Product security
Penetration testing, blockchain audits, and the WhiteHub bug bounty platform surface vulnerabilities before your product reaches end users.
About CyStack·Hanoi · 2017
Founded in Hanoi in 2017, CyStack builds cybersecurity products and services for organizations across Vietnam and the region, covering penetration testing, 24/7 monitoring, and sensitive data protection.
In 2017, Vietnam was riding an unprecedented wave of digital transformation. New technology companies launched every quarter to reinvent legacy industries, and they became fresh targets for attackers, facing rising technical and financial hurdles to defend themselves.
Trung Nguyen, by then a recognized application security researcher honored in the Hall of Fame of many leading global technology companies, saw the need for a security company that spoke the language of Vietnamese businesses. He founded CyStack to deliver a full stack of cybersecurity offerings (Cyber and Stack), broad enough for individuals and deep enough for the enterprise.
From a small research team, CyStack now serves more than 600 customers in multiple countries. We operate proprietary products such as WhiteHub, Locker, and CyStack Endpoint, while our experts continue to disclose new security vulnerabilities and present at international security conferences.
Our mission
We build a safer internet by combining seasoned security practitioners, proprietary technology, and a strong community of independent researchers.
Every CyStack product and service solves a specific problem in the security lifecycle, from product development to long term operations.
Penetration testing, blockchain audits, and the WhiteHub bug bounty platform surface vulnerabilities before your product reaches end users.
Round the clock infrastructure monitoring, vulnerability management, and incident response keep enterprise systems protected throughout their lifetime.
Locker secures enterprise credentials, CyStack Endpoint manages devices, and Data Leak Detection stops sensitive information from leaving the perimeter.
CyStack researchers publish CVEs and speak at Black Hat, T2FI, and XCON, while the WhiteHub community connects thousands of researchers across the region.
Years of expertise
Enterprise customers
Threats stopped
Digital assets protected
Monitoring and response
CyStack is a member of Vietnamese and international industry associations, and holds accredited certifications for quality management, information security, and penetration testing capability.
Industry memberships

NCANational Cyber Security Association of Vietnam
CRESTInternational body for technical cybersecurity
INATBAInternational Association for Trusted Blockchain Applications
Certifications and standards
ISO/IEC 27001Information security management system
ISO 9001Quality management system
CREST PentestPenetration testing accredited to international standards
CyStack products and platforms have been recognized year after year by Vietnamese industry associations and government bodies.
Presented by VINASA · Vietnam Software and IT Services Association
Presented by Ministry of Information and Communications of Vietnam
Presented by Ministry of Information and Communications of Vietnam
Presented by VDCA · Vietnam Digital Communications Association
Presented by VNISA · Vietnam Information Security Association
Our researchers have disclosed CVE recognized vulnerabilities and earned Hall of Fame placements from many leading global technology companies. We regularly share findings at international security conferences such as Black Hat, T2FI, and XCON.
Browse the full list of findingsCyStack is led by hands on security practitioners with proven offensive and defensive experience.
Founder and CEO
Cybersecurity expert with more than ten years of experience in application exploitation and cloud infrastructure security. Trung has been honored in the Hall of Fame of many leading global technology companies for disclosing critical vulnerabilities. He is an accomplished software architect and an active contributor to globally recognized open source security projects.
LinkedIn