Home / Categories / Security Operations (SIEM, NDR, Threat Intel)
Security Operations (SIEM, NDR, Threat Intel): vendors and distributors in Southeast Asia
The tools a security operations centre runs on: log management and SIEM, network detection and response, SOAR automation, threat intelligence, and the packet brokers and data pipelines that feed them. Smaller organisations often consume it through an MSSP rather than run it themselves.
47vendors tracked
41with an ASEAN channel record
79partner companies
23distributors (by country)
What is sold under this label
- SIEM
- Security information and event management: collects logs from across the organisation, correlates them into alerts and keeps them for investigation and compliance.
- SOAR
- Security orchestration, automation and response: runs playbooks that enrich alerts and carry out response steps across other tools.
- Network detection and response (NDR)
- Analyses network traffic for attacker behaviour that endpoint tools cannot see, such as lateral movement and unmanaged devices.
- Threat intelligence
- Feeds and platforms describing attackers, their infrastructure and leaked data, including monitoring of the dark web and of an organisation's external footprint.
- Network visibility
- Packet brokers and TAPs that copy and filter traffic for security and monitoring tools.
- Deception
- Decoy systems and credentials that have no legitimate use, so any touch signals an intruder.
Regulations that call for it
Requirements from the regulation guides published on this site that put this category into a purchase.
- MAS TRM — TRM Notice: incident notification. Notify MAS within 1 hour of discovering a relevant incident and file a root cause report within 14 days.
- BNM RMiT — Security operations. A SOC operating 24x7, a monthly threat assessment report and a threat intelligence subscription; logs kept for at least three years.
- Malaysia Cyber Security Act 2024 (NACSA) — Section 23: incident notification. NCII entities notify immediately, add details within 6 hours and file a fuller report within 14 days.
- Singapore PDPA — Data breach notification. Notify the PDPC within 3 calendar days once a breach is found to be notifiable.
The guides give the full requirement, the source document and what changes next. They are not legal advice.
Security Operations (SIEM, NDR, Threat Intel) vendors and where they have channel
Numbers are companies listed for that vendor and country; "dist" means distributors only so far. Click a number for the list, or a vendor for its profile.
Tracked, with no public ASEAN channel record yet: 7AI growth, Dropzone AI growth, Huntress growth, Simbian growth, Tines growth, Torq growth.
Distributors carrying Security Operations (SIEM, NDR, Threat Intel) vendors
Distributors on public record in each country, with the vendors of this category they carry.
Singapore
- M.Tech (Singapore) — Anomali, Darktrace, Exabeam, Gigamon, Intezer, NetWitness, Vectra
- Netpoleon Solutions Pte Ltd — Cribl, Exabeam, Google Cloud Security, NETSCOUT, Recorded Future, Splunk, Swimlane
- Ingram Micro (Singapore) — Arctic Wolf, Cyberint (Check Point), Mandiant (Google Cloud), Rapid7
- Westcon-Comstor (Singapore) — ExtraHop, NETSCOUT, Splunk, Sumo Logic
- Exclusive Networks Singapore Pte. Ltd. — Anomali
Indonesia
- PT INDOPOLEON TECHNOLOGY — Chainalysis, Cribl, Exabeam, Google Cloud Security, NETSCOUT, Recorded Future, Splunk, Swimlane, Vectra
- M.Tech (Indonesia) — Darktrace, Exabeam, Gigamon, NetWitness, Vectra
- Westcon-Comstor (Indonesia) — ExtraHop, Gigamon, NETSCOUT, Splunk, Sumo Logic
- Ingram Micro (Indonesia) — Cyberint (Check Point), Group-IB, Mandiant (Google Cloud)
Malaysia
- Adaptive Netpoleon Malaysia Sdn Bhd — Cribl, Exabeam, Google Cloud Security, NETSCOUT, Recorded Future, Swimlane, TeamT5, Vectra
- M.Tech (Malaysia) — Darktrace, Exabeam, Gigamon, Intezer, NetWitness, Vectra
- Westcon-Comstor (Malaysia) — ExtraHop, NETSCOUT, Splunk, Sumo Logic
- INGRAM MICRO MALAYSIA SDN. BHD — Arctic Wolf, Elastic
- Anon Security — Arctic Wolf
Philippines
- Netpoleon Philippines Inc. — Chainalysis, Cribl, Exabeam, Google Cloud Security, NETSCOUT
- Westcon-Comstor (Philippines) — ExtraHop, Gigamon, NETSCOUT, Splunk, Sumo Logic
- M.Tech (Philippines) — Exabeam, Gigamon, NetWitness, Vectra
- Exclusive Networks (Philippines) — Vectra
Thailand
- Netpoleon (Thailand) Co., Ltd. — Cribl, Exabeam, Google Cloud Security, NETSCOUT, Recorded Future, Swimlane, Vectra
- M.Tech (Thailand) — Exabeam, Gigamon, NetWitness, Vectra
- Ingram Micro (Thailand) — Cyberint (Check Point), Mandiant (Google Cloud)
Vietnam
- Netpoleon Indochina Pte Ltd — Cribl, Exabeam, NETSCOUT, Rapid7, Recorded Future, Swimlane, TeamT5, Vectra
- M.Tech (Vietnam) — Darktrace, Exabeam, Gigamon, NetWitness, Vectra, Veramine
A vendor is filed under its main product line, so vendors that sell across several categories appear once. Records come from vendors' public partner directories, distributor vendor pages, partners' own websites and vendor announcements, last verified on 2026-11-12. Suar Signal describes product types in neutral terms and does not rank or endorse vendors or partners. Something wrong or missing? Tell us.
Get new distributor appointments in this category in the weekly newsletter.