The operator behind the platform
Cyber Defense Co., Ltd. was registered in Bangkok in 2015. For a decade we have run security operations for Thai organisations. zcr, the platform our delivery runs on, was built out of that work — not the other way round.
- Registered
- 2015 · Bangkok
- Tax ID
- 0105558158009
- Sales model
- 100% through partners
- Platform
- zcr · zcr.ai
We learned this by operating, not by advising
Cyber Defense started as an operations company and never stopped being one. Thai organisations handed us their logs, their alerts and their bad weekends, and our engineers worked them. A decade of that teaches you which alerts matter, which parts of a report a customer actually reads, and how much of a security service is unglamorous routine.
The tooling we needed did not exist at a price that worked in this market, so our engineers built it. That is zcr — eight products, built in-house, sold under their own brand at zcr.ai. The platform came out of the operations work, which is why it is shaped like the job rather than like a datasheet.
Two brands, one company, one job split in half. zcr.ai licenses the platform. Cyber Defense operates it under a partner's brand, for that partner's customers. One legal entity behind both, so a partner signs with one counterparty and can still buy only the half they are missing. We are the half you cannot download.
Three credentials, and who issued them
Best Cybersecurity Innovation Award
Awarded to zcrLog by NCSA Thailand, VNU Asia Pacific, SCBX NextTech and Cybersec Asia at Business Matching Day.
KnowBe4 Partner to Watch — Asia
From the APJ Partner Programme Awards, judged on partner-led delivery rather than on licence volume.
Thai standard มศอ. 4003.1-2560
The NECTEC standard for computer traffic data retention systems under the Computer Crime Act. Held by Cyber Defense Co., Ltd.
That is the whole list. We publish no customer names, no logos and no case studies, because the model only works if the customers of our partners never hear our name.
Who does the work, and who checks it
We do not publish a headcount, a photo wall or CVs. None of those are things a partner can verify or sell with. How the work is organised is.
Engineers, in Bangkok
The people who monitor, triage and escalate sit in Bangkok and work in UTC+7. The SOC runs 24 hours a day, every day of the year.
Reviewed before it leaves
Findings and reports are checked by a senior engineer before they reach you, because you are the one who has to defend them in front of your customer.
Never in the room
Our engineers work inside your tenant under your brand. They are not named on the contract, the ticket or the report, and they do not speak to your customer.
Only through partners. There is no second route.
Cyber Defense has never sold direct and has no direct sales team. Every engagement is contracted by an MSSP, systems integrator, MSP or reseller, who owns the customer relationship and sets the end price.
That is structural, not a policy we could quietly drop for a large enough deal. There is no one here to make that call and no channel to close it through.
Pick one customer. We will run it for 60 days.
Choose a customer you already serve. We deliver Managed Exposure on their domain for two months, in your template, at no cost — so you can see exactly what your customer would receive before you sign anything.
Apply as a partner