development
Advisory Services
Evidence-led review and planning for maturity, controls and selected PCI DSS readiness needs.
Cyber Maturity Audit
Assess selected security capabilities against agreed criteria and sampled evidence.
Read more about Cyber Maturity AuditSecurity Audit and Compliance
Review agreed controls, evidence and practical audit preparation needs.
Read more about Security Audit and CompliancePCI DSS Scanning
Support readiness with scoped scanning without claiming ASV, QSA or compliance status.
Read more about PCI DSS Scanning
Cybersecurity Training
Practical training, exercises and simulations that build security skills and everyday habits.
Secure Coding Training
Help developers recognize, fix and review common weaknesses in their own code.
Read more about Secure Coding TrainingDefensive Security Training
Build logging, alert triage and first-response skills for IT and security staff.
Read more about Defensive Security TrainingCybersecurity Awareness
Strengthen everyday habits around phishing, credentials, data handling and reporting.
Read more about Cybersecurity AwarenessTabletop Exercise
Practise incident decisions and communications through a facilitated discussion scenario.
Read more about Tabletop ExerciseSocial Engineering Simulation
Practise reporting and verification through authorized, safeguarded email and voice scenarios.
Read more about Social Engineering SimulationEC-Council Official Training Center
Enquire about EC-Council training, with course, schedule and exam details confirmed in writing.
Read more about EC-Council Official Training Center
Team certifications
Individual qualifications held by members of the Cyberus team. They are not company accreditations, and not every consultant on an engagement holds every badge.
OSCP
Hands-on penetration testing skills, from enumeration to exploitation and privilege escalation.
OSWE
Web application security skills, including source code review and exploiting complex web vulnerabilities.
OSED
Exploit development skills, including analysing Windows software and writing custom exploits.
OSCP+
Hands-on penetration testing skills, from enumeration to exploitation and privilege escalation.
CRTA
Red team analysis skills, including adversary tactics and techniques.
eWPT
Web application penetration testing skills, from assessment method to exploiting common web flaws.
eWPTX
Advanced web application penetration testing skills, including complex attack techniques.
eMAPT
Mobile application penetration testing skills for Android and iOS applications.
BTL1
Defensive security skills across security operations, phishing analysis, forensics and incident response.
eCIR
Incident response skills, including investigating, containing and analysing security incidents.
CRTE
Red teaming skills focused on Windows environments and the tradecraft used against them.
CCT
EC-Council's Certified Cybersecurity Technician (CCT) validates foundational security, network, and defense skills.
Security+
CompTIA Security+ validates core skills in baseline cybersecurity, risk management, and threats.
Our approach
Start from the exposure you can act on
Security work is most useful when it connects what is visible, what has been validated and who owns the fix.
Our insight on building an actionable exposure program sets out a practical way to link asset visibility, validation and remediation ownership.
Read the insightOur customers
Organizations we have worked with and can name.
Ministry of Public Security
Bank of the Lao P.D.R.
Maruhan Japan Bank Lao
M Money
Krungsri Leasing
KPV Gold (Khamphouvong Gold)
Easy Gold by Khamphouvong
LAPNet
AEON Leasing Laos
Indochina Bank
LDB Bank / Lao Development Bank
JDB / Joint Development Bank
APB (Agriculture Promotion Bank)
STB / ST Bank
BIC Bank
LBB (Lao Bullion Bank)
Mekong River Commission (MRC)
Bansi.la (Accounting Platform)
CMI (Champasack Microfinance Institute)
Anousith Express
Lao Social Security Organization
GIZ
TREEKOFF
Vangtao Dry Port
Lao IT Dev
LOCA
U.S. Embassy Vientiane
Bizgital
Lao Tobacco Limited
UXO Lao
AIDC Tech Sole Co., Ltd.
Lao eVisa
bitqik
LaiLaolab ICT Solution
ASEAN Lao PDR 2024
USAID
PTL Holding
FINA
Not sure which service fits?
Describe the risk, requirement or incident in front of you and the decision you need to make next. Cyberus can help turn that question into a reviewable scope.