Malaysian-Made, Globally-Ready: Vulsan X Cydef’s MySTI-Certified Cybersecurity Arsenal Redefines Sovereign Cyber Resilience + Video

By /

Listen to this Post

Featured Image

Introduction:

In an era where cyber threats transcend borders and supply chain vulnerabilities expose national security gaps, the certification of indigenous cybersecurity technologies has become a strategic imperative. Vulsan X Cydef Sdn Bhd, a Seremban-based cybersecurity firm founded in 2019, has officially secured MySTI (Malaysian Science, Technology, and Innovation) certification for its entire technology portfolio—a government-backed initiative designed to accelerate the commercialisation of locally-developed R&D products and grant them priority in government procurement. This achievement signals more than regulatory compliance; it marks the maturation of Malaysia’s domestic cyber defence capabilities, positioning home-grown AI-powered solutions as viable alternatives to legacy international vendors.

Learning Objectives:

  • Understand the technical architecture and operational capabilities of Vulsan X’s six MySTI-certified cybersecurity products
  • Master practical implementation techniques including threat intelligence feed integration, SIEM correlation, OSINT reconnaissance, and SOC workflow automation
  • Acquire actionable Linux and Windows commands for security hardening, log analysis, and breach assessment aligned with enterprise-grade defence frameworks

You Should Know:

  1. VXCTI – Home-Grown Threat Intelligence with Global Reach

VXCTI (VX Cyber Threat Intelligence) is a comprehensive threat intelligence solution that combines proprietary intelligence harvested from in-house honeypots—focusing on region-specific threats across Southeast Asia—with third-party data aggregated from over 30 international sources. The platform delivers real-time intelligence updates refreshed hourly, including indicators of compromise (IOCs), threat actor profiles, emerging vulnerability disclosures, and deep packet inspection (DPI) rules.

Access is managed via cloud-distributed license keys, ensuring that only authorised users consume the intelligence feed. The system integrates seamlessly with firewalls, intrusion detection systems (IDS), and SIEM platforms, enabling automated threat detection and response orchestration.

Step-by-Step Guide: Integrating VXCTI Feeds with a SIEM (Example using Splunk)

  1. Obtain API credentials – Request your cloud-distributed license key from Vulsan X’s administration portal.
  2. Configure the HTTP Event Collector (HEC) in Splunk – Navigate to Settings > Data Inputs > HTTP Event Collector. Create a new token and note the endpoint URL.
  3. Set up a Python script to pull VXCTI feeds – Use the following script to fetch hourly updates:
import requests
import json
import time

VXCTI_API_KEY = "your_license_key_here"
VXCTI_ENDPOINT = "https://api.vulsanx.com/vxcti/feed"
SPLUNK_HEC_URL = "https://splunk-server:8088/services/collector"
SPLUNK_HEC_TOKEN = "your_splunk_hec_token"

def fetch_vxcti_feed():
headers = {"Authorization": f"Bearer {VXCTI_API_KEY}"}
response = requests.get(VXCTI_ENDPOINT, headers=headers)
if response.status_code == 200:
return response.json()
return None

def send_to_splunk(data):
headers = {"Authorization": f"Splunk {SPLUNK_HEC_TOKEN}"}
payload = {"event": data, "sourcetype": "vxcti:threat:intel"}
requests.post(SPLUNK_HEC_URL, headers=headers, json=payload)

while True:
feed_data = fetch_vxcti_feed()
if feed_data:
send_to_splunk(feed_data)
time.sleep(3600)  hourly refresh
  1. Create correlation searches in Splunk – Build alerts that trigger when IOC matches are found in firewall logs or endpoint telemetry.
  2. Automate response – Use Splunk’s adaptive response framework to push blocking rules to your firewall via API when high-severity IOCs are detected.

Windows Command for Firewall Block Rule (based on VXCTI IOC):

New-1etFirewallRule -DisplayName "VXCTI_Block_IP" -Direction Inbound -Action Block -RemoteAddress "203.0.113.45"

Linux Command (iptables):

sudo iptables -A INPUT -s 203.0.113.45 -j DROP
  1. VAIX – Asia’s First AI-Driven Cyber Threat Intelligence Platform

VAIX (VulsanAIX) is the first AI-driven cyber threat intelligence platform in Asia, leveraging advanced Large Language Models (LLMs) and machine learning algorithms to deliver real-time threat analysis. The platform traces each attack from the hacker’s source IP to the targeted destination, providing forensic-grade visibility into attack kill chains.

Operational metrics demonstrate its efficacy: VAIX processes data from 11 global and regional honeypots, having collected over 641 million cyber threat intelligence events in a single year, achieving 95% accuracy in threat detection and classification. The platform offers zero-downtime continuous monitoring and autonomously constructs incident stories with remediation logic using AI.

Step-by-Step Guide: Deploying AI-Powered Threat Detection with VAIX

  1. Onboard your organisation – Provide Vulsan X with your network perimeter details and logging endpoints.
  2. Deploy the VAIX collector agent – Install the lightweight agent on your syslog server or SIEM forwarder (supported on Linux and Windows).
  3. Configure log forwarding – Ensure your firewalls, proxies, and endpoints forward logs to the VAIX collector. Example for rsyslog (Linux):
 /etc/rsyslog.conf
. @vAIX-collector.vulsanx.com:514
  1. Enable AI correlation – VAIX automatically correlates events across time and source, using LLMs to generate natural-language incident summaries.
  2. Review AI-generated reports – Access the VAIX dashboard to view real-time threat reports with prioritised remediation actions.
  3. Integrate with SOAR – Use VAIX’s REST API to trigger automated playbooks in your SOAR platform.

Sample API Call to Retrieve VAIX Threat Summary:

curl -X GET "https://api.vulsanx.com/vaix/summary" \
-H "Authorization: Bearer YOUR_VAIX_TOKEN" \
-H "Content-Type: application/json"
  1. VX Sentinel – Predictive Narrative Intelligence for Digital Reputation Defence

VX Sentinel is a proprietary sentiment analysis and intelligence platform designed to monitor, analyse, and interpret public opinion across millions of data points spanning social media, news outlets, blogs, forums, and video platforms in over 240 languages. Its predictive narrative intelligence capability analyses trends and emerging narratives to generate AI-driven predictive suggestions, enabling leaders to shape public perception and mitigate reputational risks before they escalate.

The platform delivers flexible dashboards, real-time alerts, and direct consultancy from Vulsan X’s Strategic Intelligence & Knowledge (SIK) team, adapting to governments, corporations, and political entities.

Step-by-Step Guide: Setting Up VX Sentinel Alerts

  1. Define monitoring parameters – Specify keywords, brand names, competitor references, and industry-specific terms.
  2. Configure source coverage – Select which data sources to monitor (social media, news, forums, dark web).
  3. Set sentiment thresholds – Define polarity scores that trigger alerts (e.g., negative sentiment score below -0.7).
  4. Create alerting rules – Configure email, SMS, or webhook notifications for high-priority mentions.
  5. Review strategic reports – Access AI-generated narrative analysis and recommended response strategies.

  6. NeonOSINT – Full-Spectrum Open-Source Intelligence for Brand Protection

NeonOSINT is a strategic OSINT solution that provides organisations with full visibility into external digital threats that can damage brand reputation and compromise trust. Core capabilities include profiling and monitoring potential threat actors, web crawling for suspicious activity, dark web scanning for leaked credentials or unauthorised mentions, and facilitating rapid takedown of malicious content.

The platform distils raw data into actionable intelligence with AI-powered analysis and scalable intelligence coverage.

Step-by-Step Guide: Conducting OSINT Reconnaissance with NeonOSINT

  1. Initiate a brand scan – Enter your organisation’s domain, brand names, and key executives.
  2. Configure web crawling parameters – Set depth, frequency, and source preferences.
  3. Monitor dark web mentions – Enable dark web scanning for credential leaks and threat actor chatter.
  4. Review threat actor profiles – Analyse identified actors, their TTPs, and associated infrastructure.
  5. Initiate takedown requests – Use the integrated reporting module to request removal of unauthorised or malicious content.

Complementary OSINT Commands (Manual Reconnaissance):

 WHOIS lookup for domain intelligence
whois example.com

DNS enumeration
dig example.com ANY

Subdomain discovery using Amass (Kali Linux)
amass enum -d example.com

Search for exposed credentials in GitHub (using truffleHog)
trufflehog git https://github.com/example/repo.git

Windows OSINT Tools (PowerShell):

 Resolve IP to hostname
Resolve-DnsName 8.8.8.8

Test network connectivity and routing
Test-Connection -ComputerName example.com -Count 4
tracert example.com
  1. VX SOC – Proactive Defence Hub with Managed Security Services

VX SOC functions as a Proactive Defence Hub, offering 24/7 real-time threat detection and automated incident response orchestration. The SOC leverages advanced analytics, SIEM systems, intrusion detection, and log analysis tools to collect and correlate security event data in real-time.

As a Managed Security Service Provider (MSSP), Vulsan X delivers outsourced security operations including threat monitoring, incident response, vulnerability management, security assessments, and security device management. The service is particularly cost-effective for organisations lacking the resources to maintain an in-house SOC, with flexible pricing models and scalable solutions.

Step-by-Step Guide: Implementing SOC Monitoring with VX SOC

  1. Define monitoring scope – Identify critical assets, data flows, and compliance requirements.
  2. Deploy log collectors – Install VX SOC agents across servers, network devices, and cloud environments.
  3. Configure correlation rules – Work with Vulsan X’s SOC engineers to define custom detection rules.
  4. Establish incident response playbooks – Document containment, eradication, and recovery procedures.
  5. Enable 24/7 monitoring – VX SOC analysts continuously monitor your environment.
  6. Review monthly reports – Access dashboards and executive summaries on threat landscape and security posture.

Linux Commands for SOC-Ready Logging:

 Enable auditd for system call monitoring
sudo auditctl -a always,exit -F arch=b64 -S execve -k process_execution

Monitor failed login attempts
sudo grep "Failed password" /var/log/auth.log

Check for unusual outbound connections
sudo netstat -tunap | grep ESTABLISHED

Real-time log tailing with grep filtering
sudo tail -f /var/log/syslog | grep -i "error|fail|attack"

Windows PowerShell Commands for SOC Monitoring:

 Get security event logs (failed logons)
Get-EventLog -LogName Security -InstanceId 4625

Monitor active network connections
Get-1etTCPConnection | Where-Object {$_.State -eq "Established"}

Check for scheduled tasks that may indicate persistence
Get-ScheduledTask | Where-Object {$_.State -1e "Disabled"}
  1. Breach Assessment – Proactive Vulnerability and Cyber Risk Evaluation

Vulsan X Breach Assessment is designed to create organisational awareness of the increasing frequency of cyberattacks and to evaluate the state of cyber defence across the network. Unlike conventional breach assessments that rely on obsolete tap/mirror or span-port-based solutions providing visibility without action, Vulsan X’s approach employs automatic detection and mitigation, operates in stealth mode invisible to attackers (no IP or MAC exposure), and implements multiple security engines capable of detecting and mitigating even the most sophisticated attacks.

The assessment provides a comprehensive risk landscape overview, enabling management to focus resources on critical cyber risk areas. This product won the Best Innovation Product of the Year 2022 by CyberSecurity Malaysia.

Step-by-Step Guide: Conducting a Breach Assessment

  1. Initial consultation – Define assessment scope, critical assets, and compliance requirements.
  2. Deploy assessment sensors – Install Vulsan X’s inline breach assessment appliances (stealth mode, no IP or MAC exposure).
  3. Run automated detection engines – Multiple security engines simultaneously scan for vulnerabilities and active threats.
  4. Analyse findings – Review the comprehensive risk landscape report.
  5. Develop remediation roadmap – Prioritise vulnerabilities based on business impact.
  6. Post-assessment audit – Validate remediation effectiveness and update the breach response program.

Manual Vulnerability Scanning Commands (Supplementary):

 Nmap network scan for open ports
nmap -sV -p- -T4 192.168.1.0/24

Nikto web server vulnerability scanner
nikto -h https://example.com

OpenVAS vulnerability scan (Kali Linux)
gvm-cli --gmp-username admin --gmp-password password socket --socket-path /var/run/gvmd.sock --xml "<get_tasks/>"

Lynis system hardening audit
sudo lynis audit system

Windows Vulnerability Assessment Commands:

 Check for missing patches
Get-HotFix | Sort-Object InstalledOn

Run Microsoft Baseline Security Analyzer (MBSA) from command line
mbsacli /target 127.0.0.1

Check for open ports using Test-1etConnection
Test-1etConnection -ComputerName 192.168.1.10 -Port 445

What Undercode Say:

  • Key Takeaway 1: MySTI certification is not merely a badge of honour—it is a government-backed commercialisation accelerator that grants certified products priority in public sector procurement. For Vulsan X, this transforms six indigenous technologies from R&D projects into revenue-generating, enterprise-grade solutions competing head-to-head with international vendors.

  • Key Takeaway 2: The certification validates a comprehensive, vertically-integrated cybersecurity stack—from threat intelligence (VXCTI) and AI-driven analytics (VAIX) to reputation monitoring (VX Sentinel), OSINT (NeonOSINT), managed SOC (VX SOC), and breach assessment. This holistic approach addresses the full cyber kill chain: prevention, detection, response, and recovery.

  • Key Takeaway 3: The technical differentiator lies in Vulsan X’s proprietary data sources—honeypots deployed across Southeast Asia generating region-specific threat intelligence—combined with AI/LLM capabilities that automate incident storytelling and remediation logic. This is a significant upgrade over traditional SIEMs that merely aggregate logs without contextual intelligence.

  • Key Takeaway 4: The practical commands and integration guides provided above demonstrate that Vulsan X’s solutions are not black boxes; they interoperate with standard security tools (Splunk, firewalls, SIEMs) via APIs and standard protocols, enabling organisations to augment rather than replace existing investments.

  • Key Takeaway 5: Malaysia’s cybersecurity maturity is entering a new phase. With Vulsan X’s MySTI-certified portfolio, the nation is signalling that sovereign cyber defence capabilities are not only desirable but achievable. The company’s expansion into international markets, including Saudi Arabia, and its partnerships with MDEC and CyberSecurity Malaysia, indicate a global ambition backed by local innovation.

Prediction:

  • +1 Malaysia’s MySTI certification framework will increasingly become a benchmark for government procurement, driving demand for locally-developed cybersecurity solutions and creating a domestic cybersecurity industry worth billions by 2030.

  • +1 Vulsan X’s AI-driven approach, particularly VAIX’s 95% detection accuracy and 641 million events processed annually, positions the company as a regional leader in AI-powered threat intelligence, potentially challenging established players like Recorded Future and Mandiant in the Asia-Pacific market.

  • +1 The integration of LLMs for automated incident response (VAIX) and predictive narrative intelligence (VX Sentinel) represents a paradigm shift from reactive to proactive cyber defence—a trend that will redefine SOC operations globally over the next three to five years.

  • -1 However, the effectiveness of these AI models depends on continuous training data quality and adversarial robustness. As offensive AI tools become more sophisticated, Vulsan X must invest heavily in red-team testing and model hardening to maintain its 95% accuracy claim against AI-generated attacks.

  • -1 The reliance on honeypot-collected regional threat data, while valuable, may create blind spots for sophisticated nation-state adversaries that avoid detectable reconnaissance patterns. Complementing honeypot intelligence with human intelligence and dark web monitoring (already addressed by NeonOSINT) will be critical.

  • +1 Vulsan X’s training programmes, including HRDC-sponsored free cybersecurity awareness training for MSMEs and revamped Cyber Defense Courses targeting CISOs and technical roles, will accelerate workforce development—a necessary condition for Malaysia’s digital transformation agenda.

  • +1 The company’s partnerships with universities such as UMPSA and its participation in government initiatives like Smart Nation Expo 2024 signal a long-term commitment to ecosystem building, which will foster innovation, talent retention, and knowledge transfer within Malaysia’s cybersecurity community.

▶️ Related Video (84% Match):

https://www.youtube.com/watch?v=0dlXoORMzUw

🎯Let’s Practice For Free:

🎓 Live Courses & Certifications:

Join Undercode Academy for Verified Certifications

🚀 Request a Custom Project:

Secure, high-velocity infrastructure and disruptive technological engineering. Contact our engineering team for high-tier development and proprietary systems:
[email protected]
💎 Smart Architecture | 🛡️ Secure by Design | ⭐ Trusted by Thousands

IT/Security Reporter URL:

Reported By: Mysti Cybersecurity – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]

💬 Whatsapp | 💬 Telegram

📢 Follow UndercodeTesting & Stay Tuned:

𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky

Related Posts: