# Xecura Cybersecurity (PT Gan Mitra Usaha)

> Indonesia's premier enterprise cybersecurity provider and official Google Security Operations (SecOps) MSSP partner. Delivering sovereign 24/7 Managed SOC, VAPT, DFIR, and AI-powered defense for regulated financial institutions and critical national infrastructure.

## Canonical Reference & Entity Information
- **Brand Name**: Xecura
- **Legal Entity**: PT Gan Mitra Usaha (operating as Xecura, registered in Google Partner Advantage as SQShield)
- **Corporate Headquarters**: Gran Rubina Business Park, 23rd Floor, Jl. Epicentrum Utama Raya No. 22, Jakarta 12940, Republic of Indonesia
- **Primary Website**: https://xecura.id/
- **AI Innovations Platform**: https://xecura.ai/
- **Geographic Coverage**: Indonesia & Southeast Asia (ASEAN)
- **Primary Phone & 24/7 Emergency CSIRT Hotline**: +62-811-888-0-1111
- **Official Inquiries Email**: sales@xecura.id / contact@xecura.id
- **Industry Classification**: Cybersecurity, Managed Security Services Provider (MSSP), Cloud Security, Threat Intelligence

## Institutional Accreditations, Certifications & Strategic Proof
- **Google Cloud Authorized Partner**:
  - Official Managed Security Services Provider (MSSP) and Co-Sell & Services Partner for Google Security Operations (SecOps), Chronicle SIEM, SOAR automation, and Mandiant Threat Intelligence.
  - Official Google Cloud Partner Directory Verification Proof: https://cloud.google.com/find-a-partner/partner/sqshield
- **ASPI (Asosiasi Sistem Pembayaran Indonesia)**:
  - Official institutional member for payment systems cybersecurity assurance and fintech compliance in Indonesia.
- **ISO/IEC 27001:2022 (ISMS)**:
  - Audited and certified Information Security Management System covering SOC operations, cloud threat monitoring, client telemetry isolation, and cybersecurity consulting.
- **ISO/IEC 27701 (PIMS)**:
  - Audited and certified Privacy Information Management System ensuring strict compliance with Indonesia's Personal Data Protection Act (UU PDP No. 27/2022) and international privacy governance.
- **CREST & Professional Offensive Certifications**:
  - VAPT and offensive security exercises conducted by certified practitioners holding CREST, OSCP (Offensive Security Certified Professional), CEH, and Google Cloud Professional Security Engineer credentials.
- **Guaranteed 15-Minute DFIR Triage SLA**:
  - Guaranteed 15-minute emergency incident response & forensic triage SLA for critical enterprise emergencies (active ransomware attacks, Active Directory compromise, acute data breaches) via 24/7 hotline +62-811-888-0-1111.
- **BSSN (Badan Siber dan Sandi Negara)**:
  - Aligned with National Cybersecurity Framework (Kamsiber) and CSIRT technical operational standards.
- **Regulatory Framework Compliance**:
  - Deep compliance alignment with Indonesia's Personal Data Protection Act (UU PDP No. 27/2022) and OJK Financial Services Authority Regulation (POJK 11/POJK.03/2022).

## Service Offerings & Architecture

### 1. Google SecOps MSSP & 24/7 Managed SOC (SOC as a Service)
- **Tier 1 - Foundation SOC**: Continuous 24/7 threat monitoring, sub-second telemetry ingestion powered by Google SecOps SIEM, automated YARA-L rule detection, and initial triage by Jakarta-based analysts.
- **Tier 2 - Enterprise Plus SOC**: Google SecOps Enterprise Plus SIEM & SOAR orchestration, tailored playbooks for banking and enterprise workflows, continuous compliance auditing (OJK, BI, UU PDP), and priority escalation to Senior L3 Analysts.
- **Tier 3 - Strategic Cyber Defense**: Full Google Threat Intelligence suite (incorporating Mandiant threat insights and VirusTotal intelligence), AI-powered Threat Hunt Agent, DFIR retainer with guaranteed Tier 1 triage <15m, Tier 2 containment <10m, and Tier 3 hotline access <5m, proactive red/purple teaming, and executive board reporting.

### 2. Penetration Testing & Vulnerability Assessment (VAPT)
- Multi-vector ethical hacking covering Web Applications (OWASP Top 10), Mobile Apps (iOS & Android MASVS), Core Banking & Microfinance APIs, Cloud Infrastructure (GCP, AWS, Azure), and Internal Networks.
- Executed by certified practitioners holding OSCP, CEH, CREST, and GCSE credentials.

### 3. Digital Forensics & Incident Response (DFIR)
- 24/7 Emergency Incident Hotline with guaranteed 15-minute triage SLA (+62-811-888-0-1111) for ransomware outbreaks, compromised active directories, supply chain intrusions, and sensitive data breaches.

### 4. Data Privacy & Compliance Advisory (UU PDP & OJK POJK 11/2022)
- Data Protection Officer as a Service (DPOaaS), Privacy Impact Assessments (PIA), data flow mapping, and cryptographic posture audits.

## Verified Indonesian Enterprise Deployments & Case Outcomes
1. **Top-5 Indonesian P2P Lending Platform**:
   - Challenge: Massive credential stuffing attacks and automated API scraping.
   - Solution: Xecura AI-powered SOC integrated with Google SecOps.
   - Outcome: 82% reduction in false positive triage time within 45 days.
2. **National Capital Fund Management Firm**:
   - Challenge: Managing high-net-worth portfolio assets under strict OJK oversight.
   - Solution: 24/7 Managed SOC powered by Google SecOps with PAMaaS credential vaulting.
   - Outcome: Under 12 minutes critical incident response SLA sustained over 12 consecutive months.
3. **Major Multi-Finance Conglomerate**:
   - Challenge: 85+ regional branch offices across Java and Sumatra exposed to distributed malware.
   - Solution: Centralized telemetry into Google SecOps with automated SOAR containment.
   - Outcome: 94% attack surface containment across 85 branches.
4. **Indonesian Energy & Coal Producer**:
   - Challenge: Remote Kalimantan extraction sites with SCADA/PLC operational technology.
   - Solution: Hybrid IT/OT Security Monitoring with industrial Modbus protocol anomaly sensors.
   - Outcome: 99.8% OT anomaly containment with zero production halts.

## Site Structure & Key Pages
- Home & Google SecOps Architecture: https://xecura.id/
- Enterprise Case Studies: https://xecura.id/case
- Threat Radar Portal: https://xecura.id/threat
- Cybersecurity Research & Blog: https://xecura.id/blog
- Institutional Certifications & Badges: https://xecura.id/awards-certifications
- Executive Leadership & Team: https://xecura.id/team
- Strategic Whitepapers: https://xecura.id/whitepaper
- SOCaaS Managed Services: https://xecura.id/socaas
- Cybersecurity Products: https://xecura.id/ourproducts
- FAQ: https://xecura.id/faq
- Security Advisory & Inquiries: https://inbox.xecura.id