CSA Strengthens Support for Cybersecurity Innovation, From Research to Market

[Singapore, 10 November 2026] – The Cyber Security Agency of Singapore (CSA) is strengthening efforts to turn cybersecurity research and innovation into practical solutions that address emerging threats and industry needs, in line with the Singapore Cybersecurity Strategy 2026. At CyberSG Innovation Day 2026, 13 cybersecurity companies were announced as recipients of approximately S$5.6 million in funding under CyberCall 2025, as part of CSA’s efforts to develop capabilities required for long-term national cyber resilience. CyberCall 2026 was also launched to encourage solutions to real-world cybersecurity challenges, alongside initiatives to help cybersecurity companies connect with potential users and bring their innovations to market. These underscore CSA’s commitment to accelerating the co-development of solutions with academia and industry. The developments were highlighted by Minister of State for Ministry of Digital Development and Information Ms Rahayu Mahzam at the event.

2.           These efforts build on the CyberSG initiative launched in 2023, through which CSA has partnered the National University of Singapore (NUS) and Nanyang Technological University (NTU) to strengthen Singapore’s cybersecurity research, innovation and industry ecosystem. They support Singapore’s Cybersecurity Strategy 2026, which aims to develop globally competitive and trusted cybersecurity capabilities, particularly for critical information infrastructure (CII). A key priority is to strengthen the links between research, solution development and industry adoption, so that promising innovations can be translated into capabilities that address real-world cybersecurity challenges.

13 Awardees Identified at Cybersecurity Industry Call for Innovation (CyberCall) 2025

3.           Managed by NUSX, the entrepreneurial heart of NUS, the Talent, Innovation and Growth Collaboration Centre (TIG Centre) brings together initiatives that develop cybersecurity talent, commercialise solutions, and support companies while meeting industry needs. TIG Centre has supported more than 120 companies through its talent, innovation, and growth pillars since its establishment in 2023. A key initiative is the CyberCall, which seeks to catalyse the development of innovative cybersecurity solutions to meet national and strategic needs, as well as support the trial and adoption of novel solutions. The solutions proposed from the 13 awardees include an AI-powered platform for early identification and analysis of AI-enabled risks, an agentic AI framework for cyber threat attribution in Operational Technology (OT) environments, and a quantum-safe red-teaming solution to assess organisations’ exposure to quantum threats. (Details of the CyberCall 2025 awardees are in Annex A)

4.           Continuing on these efforts, CyberCall 2026 was launched to further encourage the development of cybersecurity solutions that address emerging threats and operational needs. This edition comprises an Open Call category and a User-Driven category. The Open Call Category invites proposals in priority areas including cybersecurity for AI systems, AI for cybersecurity, quantum-safe, OT or Internet-of-Things (IoT) security, cloud security, and privacy-enhancing technologies. The User-Driven category invites proposals addressing specific cybersecurity challenges, with the aim of developing solutions that can be adopted by Small Medium Enterprises (SMEs) and participating end-user organisations such as CSA and Civil Aviation Authority of Singapore. The challenge statements include a call for the development of an autonomous detection and incident response tool for fast-moving cyber intrusions, solutions to verify Automatic Development Surveillance-Broadcast messages, detect spoofed, forged or unauthorised transmissions without affecting aviation operations, as well as a solution for SMEs to independently address cybersecurity issues quickly.

5.           The deadline for submission of proposals for CyberCall 2026 is 9 January 2027. For more information, including the latest challenge statements, visit: https://tig.cybersg.sg/program/innovation/cybercall/ (opens in new tab).

Additional support for developers and companies

6.           The TIG Centre has also relaunched its cybersecurity catalogue as CyberSG Atlas, giving users a single platform to discover solutions and services from over 200 Singapore-based cybersecurity companies, with clearer categorisation based on the NIST Cybersecurity Framework^[1] (opens in new tab). A new AI-powered chatbot has also been introduced, making it easier for businesses to identify cybersecurity solutions and guidance in the event of a cyber incident.  

7.           To further give start-ups and developers a leg up, the TIG Centre has convened the CyberSG CISO Advisory Committee, bringing together senior cybersecurity leaders from Critical Information Infrastructure (CII) sectors, government agencies, academia and industry to provide industry perspectives on pressing cybersecurity challenges, barriers to technology adoption and emerging capability gaps.  These insights will help guide future capability development and support startups, researchers and industry partners in developing solutions that address real-world industry needs.

Accelerating R&D translation through CRPO grants

8.           Established by CSA with NTU, the CyberSG R&D Programme Office (CRPO) has been supporting cutting-edge cybersecurity research and development to implement future-ready solutions and foster ecosystem growth. Since 2023, CRPO has awarded more than $40 million in research grants spanning across 23 projects, in areas such as 5G/6G telecommunications security, post quantum cryptography, agentic AI and CII protection. Seven spin-off companies have also been incubated from these projects.

9.           More information on CRPO’s grant calls can be assessed here: https://www.ntu.edu.sg/crpo/crpo-verticals/grant-management (opens in new tab).

^[1] (opens in new tab)  The NIST (National Institute of Standards and Technology) Framework provides guidance to industry, government agencies and other organisations to manage cybersecurity risks.

Annex A

The CyberCall 2025 awardees are:

1.      Amaris.AI (opens in new tab)

• Company description: Amaris.AI (opens in new tab) is a Singapore-based horizontal AI company that delivers sovereign AI, cybersecurity and financial intelligence solutions. It supports organisations in deploying advanced AI capabilities while addressing their security, sovereignty and intelligence needs. Amaris.AI (opens in new tab) has contributed to shaping Singapore's AI cybersecurity standards, including TR 99:2021 and CSA's Companion Guide on Securing AI Systems.

• CyberCall 2025 category: Open Call category - AI for cybersecurity

• CyberCall 2025 solution: To develop an AI-powered horizon-scanning and reasoning platform that strengthens Singapore's national cyber defences through the early identification and analysis of emerging AI-related risks. The platform will be designed to enhance threat hunting and proactive defence through weak-signal detection, automated knowledge correlation and continuous exposure management, while providing resilient operations through sovereign, air-gapped infrastructure. It will also support continuous mapping to localised standards and governance requirements through a scalable, modular architecture.

2.      BlackScore (opens in new tab)

• Company description: BlackScore is an AI-native intelligence platform provider that builds sovereign solutions for government, national security and financial-crime investigators, deployable on-premises or in a government cloud. Its products include BlackFusion, fusing OSINT, cyber threat intelligence and dark-web monitoring, and BlackCase Crypto, for secure inter-agency cryptocurrency investigations. In BlackCase Crypto, every AI-generated finding is cited to its source with a tamper-evident chain of custody, so the intelligence can stand up as evidence in court.

• CyberCall 2025 category: User-driven category - 2025: Inter-Agency Cryptocurrency Investigation Collaboration Platform

• CyberCall 2025 solution: To build a sovereign AI platform for multi-agency cryptocurrency investigations, designed to safeguard operational security and protect sensitive metadata. It clusters related wallets, orchestrates natural-language agentic workflows across blockchain intelligence and OSINT sources, and enables minimal-disclosure deconfliction that alerts agencies to overlapping investigations without exposing case details. Every action carries a full audit trail, supporting complex investigations and secure inter-agency collaboration.

3.      CloudsineAI (opens in new tab)

• Company description: CloudsineAI is a Singapore-based AI cybersecurity company that helps enterprises securely adopt generative AI and agentic AI at scale. Its WebOrion® Monitor web integrity platform protects critical web assets, while its TraceCtrl agentic AI security platform provides organisations with visibility, traceability and control over agentic AI deployments to identify and address emerging threats. WebOrion® Monitor is trusted by more than 40 large enterprises and government organisations across Asia-Pacific, demonstrating the company's capabilities in securing enterprise digital and AI environments.

• CyberCall 2025 category: Open Call category - Cybersecurity for AI

• CyberCall 2025 solution: To develop a purpose-built threat attack graph platform (TAGAAI) for multi-agent AI systems (MAAS) that enables security teams to proactively identify and remediate risks in agentic deployments. The SaaS platform will be designed to combine automated agentic asset discovery, threat attack graph visualisation and quantified smart risk scoring to provide security teams with greater visibility into potential attack paths and risks across multi-agent AI environments.

4.      Ensign InfoSecurity (opens in new tab)

• Company description: Ensign InfoSecurity is a leading pure-play cybersecurity company that offers bespoke solutions ranging from advisory and assurance services to architecture design, systems integration and managed security services for advanced threat detection, threat hunting and incident response, allowing organisations to benefit from deep technical expertise combined with real-world operational experience. The company serves public sector agencies and private enterprises across Singapore and the region.

• CyberCall 2025 category: Open Call category - Operational Technology (OT) / Internet of Things (IoT) Security

• CyberCall 2025 solution: To develop an agentic AI framework using fine-tuned Small Language Models (SLMs) for cyber threat attribution in OT environments. The framework will be designed to correlate OT process anomalies with IT security events to reconstruct incident timelines and causal relationships, providing explainable and auditable root-cause analysis grounded in traceable evidence and reasoning. Purpose-built for constrained, on-premises OT environments, it will also provide remediation recommendations to support safety-critical operations.

5.      Flexxon (opens in new tab)

• Company description: Flexxon is a Singapore-headquartered, next-generation memory solutions provider. Through X-PHY, its cybersecurity business, the company builds AI-powered cybersecurity solutions. These include the X-PHY Cyber Secure SSD, the world's first AI-embedded SSD for data protection, and the X-PHY Deepfake Detector, which detects deepfakes in real time, on-device. The company is a WIPO Global Award 2023 winner with a growing footprint across Asia-Pacific, Europe, North America and the Middle East. It builds security that starts at the silicon level, beneath the software layer.

• CyberCall 2025 category: Open Call category - Cybersecurity for AI

• CyberCall 2025 solution: To develop X-PHY AI Armour, an MCP-native security gateway that combines a software-based MCP Proxy with X-PHY's Secure SSD hardware to protect AI agent-to-agent and agent-to-tool communications. The solution will be designed to inspect JSON-RPC 2.0 traffic for threats such as prompt injection and tool hijacking, enforce identity and session governance and escalate high-risk operations to hardware-enforced lockdown. It aims to achieve over 95% threat detection with sub-5ms latency while supporting more than 10,000 requests per second at production scale.

6.      IdentityPlane (opens in new tab)

• Company description: IdentityPlane is a Singapore-based cloud-native cybersecurity and AI research startup specialising in offensive security and modern identity and access management (IAM). Its solutions include PurpleSwarm, an agentic AI platform for autonomous penetration testing, and GoAM, an open-source, graph-based IAM platform. These solutions enable organisations to strengthen their security and identity infrastructure while maintaining sovereign, in-country operations and data storage. Trusted by organisations across Asia-Pacific and Europe, IdentityPlane brings deep expertise in architecting major enterprise deployments and securing global identity infrastructures.

• CyberCall 2025 category: Open Call category - Cloud Security

• CyberCall 2025 solution: To develop a sovereign identity platform that unifies identity governance for human workforces and autonomous AI agents using a state-machine engine and Infrastructure-as-Code. The platform will be designed to enable a GitOps-based model that enforces peer-reviewed security states for agentic workloads and phishing-resistant authentication for human users. Built on a cloud-independent Kubernetes architecture, it will also support data residency and compliance requirements in Singapore.

7.      ISTARI Global (Singapore) (opens in new tab)

• Company description: ISTARI Global (Singapore) is a Singapore-based, frontier-focused cybersecurity advisory firm founded and owned by Temasek. It brings together a curated ecosystem of expert practitioners to strengthen enterprise cyber resilience, from boardroom strategy through to operations.

• CyberCall 2025 category: Open Call category - AI for cybersecurity

• CyberCall 2025 solution: To develop an AI-assisted, threat-informed cyber crisis exercising and response platform that combines realistic crisis simulations with a secure out-of-band response portal, 'Sanctuary'. The platform will be designed with Temasek as a partner to support AI-assisted facilitation and automated debriefing, with insights from each exercise informing organisations' response readiness for real-world incidents.

8.      pQCee (opens in new tab)

• Company description: pQCee is a quantum cybersecurity technology provider that designs and builds post-quantum products and solutions that allow organisations to strengthen and protect the trillion-dollar digital economy against quantum attacks, securing critical digital assets and infrastructure from emerging threats.

• CyberCall 2025 category: Open Call category - Quantum Safe

• CyberCall 2025 solution: To develop a Quantum Red Teaming solution that simulates adversarial quantum attacks on classical cryptography to identify vulnerabilities and assess organisations' exposure to quantum threats. The solution will be designed to provide an end-to-end cryptanalytic toolchain combining Shor's and Grover's algorithms with data collection and preparation, circuit optimisation and error correction, and post-processing. This will enable organisations to quantify their quantum risk and identify appropriate mitigation measures.

9.      Protos Labs (opens in new tab)

• Company description: Protos Labs is a Singapore-based cyber AI company, founded by former Booz Allen Hamilton cyber operators, that helps organisations operationalise threat intelligence. This allows companies to embed relevant, contextualised intelligence directly into detection, investigation, response and business-risk decision-making. It was selected for both the NVIDIA Inception and Microsoft AI Accelerate programmes, working with local government, defence and intelligence agencies, as well as international corporations.

• CyberCall 2025 category: Open Call category - AI for cybersecurity

• CyberCall 2025 solution: To develop a model-agnostic AI platform that accumulates institutional knowledge across cases and can be deployed within sovereign environments. The platform, Protos AI, will be designed to perform structured, multi-step analysis for targeted security applications, primarily cyber threat intelligence investigations.

10.  Silence Laboratories (opens in new tab)

• Company description: Silence Laboratories is a privacy-preserving computing company that uses cryptographic virtual machines (VMs) to enable secure operations. This allows financial institutions and data partners across the US and Asia to securely collaborate on privacy and encrypted compute use cases. Its technology and expertise are validated by an elite founding team of cryptographers and PhDs with affiliations at MIT, UIUC and NUS, alongside former leaders from VMware, Snap, A.T. Kearney and Oracle.

• CyberCall 2025 category: Open Call category - Privacy-Enhancing Technologies (PET)

• CyberCall 2025 solution: To develop and deploy Silence Laboratories' encrypted compute layer alongside DEX's existing infrastructure to overcome trust bottlenecks, allowing organisations to collaborate and deliver collective intelligence without ever exposing commercially valuable or raw data. The encrypted compute layer will be designed to compute on encrypted inputs, enforce consent-based limits and compile arbitrary logic for private collaboration across existing business workflows.

11.  ST Engineering D'Crypt (opens in new tab)

• Company description: ST Engineering D'Crypt is a Singapore-based cybersecurity innovator that uses a hardware-centric approach to design and develop custom integrated circuits (ICs), encryptors and Federal Information Processing Standard (FIPS) Level 4-certified chips. This allows clients across the military, government and commercial sectors to deliver full-spectrum security and fortify their digital infrastructure against evolving threats. Its multidisciplinary technology and over two decades of expertise were validated globally through its strategic acquisition by the ST Engineering Group in 2024.

• CyberCall 2025 category: Open Call category - Quantum Safe

• CyberCall 2025 solution: To develop a sovereign, quantum-ready Supervisory Control and Data Acquisition (SCADA) dual-mode encryptor that meets national security requirements and provides defence-in-depth against quantum threats. The FIPS-certified link encryptor will be designed to natively integrate Quantum Key Distribution (QKD), employ Post-Quantum Cryptography (PQC) for authentication and utilise built-in secure key storage for operational resilience, safeguarding CIIs and OT environments from malicious commands.

12.  StrongKeep Cybersecurity (opens in new tab)

• Company description: StrongKeep Cybersecurity is a Singapore-based cybersecurity company founded in 2025. It provides fast-to-deploy, comprehensive security solutions designed specifically for non-technical users, allowing small businesses with fewer than 200 staff across healthcare, professional services and other regulated sectors to seamlessly protect their operations and work towards Cyber Essentials and Cyber Trust certification. StrongKeep is working with CSA and A*STAR to make security leadership affordable.

• CyberCall 2025 category: Open Call category - AI for cybersecurity

• CyberCall 2025 solution: To develop, in research collaboration with A*STAR, an agentic AI system that performs the core work of a CISO for companies without one while keeping protection affordable. The system will be designed to pair central AI intelligence with lightweight models that run where small businesses actually work, continuously watching the environment, explaining risks in plain language, prioritising fixes and guiding enterprises through compliance frameworks such as Cyber Essentials.

13.  Veridic (opens in new tab)

• Company description: Veridico is a digital transformation company working towards secure digital workflows that integrates verified-identity e-contracting with intelligent corporate knowledge systems, enabling enterprises to operate within a privacy-preserving environment where they can manage digital trust at scale, ensuring all signatures are attributable and AI-driven insights are source-cited.

• CyberCall 2025 category: Open Call category - Privacy-Enhancing Technologies (PET)

• CyberCall 2025 solution: To develop a platform that ensures all signatures are attributable, documents are tamper-evident and trust converges with document intelligence in a secure environment. The platform will be designed to integrate verifiable digital signing with AI-enabled corporate intelligence, combining Singpass-integrated identity assurance, blockchain-anchored audit trails and a governed Second Brain knowledge graph to deliver deterministic, source-cited answers from verified records for enterprises.