Xcidic was founded in Singapore in 2015 by people from the defence sector. We deploy the firewalls, DDoS protection and networks that militaries and carriers rely on, then run them for businesses and governments across Asia.
Peak attack size up 262% in a year. Attack waves as short as 6 seconds. 90.9% of attacks over in under 10 minutes. 12.3 attacks a day on the average protected network. Source: Corero Threat Intelligence Report 2026.
Ransomware groups and state-backed attackers now go after commercial firms with methods once kept for governments. Commercial-grade tools weren’t built for that.
We source from several countries, so no single nation’s supply chain can compromise your defences.
Most organisations expose hundreds of them. Each is a way in that perimeter tools were never built to watch.
We’ve found critical flaws that survived formal government reviews. Attackers don’t wait for the next audit.
Each layer comes from a partner that leads its field. Xcidic deploys all four, watches them around the clock and takes the call when something happens. Each one maps to the OSI model, from the physical links up to your applications. Pick a layer to see what’s in it.
Powered by Xcidic
We monitor every layer of your estate, surface new risks as they appear and test your defences again after every change.
Powered by Corero and Xcidic
Always-on mitigation of application floods, including encrypted TLS attacks and HTTP floods that most tools can’t see, with live traffic analytics and regular testing.
Powered by AXGATE and Corero
Military-validated firewalls, quantum-safe VPN and always-on mitigation of volumetric floods (SYN, UDP and reflection attacks) at your edge, inspecting every packet at line rate.
Powered by PCCW Global
Carrier-grade circuits, private MPLS networks, internet access, cloud on-ramps and colocation. Your data never travels over infrastructure you don’t control.
NewClean Pipe as a Service
We clean your traffic before it reaches your network. We own the kit, refresh it and run it. For data centres, ISPs, telcos, critical infrastructure and enterprises.
NewMulti-network IoT SIM
One SIM on both Telkomsel and Indosat for GPS trackers across Indonesia. Delivered with PCCW Global and supported locally by Xcidic.
“We don’t sell security. We apply it.”
| Where it shows | A typical security firm | Xcidic |
|---|---|---|
| Philosophy | Security sold as a product | Security as a discipline, learnt where failure isn’t an option |
| Technology | Commercial tools tested against known threats | Kit validated by militaries and critical infrastructure operators |
| Threat model | Stop common threats, pass the audit | Built against persistent, well-funded attackers |
| Approach | Added after the system is built | Secure by design, from the first line of code to production |
| Engagement | A one-off assessment, then gone | Continuous assurance, because attackers don’t stop between audits |
Ollo, NASDAQ-listed technology, Singapore
Ollo had six months after listing to show full security maturity. There was no secure development process and flaws kept reaching production. We joined the engineering team, built SAST and DAST into every CI/CD pipeline and trained developers in secure coding.
6 mo
To a full framework
95%
Fewer vulnerabilities
70%
Faster fixes
GPS tracking company and EV fleet, Indonesia
Trackers on single-network prepaid SIMs went quiet wherever the signal was weak, and expired packages stopped them altogether. After a proof of concept on switching, failover and reboot recovery, we moved both firms onto PCCW’s dual-network SIM and measured 30 days on live vehicles.
22m
Offline in the month
45s
Longest single gap
0
Positions lost
Infrastructure and IoT, Hong Kong
One of the world’s largest carrier-grade networks, with the SLAs governments and banks demand.
3,000+ points of presence in 150+ countries
Network security, South Korea
Korea’s leading network security vendor, listed on KOSDAQ. Its VPN is certified by Korea’s National Intelligence Service.
Protects the Korean military and 207 financial firms
DDoS protection, United Kingdom
A Leader in the QKS SPARK Matrix 2026 for DDoS mitigation. SmartWall ONE drops attacks with nobody in the loop.
Cut TierPoint’s response from 6 minutes to 18 seconds
We work across all three stages, or join at any point.
Step 1
We map what you actually run: the internet edge, the perimeter, the applications and the suppliers wired into them. You get a ranked view of exposure before anyone proposes a product.
Step 2
We size and build against what the assessment found, then prove it on your own traffic before you commit.
Step 3
Defences decay as systems change. We monitor continuously, retest after every change and adapt as the threat moves.
The threats your organisation faces were once aimed only at nation-states. Book a free exposure review: one session to map your attack surface and rank your biggest risks. No obligation.
Prefer to write?
sales@xcidic.com