In a bid to strengthen Malaysia’s digital self-reliance and curb vulnerability to overseas solutions, homegrown technology firm Aras Integrasi Sdn Bhd has launched three proprietary cybersecurity platforms at CyberDSA 2026.
The platforms, governance, risk and compliance (GRC) solution VoronCitadel, threat intelligence system GovSec, and blockchain investigation tool chainSENTRY, are engineered entirely by local talent using in-house high-performance computing infrastructure.
Aras Integrasi Director of Cyber Security Practice Faurani Jaafar emphasised that establishing indigenous technical capabilities is critical to long-term national resilience.
“Technology sovereignty is not about isolation or rejecting international collaboration. It is about understanding our dependencies and being deliberate about where ownership, operational control and local competence must be strongest,” he added, noting that ownership without domestic capability leaves organisations exposed to external policy shifts and foreign vendor lock-in.
The rollout comes at a crucial juncture as public and private organisations align operations with the Cyber Security Act 2024 (Act 854) and National Cyber Security Agency (NACSA) frameworks. With enforcement expected to tighten ahead of 2027, institutions, particularly National Critical Information Infrastructure (NCII) entities and financial service providers, face stringent compliance mandates, including Bank Negara Malaysia’s Risk Management in Technology (RMIT) and the Securities Commission's guidelines.
VoronCitadel provides an integrated dashboard for cyber risk and third-party vendor exposures, designed to offer mid-tier financial firms and critical infrastructure operators an accessible alternative to expensive foreign enterprise suites.
GovSec, an artificial intelligence-assisted threat intelligence platform developed in technical collaboration with CyberSecurity Malaysia (CSM), actively tracks public-facing vulnerabilities across vast public sector digital infrastructure.
“The government is the largest custodian of citizen data, alongside sensitive national administrative information. Protecting this information from breaches is not merely an IT concern; it is a matter of national security,” Faurani noted, explaining that GovSec provides passive attack surface visibility to pre-empt security exploits before attackers can strike.
Addressing the rise of illicit digital finance, the third platform, chainSENTRY, equips law enforcement agencies, regulators, and compliance officers with blockchain tracing and wallet forensics capabilities. Featuring 31 specialized analytical modules, it assists investigators in de-anonymising illicit cryptocurrency flows tied to financial crime and money laundering.
Unlike software reliant on public overseas cloud providers, Aras Integrasi built the solution leveraging its own domestic computing cluster powered by 64 enterprise-grade GPUs.
“If you're using the cloud, for example, we have to pay for our paper use. So when we can in house, the developers have a lot of freedom. They can play as much as they want. And they can come up with their own experiments,” Farul said.
Farul also highlighted the growing global concern over AI-driven cyber threats, such as autonomous models executing hacks, emphasising the necessity of independent infrastructure to counter them.
“The question is not if, it's when it's going to happen to you. The other question is, are you prepared for it?” Farul said.
He stressed that sovereign capability is essential for independent incident response.
“It's time that we also realise that as a nation and all the other sovereign countries around the world, you need to have that capability to at least do the investigation themselves. And then, from there, you can react. So, that's one of the reasons why we are pushing sovereignty a lot,” he added.
“You have the capability and capacity to be able to handle future threats from cybersecurity.”
While the company is currently conducting proof-of-concept testing with domestic regulatory bodies and government agencies, Aras Integrasi indicated plans to eventually export its software platforms to regional markets as demand for independent, non-aligned sovereign tech solutions accelerates globally.
