Cybersecurity in Singapore

No, and you should be wary of any Singapore provider who offers it without a licence. Under the Cybersecurity Act, penetration testing and managed SOC monitoring are licensable services, and the requirement applies to companies, freelancers and sole proprietorships alike. GDI is not licensed for them, so we do not sell them. What we do instead is vulnerability assessment, application and code security review, and hardening — which are not licensable — and if you need a true penetration test we will tell you to engage a CSA-licensed provider.

A vulnerability assessment scans and reviews your systems to identify weaknesses; a penetration test goes further and actively compromises your defences to prove exploitability. That distinction is exactly why Singapore licenses one and not the other. For most SMEs an assessment plus a code review finds the issues that matter, and the budget is better spent fixing them than proving them.

No. Managed SOC monitoring is a licensable service in Singapore, and round-the-clock coverage needs a staffed rota we do not have. We will help you configure endpoint and cloud alerting and hand it to your team or a licensed MSSP, rather than promise a watch we cannot keep.

The product itself may be PSG-claimable if you buy it from a listed vendor — but PSG pays that vendor for their packaged product, and GDI is not listed. Our setup, integration and configuration work is not PSG-claimable. We will tell you plainly which parts are which before you commit.

We can act as your appointed Data Protection Officer, build your data inventory and policies, handle access queries and complaints, and prepare your breach-response process to meet PDPA duties. It is a practical compliance service — not legal advice, and we are not a law firm.