# Penetration Testing & Cybersecurity Services | AwareXone > Penetration testing, threat intelligence, incident response, dark web monitoring and security advisory from AwareXone in Malaysia. Scoped engagements. Source: https://www.awarexone.com/services/cybersecurity Package 02 / 03 5 service lines # Cybersecurity Services Applications, infrastructure and the chain behind a pretext Authorised penetration testing, threat intelligence, dark-web monitoring, incident response and advisory. The technical work behind a successful social-engineering path, and the response when something lands. [Get Security Help](https://www.awarexone.com/contact)See the service lines fig. 02 Cybersecurity Services 1. 01Surface mappingExternal estate, cloud, identity paths and shadow IT 2. 02Continuous collectionLookalike domains, credential dumps and leak sites 3. 03Manual exploitationChained by hand, because scanners only find the known 4. 04Analyst triageA short list rated by business impact, not raw CVSS 5. 05Response and retestContainment when it lands, then proof it is closed Where the agents work Agentic reconnaissance and triage widen the ground a test can cover and keep intelligence running around the clock. Every finding is reproduced by hand before it reaches your report. What you are left holding Findings an engineer can close without a follow-up call, and a retest letter when they have. 01 ### Penetration Testing Find it before somebody sells it. Manual, evidence-led testing of your applications, APIs, networks, cloud and identity estate - with a free retest once you have fixed things. Web & API Cloud Internal network Retest included What you get · 7 items Automated scanners find known issues. We find the ones that come from how your systems were assembled: broken authorisation between tenants, a forgotten staging host with production credentials, an identity path that turns a low-privilege account into domain admin. Every finding is reproduced by hand, rated by real business impact rather than a raw CVSS number, and written so an engineer can fix it without a follow-up call. A retest is included, because a report nobody can close is just paperwork. - Web application, API and mobile application testing - External and internal network testing - Cloud configuration review across AWS, Azure and GCP - Active Directory and identity attack path analysis - Manually verified findings with reproduction steps - Business-impact prioritisation and remediation guidance - Free retest and clean letter of attestation 02 ### Cyber Threat Intelligence Know which attacks are already aimed at you. Continuous, AI-enriched intelligence on the actors, pretexts, lookalike domains and leaked credentials targeting your organisation and your sector. Lookalike domains Credential exposure Brand impersonation Sector reporting What you get · 7 items Most threat intelligence fails for the same reason most awareness training does: it arrives as volume rather than as a decision. We run collection against the things that actually predict an attack on you - newly registered lookalike domains, credentials surfacing in breach dumps and combolists, your executives' names appearing in impersonation infrastructure, and the pretexts circulating against your sector right now. Agentic pipelines do the correlation and the first pass of triage, which is what makes continuous coverage affordable; an analyst decides what reaches you. Every item ships with the reason it matters to you specifically and the action that closes it, so the output is a short list you can work, not a feed you learn to ignore. - Lookalike and typosquat domain monitoring with takedown support - Credential and combolist exposure monitoring for your domains - Executive and brand impersonation tracking across platforms - Sector-specific pretext and campaign reporting - AI-assisted correlation and triage, with analyst review before delivery - Prioritised, actioned findings rather than a raw feed - Monthly intelligence briefing mapped to your risk register 03 ### Dark Web Monitoring & Data Removal Shrink what an attacker can buy about you. Continuous monitoring of breach dumps, leak sites and criminal forums, paired with sustained removal of your people's data from brokers and people-search sites. Breach monitoring Broker removal Leak site watch Verified alerts What you get · 7 items Every pretext starts with research, and most of that research is simply purchased. Data brokers publish home addresses and phone numbers; credential dumps hand over reused passwords; ransomware leak sites expose your suppliers' documents about you. We watch all three continuously and act on what we find. Removal is treated as an ongoing service rather than a cleanup project, because brokers re-scrape and records reappear within months. Every alert is verified by a human before it reaches you, so your team is not drowning in noise. - Continuous dark web, paste site and leak site monitoring - Breach and credential dump matching for corporate and personal identities - Data broker and people-search removal with re-listing enforcement - Search engine de-indexing of removed records where possible - Ransomware leak site watch for you and your key suppliers - Analyst-verified alerts with recommended action - Monthly exposure reduction reporting 04 ### Incident Response & Deepfake Verification For the call that is happening right now. Retained response for live social engineering incidents, plus an urgent verification line for suspected cloned voices, deepfake calls and fraudulent payment requests. Retainer Deepfake verification BEC triage Post-incident review What you get · 7 items Social engineering incidents are decided in minutes. Someone is on a video call with a face they recognise, being asked to release a payment before close of business. We give organisations a rehearsed route out of that moment: a documented verification protocol every employee knows, a number to call when something feels wrong, and a retained team that can triage, contain and coordinate recovery when a request turns out to be genuine fraud. Afterwards we run the post-incident review that stops the same pretext from working twice. - Retained response with agreed engagement times - Urgent verification line for suspected deepfake or cloned voice contact - Out-of-band verification protocol designed and rolled out - Business email compromise triage and containment - Payment recall coordination and evidence preservation - Regulatory and law enforcement notification support - Post-incident review and pretext-specific retraining 05 ### Security Advisory & vCISO Someone senior in the room, without the headcount. Fractional security leadership: strategy, policy, risk register, vendor review and certification readiness for teams that cannot justify a full-time CISO yet. Fractional CISO ISO 27001 SOC 2 Risk register What you get · 7 items Growing companies usually do not need a security department. They need one experienced person who can tell them which three things matter this quarter and which twenty can wait. We embed as that person: we run the risk register, write policy that people will actually follow, sit in customer security reviews on your behalf, and prepare you for the certification your largest prospect is about to demand. If you already have a security function, we review it and tell you honestly where it is thin. - Security strategy and prioritised roadmap - Risk register, ownership and review cadence - Policy and standards written for your actual operating model - ISO 27001, SOC 2 and NIST CSF readiness assessments - Third-party and supply chain risk reviews - Customer security questionnaire and due diligence support - Board and audit committee reporting ### Tell us what is in scope Applications, APIs, cloud, identity, or the chain behind a pretext. You get an approach, a timeline, and what the free retest covers. [Request Security Assessment](https://www.awarexone.com/contact) Looking for something else? [Social Engineering & Training](https://www.awarexone.com/services/social-engineering) ## Subscribe to receive notifications of new posts Email address Subscribe We'll never share or sell your email address.