About Cerebo

Security intelligence,
grounded in practicality

We exist to help Malaysian organisations navigate the intersection of artificial intelligence and cybersecurity — without the confusion, and without the hype.

Back to Home

Our Story

Built for the Malaysian security landscape

Cerebo was founded in Kuala Lumpur with a straightforward observation: the security challenges facing Malaysian organisations were growing in sophistication, but the available tools and advisory were largely imported from contexts very different from the local reality — different regulatory frameworks, different threat actors, different technology stacks.

Our founders — a small team of security analysts, data scientists, and enterprise IT professionals — saw a clear need for an organisation that could bring AI-backed security intelligence to Malaysian businesses on their own terms. Not as a technology showcase, but as a working practice.

Since our early engagements, we have worked with organisations across financial services, healthcare, manufacturing, and public sector technology — each time learning more about what works, what doesn't, and what Malaysian security teams actually need from AI-assisted analysis.

Today, Cerebo is a focused specialist firm. We do not try to be everything. We offer three well-defined services — threat detection, vulnerability assessment, and SOC advisory — and we deliver them with care, transparency, and respect for our clients' time and resources.

Mission

To help Malaysian organisations build security practices that are genuinely AI-informed — reducing real risk, not just producing reports.

Vision

A Malaysia where organisations of all sizes can access the security awareness and resilience that advanced AI analysis enables — without needing a multinational budget.

Approach

Direct, honest engagements. We scope clearly, deliver carefully, and measure ourselves by whether our clients' security postures genuinely improve.

How We Work

Our Core Values

Honesty in Assessment

We report what we find — not what sounds impressive. If AI adds limited value in a given context, we say so.

Depth Before Breadth

We serve three services well, rather than promising dozens superficially. Depth produces better outcomes for clients.

Knowledge Transfer

Every engagement builds your team's understanding. Our clients leave better equipped, not more dependent on us.

Local Understanding

We understand Malaysian regulatory context, local infrastructure realities, and the specific pressures your security team faces.

The People

Our Team

A compact, experienced group of security and AI professionals — each with direct background in Malaysian enterprise environments.

Ahmad Razif

Co-Founder & Principal Security Architect

Fourteen years in enterprise cybersecurity across financial services and telco sectors in Malaysia. Led SOC design and SIEM implementation projects for Tier-1 institutions.

Lim Wei Ling

Co-Founder & Head of AI Research

Applied machine learning specialist with a focus on anomaly detection in network and system log data. Previously with a global AI research group before returning to Malaysia.

Siti Rohani

Senior Vulnerability & Compliance Analyst

Specialises in vulnerability prioritisation and compliance-aligned reporting. Extensive experience with CyberSecurity Malaysia frameworks and PDPA implementation advisory.

Standards & Protocols

How We Maintain Quality

Each engagement follows a structured protocol designed to produce consistent, trustworthy outputs — regardless of scope or complexity.

Data Confidentiality

All client data is handled under a formal confidentiality agreement. Log and network data used in analysis never leaves agreed boundaries. We comply with Malaysia's PDPA 2010.

Structured Methodology

Every engagement follows a documented process — scoping, data collection, analysis, findings validation, and debrief. No shortcuts at any stage.

CyberSecurity Malaysia Alignment

Our vulnerability reporting and advisory outputs are structured in line with CyberSecurity Malaysia guidance, making findings actionable within the local regulatory context.

Model Validation

AI models used in threat detection engagements are validated against known attack patterns before deployment. We document model performance metrics and share them with clients.

Findings Validation

Every finding is reviewed by a second analyst before delivery. We do not include findings in reports that we cannot substantiate — accuracy matters more than volume.

Client Debrief Standard

Every engagement concludes with a structured debrief session where your team can ask questions, challenge findings, and leave with clear next-step ownership.

AI Cybersecurity in Malaysia — Cerebo's Perspective

The adoption of artificial intelligence within Malaysian security operations has accelerated substantially in recent years. Organisations managing financial data, patient records, manufacturing control systems, and public infrastructure are all asking the same question: how do we make AI work for security without introducing new complexity we can't manage?

Cerebo's work begins from the position that AI in cybersecurity is most valuable when it is well-scoped. Machine learning can detect subtle deviations in network behaviour that rule-based systems miss. AI-assisted vulnerability scoring can help security teams direct limited remediation resources toward what genuinely poses business risk. Advisory that helps a SOC analyst understand when AI adds signal — rather than noise — is worth more than any platform licence.

Our Kuala Lumpur base gives us direct familiarity with the operational realities of Malaysian organisations — the infrastructure choices, the staffing constraints, the regulatory landscape shaped by CyberSecurity Malaysia, BNM guidelines, and PDPA obligations. This context shapes everything we recommend and deliver.

Work with a team that knows this landscape

If you'd like to understand whether our approach fits your situation, a brief introductory call is the simplest place to start.

Get in Touch

Security intelligence,grounded in practicality