Stone Cybersecurity

Cybersecurity

Stone Cybersecurity focuses on VAPT, Security Audits and Cyber Security Technologies.

Singapore address: Singapore 079914
Team size: 11-50

Request a quote Contact Visit website

Overview of Stone Cybersecurity

Specializations

Penetration testingVulnerability assessmentCompliance certificationSecurity awareness training

Stone Cybersecurity is a Singapore-based, CREST-certified cybersecurity firm serving clients across industries including healthcare, telecommunications, logistics, and finance. The company provides vulnerability assessment, penetration testing, security audits, and red teaming, alongside managed services covering 24/7 security operations and incident response. It supports compliance and certification efforts for ISO 27001, Cyber Essentials Mark, and Cyber Trust Mark, and helps organizations navigate ASEAN regulatory requirements. Stone Cybersecurity also delivers security awareness training and phishing simulations to reduce human error. Drawing on a team with decades of combined experience, the firm aims to expand its operations across the wider Asia region.

Recorded Singapore presence: Physical Singapore office
Address: Singapore 079914
Email: contactus@stonecyber.org
Website: https://www.stonecyber.org
Best for: Stone Cybersecurity focuses on VAPT, Security Audits and Cyber Security Technologies.
Services: IoT Security, OT Security, Penetration Testing, Vulnerability Assessment, Email Phishing
Capabilities: IoT Security, OT Security, Penetration Testing, Vulnerability Assessment, Email Phishing, Ransomware, CASB

Profile updated 26 Jun 2026 Report incorrect data

Locations

Other office locations

60 Anson Road #17-01 079914, Singapore
Kuala Lumpur, Malaysia

Buyer Decision Checklist

Cybersecurity buying in Singapore turns on PDPA, the CSA Cybersecurity Act, and sector mandates from MAS and MOH. Use this checklist before you shortlist.

How to evaluate a cybersecurity vendor in Singapore

Confirm scope, rules of engagement, and who owns remediation before you sign.
Treat ISO 27001 / SOC 2 Type II / CREST as a baseline — ask for the auditor name and audit date, not just a logo.
Separate 'managed' from 'monitored': ask exactly what the vendor does at 3am when an alert fires, and whose name is on the on-call roster.
Check which reports are board-, audit-, or regulator-ready (MAS TRM, HCSF, or IM8 as applicable to you).
Get a fixed-fee scope for the first 90 days with unit pricing for extra endpoints, log volume, or incident-response hours.

Verify for Stone Cybersecurity

Confirm key details directly with the vendor — this listing isn't vendor-managed yet.
Ask for two recent Singapore client references you can speak with.
Request evidence of relevant certifications and their current validity.

Questions to ask

What is included in scope and retest, and what is explicitly excluded?
Can you share two Singapore clients in my sector and size that I can speak to?
How do you meet PDPC's 72-hour breach-notification window contractually?

Prepared under the TechDirectory editorial byline with review credit June C; this label is not proof of identity, credentials, or a completed human review. This directory-authored checklist is not attributed to Stone Cybersecurity; editorial independence has not been independently audited. Editorial standards

5/100

Profile signal score

Based on recorded profile signals. It is not a certification or independent verification of every claim, and it does not measure vendor quality or endorsement; paid plans do not affect it. How it works.

UEN recorded on profile No UEN recorded 0/20
Owner-claimed profile No owner claim recorded 0/10
Recorded grant eligibility None recorded 0/15
Recorded CSA trustmark None / expired 0/15
Listed certifications None listed 0/10
Approved reviews No approved reviews yet 0/20
Profile completeness 5/10 completeness 5/10