Home / Categories / Application Security & Delivery
Application Security & Delivery: vendors and distributors in Southeast Asia
Products that protect and deliver applications: web application and API protection, bot and DDoS mitigation at the application layer, load balancers, and the testing tools that find flaws in code and cloud configurations before release. Buyers range from network teams (delivery, WAF) to development teams (testing, cloud posture).
What is sold under this label
- Web application and API protection (WAF/WAAP)
- Inspects requests to websites and APIs and blocks injection, abuse and other application-layer attacks.
- Application delivery (ADC)
- Load balancers that distribute traffic across servers and often host the WAF and TLS termination.
- Bot management
- Tells automated traffic from human users to stop credential stuffing, scraping and fraud.
- Application security testing (SAST/DAST)
- Finds flaws in source code (static) and in running applications (dynamic) before release.
- Software composition analysis (SCA)
- Lists the open-source components in an application — the SBOM — and flags known vulnerabilities and licence problems.
- Cloud-native application protection (CNAPP)
- Combines cloud configuration checks (CSPM) with protection of the workloads and containers running there.
Regulations that call for it
Requirements from the regulation guides published on this site that put this category into a purchase.
- MAS TRM — TRM Guidelines, section 6. Secure software development: security testing and control over open-source use.
- MAS TRM — TRM Guidelines, section 14. Security of online financial services, where WAF and bot management protect customer-facing channels.
- BNM RMiT — DDoS. DDoS mitigation services, including automatic clean-pipe services.
- Singapore PDPA — PDPC ICT practices: web security. Web application firewalls and security testing for websites and databases that hold personal data.
The guides give the full requirement, the source document and what changes next. They are not legal advice.
Application Security & Delivery vendors and where they have channel
| Vendor | Singapore | Indonesia | Malaysia | Philippines | Thailand | Vietnam |
|---|---|---|---|---|---|---|
| Akamai | 5 | 4 | 2 dist | 4 | 2 | 4 |
| Imperva | 4 | 2 | 3 | 3 | 5 | 4 |
| A10 Networks | 2 dist | 2 dist | 3 | 4 | 2 | 1 dist |
| F5 | 3 | 4 | 2 | 2 dist | 1 dist | 1 dist |
| Checkmarx | 2 dist | 3 | 2 | 2 | · | · |
| Sonatype | 1 dist | 1 dist | 2 | 1 | 1 dist | 1 dist |
| Aqua Security | 2 | 1 dist | 1 dist | · | 1 dist | 1 dist |
| Penta Security | 1 | · | · | · | · | 2 |
| Apigee | · | · | 1 dist | 1 dist | · | · |
| CDNetworks | · | · | · | · | · | 2 |
| Fastly | 1 | 1 | · | · | · | · |
| Guardsquare | · | 1 | · | · | · | 1 |
| Sysdig growth | 1 dist | · | 1 dist | · | · | · |
| Appknox | · | 1 | · | · | · | · |
| Chainguard growth | 1 | · | · | · | · | · |
| ForceShield | 1 | · | · | · | · | · |
| Invicti | · | · | · | · | 1 | · |
| Orca Security | · | · | · | 1 | · | · |
| PortSwigger (Burp Suite) | · | · | · | · | 1 | · |
| Secure Code Warrior | 1 | · | · | · | · | · |
| Snyk growth | · | 1 | · | · | · | · |
| Wallarm | · | · | 1 | · | · | · |
| Wiz | · | · | · | 1 | · | · |
Numbers are companies listed for that vendor and country; "dist" means distributors only so far. Click a number for the list, or a vendor for its profile.
Tracked, with no public ASEAN channel record yet: Aikido Security growth, Noma Security growth, Semgrep growth, Upwind growth, Veracode, Zenity growth.
Distributors carrying Application Security & Delivery vendors
Distributors on public record in each country, with the vendors of this category they carry.
Singapore
- Netpoleon Solutions Pte Ltd — A10 Networks, Akamai, Aqua Security, Sonatype
- Westcon-Comstor (Singapore) — Akamai, Checkmarx, F5
- M.Tech (Singapore) — Checkmarx, Sysdig
- Exclusive Networks Singapore Pte. Ltd. — F5
- Ingram Micro (Singapore) — A10 Networks
Indonesia
- PT INDOPOLEON TECHNOLOGY — A10 Networks, Akamai, Aqua Security, Checkmarx, Sonatype
- Westcon-Comstor (Indonesia) — Akamai, Checkmarx, F5
- Exclusive Networks Indonesia (ENID), PT — F5
- Ingram Micro (Indonesia) — A10 Networks
Malaysia
- Adaptive Netpoleon Malaysia Sdn Bhd — Akamai, Aqua Security, Sonatype
- Westcon-Comstor (Malaysia) — Akamai, Checkmarx, F5
- M.Tech (Malaysia) — Apigee, Sysdig
- Exclusive Networks (Malaysia) — Imperva
Philippines
- Westcon-Comstor (Philippines) — A10 Networks, Akamai, Checkmarx, F5
- Netpoleon Philippines Inc. — A10 Networks, Akamai, Imperva
- Exclusive Networks (Philippines) — F5
- M.Tech (Philippines) — Apigee
Thailand
- Netpoleon (Thailand) Co., Ltd. — A10 Networks, Akamai, Aqua Security, Sonatype
- Exclusive Networks (Thailand) — F5, Imperva
Vietnam
- Netpoleon Indochina Pte Ltd — A10 Networks, Akamai, Aqua Security, Sonatype
- Exclusive Networks (Vietnam) — F5
Get new distributor appointments in this category in the weekly newsletter.