Merbau

Capital & Technologies Sdn. Bhd.

Software, IT consulting and cybersecurity services โ€” pragmatic security consulting and advisory for Malaysia's regulated sectors.

NACSA-Certified Cyber Security Service Provider (CSSP)

01Who we are

A Malaysian cybersecurity company registered for software development, IT consulting and cybersecurity services. We help organisations understand and reduce their security risk โ€” with practical, senior-level advice grounded in internationally recognised standards and Malaysian regulatory expectations.

02What we do

Cybersecurity consulting, advisory and hands-on testing services, delivered against internationally recognised standards and Malaysian regulatory expectations.

Security Strategy & Advisory

Management-level guidance on security priorities, investment and roadmaps.

Governance, Risk & Security Assessments

Practical security reviews aligned to Malaysian regulatory expectations.

Compliance & Regulatory Readiness

Gap reviews and remediation guidance to prepare for regulatory and industry requirements.

Security Architecture & Design Review

Advisory review of system designs and proposed controls before you build.

Web Application Penetration Testing

Manual-first testing of web applications against the OWASP Top 10 and beyond.

Network & Infrastructure Testing

External and internal network assessment, segmentation and configuration review.

Mobile & API Security Testing

Mobile applications, APIs and back-end services across iOS and Android.

Vulnerability Assessment

Systematic identification, validation and prioritisation of weaknesses.

03Contact

Get in touch to discuss how we can help with your security challenges.

REGISTRATION NO.
202501007697 (1609111-V)
CERTIFICATION
NACSA CSSP